Privacy Policy

1. What we collect

Account data: email address, first name (optional) and password (stored only as an encrypted hash).

Settings and activity: your alerts (models, prices, regions), the listings we sent you and whether you opened links in alerts.

Notification channels: your browser/phone push subscription, your Telegram chat ID and your WhatsApp phone number (if you turn them on).

Payments: Stripe sends us your subscription status and a customer identifier. We never receive or store card details.

Technical data: IP address and browser information in server logs, kept briefly for security.

2. Why we use it (legal basis)

To provide the service and send the alerts you request (performance of a contract).

For billing and accounting and tax obligations (legal obligation).

For security, fraud prevention and improving the service (legitimate interest).

For emails about your account (for example password resets or the end of your trial). We never send marketing without your consent and we never sell your data.

3. Who we share it with

We use providers that process data on our behalf, only as needed: Hetzner (server hosting, Germany), Stripe (payments), Zoho (email), Telegram, Meta/WhatsApp, Google and Apple (push notification delivery), Anthropic (automated analysis of photos in public listings, with no data about you).

Some providers may transfer data outside the European Economic Area; such transfers rely on the safeguards provided by the GDPR (for example standard contractual clauses).

4. How long we keep it

Account data for as long as your account is active. If you ask us to delete it, we do so within 30 days.

Payment and billing records are kept as required by accounting law (up to 10 years).

Server logs are kept for at most 30 days.

5. Monitored listings

The service collects data from public listings (title, price, description, photos, location) to compute market prices and send alerts. We do not collect sellers' contact details; the link in an alert takes you to the original listing. If you are a seller and want a listing removed from the service, contact us.

6. Cookies

We use only one strictly necessary cookie for signing in (keeping your session) and browser local storage for preferences (for example dismissing a banner). We do not use advertising or tracking cookies. For visit statistics we count page views anonymously, without cookies: from your IP and browser we compute a code that changes daily and cannot identify a person.

7. Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to processing, and to withdraw consent at any time. You can turn off notifications anytime from your dashboard.

To exercise your rights, email contact@flipping24.com; we reply within one month. You may also lodge a complaint with the Romanian data protection authority (ANSPDCP, dataprotection.ro) or the authority in your country of residence.

8. Security

Connections to the site are encrypted (HTTPS), passwords are stored only as hashes and server access is restricted. No system is completely secure; if a breach affects you, we will notify you as required by law.

9. Changes and contact

We may update this policy; the current version is always on this page. Questions: contact@flipping24.com.