Privacy Policy

Effective date: April 28, 2026

    Short version: FlipListr stores your email, your eBay connection, and the items you scan. We use that data to run the app. We don't sell it. We never will.
  

1. Who We Are

FlipListr is an eBay reseller tool built and operated by Jared Hornfeck as a sole proprietorship. The service is accessible at fliplistr.com. Questions: admin@fliplistr.com.

2. What We Collect

Account data: Your email address and a hashed password when you create an account.

eBay connection: An OAuth access token and refresh token issued by eBay when you choose to connect your eBay account. These tokens let FlipListr create and manage listings, retrieve buyer messages related to your listings, and send replies you approve. We never store your eBay password.

Photos you upload: Images you take or upload during the scan and listing flow. These are stored on our server and sent to AI providers to generate listing content. You can delete your account at any time from your Profile page (see "Your Rights" below), which removes your photos.

Listing, inventory, and buyer message data: Titles, descriptions, prices, condition notes, purchase costs, buyer messages connected to your eBay listings, replies you send, and other listing fields you enter or that the AI generates. This is your data and stays in your account.

Usage data: Basic analytics events (which pages you visit, when scans happen) to help us understand how the product is being used and fix problems. We use PostHog for this, which is a privacy-focused analytics tool.

3. How We Use Your Data

To operate the service: authenticate you, create and manage your eBay listings, display your inventory, profit data, and buyer messages, and send eBay replies you approve.
To generate AI listing and reply content: your photos and item descriptions are sent to OpenAI (for item identification) and Anthropic (for listing generation). If you use AI-drafted buyer replies, the buyer message and related listing context are sent to Anthropic to draft the reply. Neither provider stores your data for training without your explicit consent under their standard API terms.
To improve the product: anonymized usage patterns help us fix bugs and prioritize features.
To send you important service emails: account confirmations, billing receipts, critical service notices. We do not send marketing emails without your opt-in.

4. Third-Party Services We Use

eBay API: We connect to eBay's Sell Inventory API to create and publish listings on your behalf. eBay's own privacy policy governs data on their platform.
OpenAI: Photos you upload are sent to OpenAI's GPT-4o API for item identification. OpenAI does not use API data to train models by default. See OpenAI's privacy policy at openai.com.
Anthropic: Item data is sent to Anthropic's Claude API to generate listing copy. Same principle: API data is not used for training by default. See Anthropic's privacy policy at anthropic.com.
Background removal: We run background removal locally on our own server using open-source software. Your photos are not sent to any third party for this step.
PostHog: Anonymous usage analytics. No personal identifiers are included in analytics events.
Stripe: If you subscribe to a paid plan, payment is processed by Stripe. FlipListr does not store your card number. Stripe's privacy policy governs payment data.

5. Data Storage and Security

Your data is stored on a private VPS server in the United States. We use HTTPS for all connections, store passwords as bcrypt hashes, and restrict database access to the application process. We don't guarantee perfect security — no service can — but we take reasonable precautions appropriate for a service of this size.

6. Data Retention

Your data is retained for as long as your account is active. If you delete your account, your database records — drafts, listing history, buyer messages, and usage data — are erased immediately, and your uploaded photo files are wiped from our server by the next nightly sweep, within 48 hours. eBay tokens are invalidated at the moment of disconnect or account deletion. Uploaded photos are also removed when an individual draft is deleted.

7. Your Rights

You can delete your account and all of its data yourself at any time: go to Profile, scroll to Delete Account, and confirm with your password. The erasure happens immediately and cannot be undone. Any active subscription is cancelled as part of it. Note that listings already live on eBay are not ours to remove — end those in eBay's Seller Hub.

To request a copy of your data, ask us to correct inaccurate data, or get help deleting an account you can no longer sign in to, email admin@fliplistr.com. We'll respond within 14 days.

8. Children

FlipListr is not directed at children under 13. We don't knowingly collect data from anyone under 13.

9. Changes to This Policy

If we make material changes, we'll update the effective date at the top of this page and notify users by email if the changes affect how we use your data in a significant way.

10. Contact

Questions or requests: admin@fliplistr.com