Privacy policy

Information we collect

When you create an account, we collect your name, email address, password in hashed form, and account settings. Your optional reseller profile can include a shop name, general location, selling experience, business interests, and goals.

We store the records you enter or import, including inventory, SKUs, purchase costs, sales, fees, shipping amounts, refunds, expenses, mileage, budgets, recurring business costs, sources, storage locations, and notes. CSV imports also create import summaries and saved column mappings.

Community information includes posts, photos, price checks, replies, comments, sourcing trips, follows, blocks, reports, and notification preferences. If you contact us, we receive the information in your message.

Our service and infrastructure may receive technical information such as IP addresses, browser and device details, requested pages, timestamps, referrers, and error or security logs. We use an analytics service at analytics.refitcomputing.com to understand visits and use of the site.

How we use information

We use information to create and secure accounts, organize resale records, calculate reports, run the community, synchronize connected accounts, send account and requested notification emails, answer support requests, investigate abuse, troubleshoot problems, and improve the service.

We do not sell personal information or provide it to advertisers for targeted advertising. We do not use your connected eBay information to publish listings or make purchases on your behalf.

Connecting eBay

Connecting eBay is optional. You sign in and grant access through eBay. FlipHall receives authorization tokens rather than your eBay password. We store the seller account identifier and username, an encrypted refresh token, connection status, and sync results.

With your authorization, we request listing and order information to update your FlipHall inventory and sales. Saved information includes item and order identifiers, titles, SKUs, listing photo URLs, quantities, prices, dates, shipping amounts, and order status. Although eBay API responses may contain additional buyer information, the current sync does not save buyer names, email addresses, shipping addresses, or buyer profiles.

You can disconnect eBay in Settings or revoke access through eBay. Disconnecting stops future syncs and removes our saved authorization token; it does not automatically delete previously imported records. Contact us to request removal of those records.

We also receive account-deletion notifications from eBay. After authenticating a notification that matches a connected seller, we remove the saved eBay authorization and seller identifiers and remove or clear associated imported eBay records. This can remove eBay sales and listings from your workspace. Your separate FlipHall account and independently maintained records are not automatically closed or deleted by an eBay notification.

Gmail marketplace sale review

The optional Gmail pilot uses a separate Google authorization for FlipHall with read-only mailbox permission. FlipHall searches for marketplace sale notices from Depop, Mercari, Vinted and Poshmark. Google grants mailbox-wide read access; our application narrows its searches to those sale messages. Checks do not send, delete, archive or mark messages read.

Matching messages are parsed temporarily without AI. We do not download attachments or store the full email body, and do not extract buyer names or shipping addresses. We retain the subject as supplied by the sender, mailbox and message references, date, platform, optional order reference, marketplace item links and review status so you can inspect and confirm a sale. These references remain private to your workspace and are not used for advertising, model training or public community posts. Messages may not all be recognized; verify the receipt and record missing sales manually.

Google authorization tokens are encrypted on our server. You can pause checks or disconnect Gmail in Settings. Disconnecting removes our saved tokens and email review cards; sales you already confirmed remain in your bookkeeping with an opaque reference to avoid duplicate recording. You can separately revoke FlipHall in your Google account. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Photo clean-up and listing drafts

The optional photo and listing workspace lets you add photos to an item, remove their backgrounds, check them against a shot list, and draft an eBay title and description. This processing runs on equipment operated by FlipHall rather than a third-party AI service. The photos you add are stored with your item.

To process a photo, FlipHall sends it (or a reduced copy) and any notes you type to that equipment, which returns a result. Working copies kept there for processing are deleted automatically after about 30 days. Drafts are generated by software, can be wrong, and are visible only to your account unless you copy them elsewhere. Daily limits apply, and the feature can be unavailable when the equipment is offline.

Ask FlipHall assistant

The Ask button answers questions about your own workspace: inventory, sales, budget, profit and loss, research, and saved deals. When you ask, FlipHall sends your question, your recent messages in that chat, and the workspace figures needed to answer to an AI model running on equipment operated by FlipHall rather than a third-party AI service. The connection to that equipment passes through Cloudflare.

The assistant can only read; it cannot change your records. Each answer uses only your account's data. Your 30 most recent chats are saved privately to your FlipHall account so you can reopen them; you can delete individual chats from the Ask history panel. Test-store chats used while viewing another account remain only in your browser. FlipHall also records the time of each question and how long it took to apply the daily limit. The model is not trained on your questions or data. Answers are generated by software and can be wrong, so check important numbers. Daily limits apply, and the assistant can be unavailable when the equipment is offline.

In Settings you can also create an AI assistant key for an assistant you run yourself. Anyone holding that key can read the same workspace information and save online auction deals for your account, so only give it to software you control, and revoke it in Settings when you stop using it.

Community visibility and uploaded photos

Content you post to the community is visible to other signed-in members according to the feature you use. Shop information and sourcing statistics may be shown on community boards when you enable that option. Inventory and bookkeeping records are not automatically published as community posts. You can separately enable a public link for an individual story, price check, or sold flip. Public sharing is off by default and can be disabled from the item page.

A public story can show its content, photo, optional amounts, and your displayed shop name. A public price check shows the post and anonymous response totals without member names or reply text. A public sold flip can show the item, displayed shop name, marketplace, sale amounts, costs, fees, and calculated profit, but not buyer, order, tracking, storage, or private note information.

Uploaded photos are served through direct web links. Anyone who obtains a photo link may be able to view it without signing in. Do not upload confidential documents, addresses, identity documents, or other information you do not want others to see. Other members may copy or share content they can access.

Cookies and service providers

We use essential cookies to keep you signed in and protect the eBay connection process. Blocking these cookies may prevent those features from working. Our site also loads the analytics service described above; your browser's privacy controls can restrict third-party requests.

Hosting, storage, email, and analytics providers process information needed to deliver their services. We use Resend for account verification, password reset, and enabled community notification emails. Connecting eBay sends authorization and API requests to eBay, whose own privacy policy also applies to its services.

Authorized operators may access information for support, maintenance, security, and moderation. We may disclose information when required by law, to protect people or the service, or in connection with a business transfer subject to applicable protections. Processing may occur in countries other than where you live.

Retention and security

We retain account and workspace information as needed to provide the service, maintain records you choose to keep, and meet applicable legal, security, or dispute-resolution needs. Disconnecting an integration or stopping use of the site does not by itself erase your account. You can request deletion by contacting us below.

Deletion requests may require separate handling of operational data, uploads, exports, and backups. Some information may need to be retained where a legal obligation or another applicable exception requires it. We do not promise that every copy disappears immediately when a request is submitted.

We use safeguards including password hashing, account access controls, and encryption of saved eBay refresh tokens. No method of transmission or storage is completely secure. Keep your password private and contact us if you suspect unauthorized access.

Your choices and privacy requests

You can update available profile and account settings, turn off community email notifications, change board visibility, disconnect eBay, and export supported inventory and sales records from the app.

To request access, correction, a copy of your information, or deletion of your account or connected-account data, email [email protected]. Tell us which account and information your request concerns. We may need to verify account ownership before acting. Do not send your password, API keys, or identity documents unless we arrange an appropriate verification process with you.

Depending on where you live, you may have additional rights to object to or restrict processing, withdraw consent, or complain to a privacy regulator. We handle requests in accordance with applicable law.

Children and policy updates

FlipHall is intended for people managing resale businesses and is not directed to children under 13. If you believe a child has provided personal information, contact us so we can investigate and address it.

We may update this policy as the service changes. We will update the date on this page and provide additional notice when required by applicable law.