Privacy Policy

FlipList AI ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the FlipList AI web application (app.fliplist.ai), website (fliplist.ai), and Chrome browser extension.

By using our services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information
When you create an account, we collect your email address and a hashed password. We do not store passwords in plain text.

Payment Information
Payment processing is handled entirely by Stripe. We do not store or have access to your credit card numbers. We only store your Stripe customer ID and subscription status.

Usage Data
We collect data about how you use our service, including the number of card lookups performed, modes used (Sell, Buy, Grade), and general usage patterns. This helps us improve the product and enforce plan limits.

Card Search Data
When you perform a card lookup, we process the card details you enter (player name, year, set, grade, etc.) to retrieve market data. We may log these queries to improve accuracy and performance. We do not sell this data.

Chrome Extension
The FlipList AI Chrome Extension reads eBay listing page content (title and price) solely to provide card analysis. This data is:

• Only read when you actively click the extension icon
• Sent to our servers only to perform the analysis you requested
• Never stored, sold, or shared with third parties
• Never used for advertising or tracking purposes

The extension also stores your authentication token locally in Chrome storage to keep you signed in. This token is only used to authenticate requests to FlipList AI servers.

2. How We Use Your Information

• To provide and maintain the FlipList AI service
• To process your card lookups and return market intelligence
• To manage your account, subscription, and credit balance
• To send transactional emails (welcome email, billing receipts)
• To improve accuracy and performance of our AI models
• To enforce usage limits based on your plan
• To communicate important updates about the service

3. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We share data only with trusted service providers who help us operate the platform:

• Supabase — database and authentication
• Stripe — payment processing
• Anthropic — AI analysis (card queries only, no personal data)
• CardHedger — sports card market data
• eBay — sold listing data via public API
• Resend — transactional email delivery
• Railway — application hosting

All third-party providers are bound by their own privacy policies and are not permitted to use your data for any other purpose.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.

5. Security

We take reasonable measures to protect your information including encrypted connections (HTTPS), hashed passwords, and secure token-based authentication. However, no method of transmission over the internet is 100% secure.

6. Cookies

FlipList AI uses minimal cookies and local browser storage to maintain your session and authentication state. We do not use advertising cookies or third-party tracking cookies.

7. Children's Privacy

FlipList AI is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Opt out of non-transactional communications

To exercise any of these rights, contact us at the email below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.