Privacy Policy

1. Introduction

Welcome to DealFlipAI. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, API, and related services (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide when using our Services:

Data Type	Examples	Purpose
Account Information	Email address, name, password	Account creation, authentication, communication
Profile Information	Preferences, saved searches, categories, locations	Personalize your experience, deliver relevant deals
Payment Information	Billing details (processed by Apple/payment processors)	Process subscriptions and payments
Communication Data	Support requests, feedback, correspondence	Provide customer support, improve Services
Notification Preferences	Email, phone number, Discord/Telegram IDs	Send deal alerts and notifications

2.2 Information Collected Automatically

When you use our Services, we automatically collect certain information:

• Usage Data: Pages visited, features used, time spent, search queries, deal interactions (views, favorites, clicks)
• Device Information: Device type, operating system, browser type, unique device identifiers
• Log Data: IP address, access times, error logs, referring URLs
• Location Data: Approximate location based on IP address (for marketplace scanning)
• Cookies and Similar Technologies: Session cookies, preference cookies, analytics cookies (see Section 8)

2.3 Information from Third Parties

We may receive information from third-party services:

• Authentication Providers: If you sign in with Google or Apple, we receive basic profile information (name, email, profile picture)
• Payment Processors: Apple App Store provides subscription status and transaction information
• Analytics Services: Aggregated usage statistics and performance metrics

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Provide and Improve Services

• Create and manage your account
• Scan Facebook Marketplace based on your preferences
• Generate AI-powered valuations and deal scores
• Send deal alerts and notifications
• Provide customer support and respond to inquiries
• Analyze usage patterns to improve features and performance
• Develop new features and services

3.2 Process Transactions

• Process subscription payments and manage billing
• Verify subscription status and enforce usage limits
• Handle refunds and billing disputes

3.3 Communications

• Send transactional emails (account verification, password resets, subscription confirmations)
• Send deal alerts based on your notification preferences
• Send service announcements and updates
• Send marketing communications (with your consent, where required)

3.4 Security and Compliance

• Detect and prevent fraud, abuse, and security threats
• Enforce our Terms of Service and policies
• Comply with legal obligations and respond to legal requests
• Protect our rights, property, and safety

4. Third-Party Services and Data Sharing

We integrate with and share data with the following third-party services:

4.1 Service Providers

Service	Purpose	Data Shared
Apify	Facebook Marketplace scraping	Search queries, locations, categories
OpenAI (GPT-4)	AI valuations and analysis	Listing data (titles, descriptions, prices)
eBay API	Market price comparisons	Product search queries
Apple App Store	iOS subscription management	Apple ID, subscription status, transaction data
Email/SMS Providers	Notification delivery	Email addresses, phone numbers, notification content
Cloud Hosting	Infrastructure and data storage	All user data and application data

4.2 Analytics and Performance

We may use analytics services to understand how users interact with our Services. These services may collect device information, usage patterns, and performance metrics.

4.3 Legal Requirements

We may disclose your information if required by law, legal process, or government request, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Respond to emergencies involving danger of death or serious physical injury

4.4 Business Transfers

If DealFlipAI is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

5. Data Retention

We retain your personal information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained while your account is active and for a reasonable period after account closure
• Transaction Records: Retained for accounting and legal compliance purposes (typically 7 years)
• Usage Logs: Retained for 90 days for security and debugging purposes
• Marketing Data: Retained until you unsubscribe or request deletion

When we no longer need your information, we will securely delete or anonymize it.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

6.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to certain processing of your personal information
• Restriction: Request restriction of processing in certain circumstances

6.2 GDPR Rights (European Economic Area)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to withdraw consent at any time
• Right to lodge a complaint with your local data protection authority
• Right to know the legal basis for processing your data

6.3 CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information (subject to exceptions)
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

6.4 How to Exercise Your Rights

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption: Data in transit is encrypted using TLS/SSL; sensitive data at rest is encrypted
• Authentication: Secure password hashing (bcrypt), JWT tokens, session management
• Access Controls: Role-based access controls and principle of least privilege
• Monitoring: Security logging, intrusion detection, and regular security audits
• Infrastructure: Secure cloud hosting with industry-standard security practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and collect usage information.

8.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Authentication, session management, security	Session or up to 30 days
Preference Cookies	Remember your settings and preferences	Up to 1 year
Analytics Cookies	Understand usage patterns and improve Services	Up to 2 years

8.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can:

• Block all cookies
• Accept only first-party cookies
• Delete cookies after each session
• Receive notifications when cookies are set

Note that blocking or deleting cookies may affect the functionality of our Services.

9. Children's Privacy

Our Services are not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@dealflip.ai. We will take steps to delete such information from our systems.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

When we transfer personal information internationally, we implement appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy and applicable laws, including:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by relevant authorities
• Other legally approved transfer mechanisms

11. Third-Party Links

Our Services may contain links to third-party websites, platforms, or services (including Facebook Marketplace, eBay, and seller contact information). We are not responsible for the privacy practices of these third parties.

We encourage you to read the privacy policies of any third-party services you interact with. This Privacy Policy applies only to information collected by DealFlipAI.

12. Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked. Currently, there is no industry standard for how to respond to DNT signals. At this time, our Services do not respond to DNT signals.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying an in-app notification or banner

Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: