Find & Flip Privacy Policy

Last updated: September 9, 2026

1. Who we are and scope

Find & Flip LLC operates Find & Flip at findandflip.io. This Privacy Policy explains how we collect, use, disclose, and retain personal information through our website, apps, browser extension, support, and related tools, including crosslisting. Contact support@findandflip.io for privacy questions or requests. Marketplace websites and other third parties have their own privacy practices. Acknowledging this policy is not blanket consent to optional marketing or all possible processing.

2. Account, preferences, and support information

We collect information you provide, including name, email, username, password credentials, optional phone number, support messages, and account settings. Passwords for Find & Flip accounts are stored as hashes. We store search ZIP code or location preferences, radius, categories, saved searches, notification preferences, and relevant account activity. For new signups we record the server time and versions of the Terms and Privacy Policy accepted or acknowledged. Social sign-in provides identifiers and profile information such as email, name, and email verification status from the sign-in provider; it does not itself connect that provider's marketplace for crosslisting.

3. Inventory, photos, research, and transactions

We process listing titles, descriptions, photos and image URLs, prices, condition, quantity, SKU, notes, tags, location, category, delivery options, marketplace overrides, templates, source links, and listing identifiers. We also process saved items, research requests and results, scanner photos, inventory costs, sales information, and other information you enter or import. Photos and listing text may reveal personal details, addresses, faces, or location; remove information you do not want processed or published before uploading. Do not upload sensitive identification or payment information. Public marketplace data and connected-account data can also supply listing details and status information.

4. Connected marketplaces and authorization tokens

When you connect a supported marketplace using authorization such as OAuth, we receive the granted permissions and account or shop details needed for the integration. We store encrypted access and refresh tokens, token expiry, connection metadata, account labels, and connection status on our servers where required by that integration. These tokens allow authorized operations without providing us your marketplace password. We use them to retrieve or send listing data and perform the actions you request. Browser-assisted integrations instead use the marketplace session available in your browser. These connection methods have different data flows; local marketplace cookies and server-held API authorization tokens are not the same thing.

5. Browser extension and workflow diagnostics

The optional extension operates in the browser profile where you install it. It uses your Find & Flip session and stores an access token locally to communicate with our API. It can check marketplace login cookies locally, interact with supported marketplace pages, fill or submit listing and messaging forms for requested workflows, and report connection health, extension version, job progress, remote listing links, and errors to Find & Flip. Marketplace login cookies used by these browser workflows are not copied to our servers. Workflow troubleshooting can include page URLs, headings, field labels and values, available options, errors, and relevant HTML excerpts. This is broader than merely filling seller messages. Disable or remove the extension to stop its future browser activity; separately disconnect server-based integrations and manage already published listings.

6. AI features and service providers

We use OpenAI for features including item or photo analysis, research assistance, listing content generation, and, when enabled, assistance resolving crosslisting form errors. Depending on the feature, we send relevant images, listing content, prompts, and selected marketplace page or form details to the AI provider. The Service may store generated output, request metadata, and usage records. Do not include private information unnecessary for the feature. AI providers process submitted data under the terms and settings applicable to our service accounts. This policy does not promise zero provider retention or that submitted content never enters provider abuse-monitoring systems. You can avoid submitting content to optional AI tools; enabled crosslisting repair can process relevant form context during the workflow.

7. Payment and subscription information

Stripe processes subscription payments. We receive and retain customer and subscription identifiers, plan and billing status, trial information, invoices, and payment-related records needed to administer your account. Find & Flip does not store full payment card numbers or card security codes. Payment information submitted to Stripe is handled under its privacy policy. Marketplace transaction fees and payments are handled separately by the relevant marketplace or payment service.

8. Device, activity, and local storage

We collect technical and activity information such as IP addresses, browser and device details, login events, visits and feature activity, timestamps, notification delivery information, and diagnostic logs to operate, secure, and improve the Service. Cookies and local storage maintain sessions, authentication, preferences, and related functionality. Browser controls can clear or block them, but doing so can interrupt sign-in and connected workflows. Device settings control camera or photo access and push notifications where those permissions are requested. We do not treat a general browser Do Not Track signal as a substitute for available account preferences or rights requests; applicable legally required opt-out signals remain subject to applicable law.

