Privacy policy

Information we collect

When you create an account, we collect your name, email address, password in hashed form, and account settings. Your optional reseller profile can include a shop name, general location, selling experience, business interests, and goals.

We store the records you enter or import, including inventory, SKUs, purchase costs, sales, fees, shipping amounts, refunds, expenses, mileage, sources, storage locations, and notes. CSV imports also create import summaries and saved column mappings.

Community information includes posts, photos, price checks, replies, comments, sourcing trips, follows, blocks, reports, and notification preferences. If you contact us, we receive the information in your message.

Our service and infrastructure may receive technical information such as IP addresses, browser and device details, requested pages, timestamps, referrers, and error or security logs. We use an analytics service at analytics.refitcomputing.com to understand visits and use of the site.

How we use information

We use information to create and secure accounts, organize resale records, calculate reports, run the community, synchronize connected accounts, send account and requested notification emails, answer support requests, investigate abuse, troubleshoot problems, and improve the service.

We do not sell personal information or provide it to advertisers for targeted advertising. We do not use your connected eBay information to publish listings or make purchases on your behalf.

Connecting eBay

Connecting eBay is optional. You sign in and grant access through eBay. FlipHall receives authorization tokens rather than your eBay password. We store the seller account identifier and username, an encrypted refresh token, connection status, and sync results.

With your authorization, we request listing and order information to update your FlipHall inventory and sales. Saved information includes item and order identifiers, titles, SKUs, quantities, prices, dates, shipping amounts, and order status. Although eBay API responses may contain additional buyer information, the current sync does not save buyer names, email addresses, shipping addresses, or buyer profiles.

You can disconnect eBay in Settings or revoke access through eBay. Disconnecting stops future syncs and removes our saved authorization token; it does not automatically delete previously imported records. Contact us to request removal of those records.

We also receive account-deletion notifications from eBay. After authenticating a notification that matches a connected seller, we remove the saved eBay authorization and seller identifiers and remove or clear associated imported eBay records. This can remove eBay sales and listings from your workspace. Your separate FlipHall account and independently maintained records are not automatically closed or deleted by an eBay notification.

Community visibility and uploaded photos

Content you post to the community is visible to other signed-in members according to the feature you use. Shop information and sourcing statistics may be shown on community boards when you enable that option. Inventory and bookkeeping records are not automatically published as community posts.

Uploaded photos are served through direct web links. Anyone who obtains a photo link may be able to view it without signing in. Do not upload confidential documents, addresses, identity documents, or other information you do not want others to see. Other members may copy or share content they can access.

Cookies and service providers

We use essential cookies to keep you signed in and protect the eBay connection process. Blocking these cookies may prevent those features from working. Our site also loads the analytics service described above; your browser's privacy controls can restrict third-party requests.

Hosting, storage, email, and analytics providers process information needed to deliver their services. We use Resend for account verification, password reset, and enabled community notification emails. Connecting eBay sends authorization and API requests to eBay, whose own privacy policy also applies to its services.

Authorized operators may access information for support, maintenance, security, and moderation. We may disclose information when required by law, to protect people or the service, or in connection with a business transfer subject to applicable protections. Processing may occur in countries other than where you live.

Retention and security

We retain account and workspace information as needed to provide the service, maintain records you choose to keep, and meet applicable legal, security, or dispute-resolution needs. Disconnecting an integration or stopping use of the site does not by itself erase your account. You can request deletion by contacting us below.

Deletion requests may require separate handling of operational data, uploads, exports, and backups. Some information may need to be retained where a legal obligation or another applicable exception requires it. We do not promise that every copy disappears immediately when a request is submitted.

We use safeguards including password hashing, account access controls, and encryption of saved eBay refresh tokens. No method of transmission or storage is completely secure. Keep your password private and contact us if you suspect unauthorized access.

Your choices and privacy requests

You can update available profile and account settings, turn off community email notifications, change board visibility, disconnect eBay, and export supported inventory and sales records from the app.

To request access, correction, a copy of your information, or deletion of your account or connected-account data, email [email protected]. Tell us which account and information your request concerns. We may need to verify account ownership before acting. Do not send your password, API keys, or identity documents unless we arrange an appropriate verification process with you.

Depending on where you live, you may have additional rights to object to or restrict processing, withdraw consent, or complain to a privacy regulator. We handle requests in accordance with applicable law.

Children and policy updates

FlipHall is intended for people managing resale businesses and is not directed to children under 13. If you believe a child has provided personal information, contact us so we can investigate and address it.

We may update this policy as the service changes. We will update the date on this page and provide additional notice when required by applicable law.