FlipVOS
Privacy Policy
Last updated: May 13, 2026
FlipVOS is operated by FlipVO LLC (“FlipVOS,” “we,” “our,” or “us”). This Privacy Policy explains what we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It applies to the website at flipvos.com and any related services we operate. By using FlipVOS you agree to this policy.
1. Information we collect
We collect the minimum information needed to run the product:
- Account data. Your email address and a hashed password. If you sign up for launch updates we keep that preference on your record.
- Billing data. Plan, subscription status, and billing history. Card numbers and bank details are handled directly by Stripe; we never see or store them.
- Lookup data. The item descriptions, barcodes, photos, voice clips, search queries, and verdicts (BUY / MAYBE / PASS) tied to your account, plus timestamps. This is what powers your history and helps us improve comp data quality.
- Temporary media. Photos you upload are stored in Amazon S3 with a 24-hour lifecycle delete. Voice audio is transcribed and the raw bytes are discarded immediately after transcription; only the resulting text is retained as part of your lookup history.
- Technical data. IP address, browser type, device type, and cookies. We use this for rate-limiting (especially the free tier), session security, and basic analytics. We do not use third-party advertising cookies.
- Support communications. If you email us, we keep the message and our reply.
2. How we use it
We use the information above to:
- Run the service — authenticate you, return verdicts, show your history, and bill you.
- Enforce free-tier limits, prevent abuse, and investigate fraud or terms violations.
- Send transactional email (receipts, password resets, security notices, plan changes).
- Send product updates only if you opted in. You can opt out from any such email.
- Improve comp data quality and the AI input/output pipeline in aggregate.
- Comply with our legal obligations.
3. Third-party processors
We rely on a small number of vendors to operate the service. They process data on our behalf under their own privacy and security commitments; they are not allowed to use your data for their own purposes.
- Stripe — payment processing and subscription management.
- OpenAI — photo vision, voice transcription, and text normalization. The text, photo, or audio you submit for a lookup is sent to OpenAI for processing.
- Google (Gemini) and Anthropic — may be used as alternative or comparison AI providers for the same lookup pipeline. The same inputs may be sent.
- Sentry — error and performance telemetry. Stack traces may include redacted user input.
- Amazon Web Services — hosting, S3 storage, and SES transactional email.
- eBay Browse API — fallback source for comparable sold listings. We send anonymous search queries; no account-identifying data is sent.
We do not sell your personal information, we do not share it with advertisers, and we do not allow third parties to use it for cross-context behavioral advertising.
4. How long we keep it
- Account data — for as long as your account is active.
- Lookup history — for as long as your account is active, so you can browse it.
- Photo uploads — deleted automatically within 24 hours of upload.
- Voice audio — discarded immediately after transcription.
- Billing records — retained as required by tax and accounting law (typically seven years).
- Error logs — rotated out within 90 days.
When you delete your account we remove your account data and lookup history within 7 days. Anonymized, aggregated statistics that no longer identify you may be retained.
5. Your rights
Depending on where you live (including California under the CCPA/CPRA and the EU/UK under the GDPR), you have some or all of the following rights:
- Access — ask what personal information we hold about you.
- Export — request a machine-readable copy of your data.
- Correction — ask us to fix anything inaccurate.
- Deletion — ask us to delete your account and associated data.
- Opt-out of sale or sharing — we do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of, but the right is preserved.
- Non-discrimination — we will not penalize you for exercising any of these rights.
- Withdraw consent — where we rely on consent (for example, optional marketing email), you can withdraw it at any time.
To exercise any of these rights, email support@flipvos.com from the address on your account. We respond within 30 days. You can also lodge a complaint with your local data protection authority.
6. Children
FlipVOS is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, email support@flipvos.com and we will delete it.
7. International users
FlipVOS is offered to users in the United States at this time. Our servers and most of our processors are located in the United States. If you access the service from outside the U.S. you understand that your information will be processed in the United States, which may have different data protection laws than your home country.
8. Security
Passwords are hashed. Traffic is served over HTTPS. Access to production data is limited to a small number of administrators and is logged. No system is perfectly secure, and we cannot guarantee absolute security, but we work to follow industry-standard practices.
9. Changes to this policy
If we materially change this policy we will update the “Last updated” date at the top and, where appropriate, notify you by email or in-app. Continued use of FlipVOS after a change means you accept the updated policy.
10. Contact
FlipVO LLC
Privacy requests:
support@flipvos.com