Legal

Privacy Policy

Last updated: February 17, 2026

1. Scope

Services covered: This Privacy Policy applies to FLIPSAIL websites, web app, browser extension, cloud automation services, and mobile app features that link to this policy.
Marketplace integrations: FLIPSAIL supports workflows across marketplaces including Poshmark, Depop, eBay, Etsy, Mercari, and Whatnot.
User-controlled automation: FLIPSAIL acts on your instructions and configured settings to help with cross-listing, syncing, monitoring, and automation.

2. Information We Collect

Depending on which FLIPSAIL features you use, we collect:

Account Information: Name, email address, login identifiers, and account preferences.
Billing Information: Subscription and payment metadata from payment processors (we do not store full payment card numbers on FLIPSAIL servers).
Marketplace Connection Data: Session/authentication data required to connect supported marketplaces, including cookies or tokens when you authorize connection features.
Listing and Inventory Data: Item titles, descriptions, prices, images, listing status, inventory states, and related performance signals needed for syncing and automation.
Automation and Configuration Data: Rules, schedules, feature toggles, and workflow settings you configure.
Technical and Diagnostic Data: App and extension version, browser/device type, error logs, and performance telemetry used for reliability and support.
Support and Communications: Messages you send to support and related troubleshooting details.

3. How We Use Your Information

We use your information to:

Authenticate users and secure accounts.
Connect supported marketplaces and maintain active integrations.
Run user-enabled automation, syncing, and monitoring workflows.
Power cloud-connected experiences between extension, web, and mobile surfaces.
Send critical service notifications, status updates, and alerts.
Improve product quality, performance, and feature reliability.
Prevent abuse, detect fraud, and enforce platform/security controls.
Comply with legal and regulatory requirements.

4. Browser Extension Permissions and Data Use

FLIPSAIL requests browser permissions to deliver user-requested functionality. Permission use is limited to extension features and declared host domains.

activeTab: Used after user interaction to access the current tab and run requested actions.
tabs: Used to query, open, and update tabs required for marketplace workflows.
scripting: Used to inject packaged scripts on supported pages for automation and sync features.
webNavigation: Used to detect relevant page navigation events and initialize extension logic at the correct time.
cookies: Used to read required marketplace/session cookies for account connection and credential synchronization.
storage: Used for settings, state, cached data, and local preferences.
unlimitedStorage: Used to reliably store larger local caches and historical operational state.
alarms: Used to schedule background sync and validation tasks in Manifest V3 service worker contexts.
identity: Used for OAuth-based sign-in and account identity flows.
notifications: Used to show important product alerts, sync status, and credential reminders.
host permissions: Used on supported marketplace and FLIPSAIL domains to provide integration functionality.
Remote code statement: FLIPSAIL does not execute remotely hosted code as extension logic. Executable extension code is packaged with the extension. Network calls are used for APIs and data services.

5. Information Sharing

We do not sell personal information. We share data only as needed to operate FLIPSAIL:

Infrastructure and data services: Cloud hosting, database, and operational providers.
Payments: Payment processors for subscription billing and account management.
Authentication providers: OAuth providers used for sign-in (for example, Google when selected by the user).
Feature providers: Optional third-party services used only when related features are enabled (for example, selected AI or image-processing workflows).
Legal and safety disclosures: When required by law, subpoena, court order, or to protect users and FLIPSAIL rights.
Business transfers: In a merger, acquisition, financing due diligence process, or asset sale, subject to standard confidentiality protections.

6. Cookies and Local Storage

FLIPSAIL uses cookies, local storage, and related browser storage technologies to maintain sessions, preserve settings, and support secure authentication and integration state. Some workflows may not work properly if storage access is blocked.

7. Data Security

We implement industry-standard security measures including encryption, secure servers, and regular security audits. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain data for as long as needed to provide the service, maintain account functionality, satisfy legal obligations, resolve disputes, and enforce agreements. Retention windows vary by data type and operational need.

9. Your Rights and Choices

You have the right to:

Access and download your personal data
Correct inaccurate information
Request deletion of your data
Opt-out of marketing communications
Object to processing of your data

To exercise these rights, contact us at privacy@flipsail.io

10. International Data Transfers

Your information may be processed in countries other than your own. Where required, we use contractual and operational safeguards designed to protect personal data during cross-border processing.

11. Children's Privacy

Our services are not intended for users under 18. We do not knowingly collect personal information from children. If we learn that a child has provided personal data, we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy to reflect product, legal, or operational changes. Material updates will be posted on this page with an updated effective date.

13. Contact Us

For privacy-related questions, contact us at privacy@flipsail.io