9. Why we use information

We use information to create and secure accounts, deliver research and alerts, manage inventory, perform requested crosslisting and messaging actions, process subscriptions, provide support, diagnose failures, prevent fraud and abuse, and maintain and improve the Service. We also use it to communicate about accounts, billing, security, product changes, and marketing where permitted. Where data protection law requires a legal basis, we rely as applicable on performing our contract with you, legitimate interests in operating and securing the Service, legal obligations, and consent for processing that requires it. You may withdraw consent for that processing without affecting earlier lawful processing.

10. Who receives information

We disclose relevant information to hosting, storage, infrastructure, communications and notification providers, Stripe, OpenAI, and other service providers helping operate the Service. Connected marketplaces receive the content and account data needed for your selected actions. Once published, listing details, images, seller information, and location may become visible to marketplace users or the public under that marketplace's rules. Authorized support and operations personnel may access information when needed for their work. We may also disclose information when legally required, to protect rights and security, or in connection with a merger, financing, or sale of the business, subject to applicable protections. We do not sell personal information or provide extension data to advertisers. A marketplace's independent reuse of published content is governed by its own policy.

11. Retention and deletion

We retain account and operational information as needed to provide the Service, maintain security, respond to support, and administer connected workflows. Retention depends on the information's purpose, account status, legal obligations, dispute needs, and backup cycles, rather than a single fixed period. Billing, tax, security, and acceptance records may need to be retained after account closure. When information is no longer needed, we delete or de-identify it through our applicable processes; backup copies may persist until their normal replacement. Request account or content deletion at support@findandflip.io. Deleting information in Find & Flip does not automatically delete live marketplace listings, third-party copies, or cached public content. Manage those with the marketplace as well.

12. Your choices and privacy requests

Update available profile, search, and notification settings in your account. Use marketing unsubscribe controls or contact support to opt out of promotional email; necessary service messages may continue. Disconnect marketplace connections in the product where available and revoke authorization in the marketplace itself to stop future API access. Pending or already completed actions may still need attention on the marketplace. Contact support@findandflip.io from your account email to request access, correction, a copy, deletion, or other applicable privacy rights. Describe the request without sending a password. We may verify identity or authority and may retain or decline to disclose information where law permits or requires. We will explain applicable limitations and respond within legally required periods.

13. Regional privacy rights

Depending on your location and whether the relevant law applies, you may have rights to know or access personal information, correct it, delete it, receive a portable copy, restrict or object to processing, withdraw consent, or opt out of sale, sharing for targeted advertising, or certain profiling. California residents may have rights under the CCPA when applicable; other U.S. state laws may provide similar rights and a right to appeal a denied request. Submit requests or appeals to support@findandflip.io with the subject Privacy request or Privacy appeal. An authorized agent may contact us with proof of authority where permitted. We do not discriminate for exercising applicable privacy rights. Where European or UK data protection law applies, you may also complain to your competent supervisory authority. This section describes rights that depend on applicable law and does not assert that every law applies to every user or to our business.

14. Security and international processing

We use safeguards designed to protect information, including hashed Find & Flip passwords and encrypted marketplace authorization tokens where stored by server integrations. No system or transmission can be guaranteed secure. Protect your devices and report suspected account compromise promptly. Our operations and service providers may process information in countries other than where you live, where privacy laws may differ. Where applicable law requires safeguards for cross-border transfers, those requirements apply to our processing. Contact support for questions about your information or relevant providers.

15. Age limits and policy changes

The Service is intended for people age 18 or older. We do not knowingly collect personal information from children under 18. If you believe a child provided information, contact support so we can investigate and take appropriate action. We will update the date of this policy when revised and provide notice of material changes through the Service or email as required by law. Where a change requires consent, we will request it. Privacy contact: Find & Flip LLC, support@findandflip.io.