Privacy Policy

1. Introduction

FlipList AI ("we," "us," or "our") operates the website fliplistai.com and associated services, including our web application, Chrome extension, mobile progressive web app, and public API (collectively, the "Service").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using FlipList AI, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

We may collect the following types of information when you use our Service:

• Account Information: When you create an account, we collect your email address and password. Authentication is managed through Supabase, our third-party authentication provider.
• Uploaded Photos: Photos you upload are sent to our AI service for analysis and listing generation. Images are processed in real-time and are not permanently stored on our servers.
• Generated Listings: Listing content generated by the AI is stored in your account history if you are logged in, so you can access it later.
• Payment Information: When you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not store your credit card numbers, bank account details, or other sensitive financial information on our servers.
• Usage Data: We automatically collect information about how you interact with the Service, including features used, listings generated, and frequency of use.
• Device Information: We may collect information about the device you use to access the Service, including device type, operating system, browser type, and screen resolution.
• Cookies & Local Storage: We use cookies and browser local storage to maintain your session, remember your preferences, and collect analytics data.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain the Service: Including processing your photos, generating listings, storing your listing history, and managing your account.
• To Process Payments: Managing subscriptions, billing, and related payment operations through our payment processor, Stripe.
• To Improve the Service: Analyzing usage patterns to enhance features, fix bugs, optimize performance, and develop new functionality.
• To Communicate With You: Sending service-related notices, responding to support inquiries, and providing information about updates or changes to the Service.
• For Analytics: Understanding aggregate usage trends and user behavior to improve the overall user experience.

4. AI-Generated Content

FlipList AI uses artificial intelligence (powered by Anthropic Claude) to analyze your uploaded photos and generate reseller listings. Here is how your data is handled in this process:

• Photos you upload are sent to our AI provider (Anthropic) for real-time analysis and description generation.
• Images are processed in real-time and are not permanently stored on our servers or Anthropic's servers after processing is complete.
• Generated listing content (titles, descriptions, tags, etc.) is stored in your account history if you are logged in, allowing you to access and manage your listings at any time.
• AI-generated content is provided as a starting point. We recommend reviewing and editing all generated listings before publishing to any marketplace.

5. Third-Party Services

We use the following third-party services to operate FlipList AI. Each has its own privacy policy governing the use of your information:

• Supabase: Authentication and database services. Manages user accounts, session tokens, and data storage. Supabase Privacy Policy
• Stripe: Payment processing for subscriptions. Handles all credit card and billing information securely. Stripe Privacy Policy
• Cloudflare: Website hosting, content delivery network (CDN), and image processing services. Cloudflare Privacy Policy
• Anthropic: AI content generation powered by Claude. Processes uploaded photos and generates listing descriptions. Anthropic Privacy Policy
• Google Analytics: Website analytics to understand traffic patterns and user behavior in aggregate. Google Privacy Policy
• eBay: Optional OAuth integration that allows you to connect your eBay account for direct listing. If you choose to connect your eBay account, we access your eBay seller data only as needed to publish listings on your behalf. eBay Privacy Policy

6. Cookies & Tracking

FlipList AI uses the following cookies and tracking technologies:

• Google Analytics Cookies: Used to collect anonymous usage statistics, including page views, session duration, and traffic sources. You can opt out by installing the Google Analytics Opt-out Browser Add-on.
• Local Storage: Used to store your preferences, session data, seller profiles, and cached listing history on your device. This data does not leave your browser unless you are logged in, in which case it may sync with our servers.
• Stripe Cookies: Set by Stripe during the payment process to enable secure transaction processing and fraud prevention.

7. Data Retention

We retain your data according to the following guidelines:

• Account Data: Retained for as long as your account is active. If you delete your account, your personal data will be removed from our systems within 30 days, except where retention is required by law.
• Listing History: Retained until you manually delete individual listings or your entire account. You can delete listings at any time from within the app.
• Uploaded Photos: Photos are processed in real-time and are not permanently stored on our servers. They are discarded after AI processing is complete.
• Payment Records: Transaction records may be retained as required for accounting, tax, and legal compliance purposes.
• Analytics Data: Aggregate, anonymized analytics data may be retained indefinitely to improve the Service.

8. Your Rights (GDPR / CCPA)

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal data.
• Right to Deletion: You may request that we delete your personal data, subject to certain legal exceptions.
• Right to Data Portability: You may request a machine-readable copy of your data to transfer to another service.
• Right to Opt Out: You may opt out of analytics tracking by using browser-based opt-out tools or by disabling cookies in your browser settings.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, please contact us at sundeen10@fliplistai.com. We will respond to your request within 30 days.

9. Data Security

We take the security of your data seriously and implement industry-standard measures to protect it, including:

• All data transmitted between your browser and our servers is encrypted using HTTPS (TLS/SSL).
• User authentication is handled through Supabase with encrypted tokens and secure session management.
• Payment data is processed by Stripe, a PCI DSS Level 1 certified payment processor.
• API keys and secrets are stored securely as encrypted environment variables and are never exposed in client-side code.
• Our infrastructure is hosted on Cloudflare, which provides DDoS protection, Web Application Firewall (WAF), and other security features.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

FlipList AI is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal data from a child under 13, we will take steps to delete that information as promptly as possible.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at sundeen10@fliplistai.com so we can take appropriate action.

11. Chrome Extension

The FlipList AI Chrome Extension provides convenient access to our listing generation service directly from your browser. Regarding data collection:

• The extension sends photo data to our servers solely for the purpose of AI-powered listing generation.
• No browsing history, bookmarks, or other browser data is collected, accessed, or transmitted by the extension.
• The extension stores minimal data locally (authentication tokens and user preferences) using Chrome's built-in storage APIs.
• All communication between the extension and our servers is encrypted via HTTPS.

12. API Users

If you access FlipList AI through our public API, the following additional terms apply:

• API Keys: Your API keys are stored securely using encryption. You are responsible for keeping your API keys confidential and should not share them publicly.
• Usage Logging: API usage data, including request counts, timestamps, and endpoint details, is logged for the purposes of billing, rate limiting, and abuse prevention.
• Data Processing: Data submitted through the API (including images) is processed in the same manner as data submitted through the web application and is subject to the same retention and security policies described in this Privacy Policy.

13. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will revise the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

For material changes that significantly affect how we handle your personal data, we may provide additional notice through the Service or via email to the address associated with your account.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: sundeen10@fliplistai.com

We will do our best to respond to all inquiries within 30 days.