Privacy Policy

1. Who we are

FlipPilot (“we”, “us”) is an inventory and profit-tracking tool for second-hand resellers, operated from the United Kingdom. We are the data controller for the personal data described in this policy.

Contact for anything privacy-related: siteliftstudios@gmail.com

2. What we collect

• Account details — your email address, password (stored as a secure hash, never readable by us), and any name or username you choose to add.
• Your business data — the inventory items, photos, sales, expenses, sourcing rules and goals you enter. This is your data; we store it so the app works.
• Payment data — none. FlipPilot is currently free and takes no payments. If paid plans launch in future, payments would be handled entirely by Stripe; we would never see or store your card details.
• Waitlist email — if you join the waitlist on our homepage, we store the email address you give us.
• Technical data — the session cookie that keeps you logged in. We do not run advertising or analytics trackers.

3. Why we use it (lawful bases)

• To provide the service (contract) — storing and showing your inventory, calculating your profits, processing your subscription.
• To keep the service secure and working (legitimate interests) — authentication, error logs, preventing abuse.
• To email the waitlist about FlipPilot (consent) — you can withdraw consent any time by replying or emailing us.

4. Where your data lives

We use a small number of service providers to run FlipPilot:

• Supabase — database, login and photo storage.
• Stripe — subscription payments, only if/when paid plans launch (billing is currently switched off).
• Vercel — hosting.

These providers may process data outside the UK; where they do, they rely on recognised safeguards such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses. We do not sell your data to anyone.

When you use the “import from Vinted” feature, our server fetches the public listing page for the link you paste. None of your personal data is sent to Vinted or any other marketplace.

5. The leaderboard

The community leaderboard shows your username only, alongside aggregate figures (profit, items sold). Your email and real name are never shown. Setting your profile visibility to Privatein Settings shows you as “Anonymous” instead.

6. Cookies and local storage

We use only essential cookies — the ones that keep you signed in. There are no advertising or third-party analytics cookies, which is why you don't see a cookie banner. Your browser's local storage holds small preferences (like your inventory view choice) and demo-mode data; it never leaves your device.

7. How long we keep data

For as long as you have an account. Deleting your account (Settings → Data) removes your account and business data from our systems. Payment records held by Stripe are retained as required by tax and accounting law.

8. Your rights

Under UK data protection law you can:

• Access / exportyour data — there's a one-click CSV export in Settings → Data.
• Correctanything — most data is directly editable in the app; email us for anything that isn't.
• Delete everything — Settings → Data → delete account, or email us.
• Object or restrict certain processing, and withdraw consent where consent is the basis.
• Complainto the Information Commissioner's Office at ico.org.uk — though we'd appreciate the chance to sort it out first.

9. Age

FlipPilot is for users aged 18 and over (the marketplaces it supports require the same). We do not knowingly collect data from children.

10. Changes

If we make material changes to this policy we'll update the date at the top and, for significant changes, tell you in the app or by email.