Privacy Policy

This Privacy Policy explains how [Operator legal entity — to be provided] (“CouchFlippr,” “we”) collects, uses, and shares information when you use couchflippr.com, the seller dashboard, and the storefronts we host. By using the Service you agree to this Policy and our Terms of Service.

1. Information we collect

• Account information (Sellers): the email address you use to sign in via magic link, and the business and listing information you add to your storefront.
• Order information (Buyers): when you check out as a guest we collect your name, email, phone number, and delivery address, along with your order and preferred delivery windows. We need this to fulfill and coordinate your purchase.
• Payment information: payments are processed by Stripe. Stripe collects your card or payment details directly; we do not receive or store full card numbers. We retain limited transaction references (such as an order ID and payment status) to operate the marketplace.
• Seller content: photos and descriptions you upload, including source photos you submit to the optional AI photo-staging tools.
• Usage and device data: basic analytics and aggregate telemetry (such as page views and sales counts) and standard server logs used to run and secure the Service.
• Cookies: we use strictly-necessary cookies for authentication and session management. We do not use third-party advertising cookies.

2. How we use information

• to operate storefronts, process orders, and facilitate payments and payouts;
• to authenticate sign-ins and secure the Service;
• to coordinate delivery and communicate about your order or account;
• to provide optional features such as AI photo-staging, including automated safety screening;
• to detect and prevent fraud, abuse, and policy violations, and to comply with legal obligations;
• to understand and improve the Service through aggregate analytics.

3. How information is shared

We do not sell your personal information. We share it with independent Sellers as needed to fulfill an order you place (for example, your delivery details), and with service providers that process data on our behalf under contract:

• Stripe: Payment processing, seller payouts (Connect), and fraud/dispute handling. Stripe receives buyer payment details directly; we never store full card numbers.
• Supabase: Authentication (magic-link sign-in) and the application database (listings, orders, addresses).
• Vercel: Application hosting and content delivery.
• Cloudflare: DNS, TLS certificates, and CDN/proxy for storefront domains.
• fal.ai: AI image generation for the optional seller photo-staging feature (processes the seller-supplied source photo).
• Google (Gemini API): Automated safety/honesty screening of seller-supplied photos and edit instructions in the photo-staging feature.

We may also disclose information to comply with law, enforce our Terms, or protect the rights, safety, and property of users and the public, and in connection with a merger, acquisition, or sale of assets.

4. Data retention

We keep information for as long as needed to provide the Service and for legitimate business and legal purposes (such as tax, accounting, dispute resolution, and fraud prevention). Order and transaction records are typically retained longer to meet these obligations. We delete or anonymize information when it is no longer needed.

5. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to opt out of any “sale” or “sharing” of personal information (we do not sell or share it for cross-context advertising). To exercise these rights, email privacy@couchflippr.com. We will respond as required by applicable law (including the GDPR and CCPA/CPRA where they apply) and will not discriminate against you for exercising them.

6. Security

We use technical and organizational measures designed to protect your information, including encrypted transport, scoped database access, and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. International transfers

Our providers may process information in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.

8. Children

The Service is not directed to children under 18, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact privacy@couchflippr.com.

9. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the date above and, where appropriate, by additional notice.

10. Contact

Privacy questions or requests: privacy@couchflippr.com, [Operator legal entity — to be provided], [Business mailing address — to be provided].