1. Introduction

Flip It Exchange ("we," "us," or "our") is committed to protecting your personal information. Flip It Exchange is an affiliate of Jerome Holdings LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our marketplace platform, which connects buyers, sellers, and nonprofit or religious organizations.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by revising the date at the top of this page. We encourage you to review this Policy periodically.

If you are a resident of California or another state with an applicable consumer privacy law, please also see Section 12: State-Specific Privacy Rights.

2. Information We Collect

A. Information You Provide to Us

We collect information you provide directly when you:

Create or update an account (name, email address, password)
List an item for sale (product name, description, price, images, pickup city)
Complete a purchase (shipping address, contact information)
Communicate with other users through our messaging system
Apply to become a partner organization (contact details, supporting documents, banking information)
Contact us for support

B. Information We Collect Automatically

When you access or use the Platform, we automatically collect:

Log Data: Browser type, IP address, pages visited, access times, and referring URLs.
Device Information: Hardware model, operating system and version, and unique device identifiers.
Usage Data: Features used, items viewed, searches performed, and other interactions with the Platform.
Cookies & Tracking Technologies: We use cookies and similar technologies (such as pixels and session tracking) to keep you logged in, remember preferences, analyze platform usage, and improve your experience. See Section 6 for more details.

C. Information from Third Parties

We may receive information about you from third-party services. For example, we receive transaction records from Stripe when you make or receive a payment, including the date, amount, and status of the transaction. If you connect a social account to log in, we receive basic profile information from that service in accordance with its own privacy settings.

D. Payment Information Collected by Stripe

Payments on Flip It Exchange are processed by Stripe, Inc. When you enroll in payment processing or provide banking details, Stripe — not Flip It Exchange — directly collects your debit card numbers, Social Security Number, government IDs, and bank account information. Stripe's collection and use of this data is governed by the Stripe Privacy Policy. We do not store this sensitive financial data on our servers.

3. How We Use Your Information

To create and maintain your account and verify your identity.
To facilitate transactions between buyers and sellers.
To distribute proceeds to sellers and partner organizations according to the agreed split.
To send order confirmations, shipping notifications, payout alerts, and product approval emails.
To allow buyers and sellers to communicate about listings.
To detect and prevent fraud, unauthorized access, and abuse on the Platform.
To resolve disputes between users.
To improve our services and user experience through analytics and research.
To comply with legal obligations and respond to lawful requests from authorities.
To contact you about important updates to the Platform or these policies.

4. Sharing Your Information

We do not sell your personal data. We may share information in the following circumstances:

Stripe: For payment processing and seller payouts.
Shippo: Seller and buyer shipping details are shared with our shipping partner to generate labels and tracking.
Sellers: Buyers' names and shipping addresses are shared with sellers to fulfill orders.
Partner Organizations: Only the organization name appears at checkout. No buyer personal data is shared with partner organizations.
Legal Authorities: We may disclose information when required by law, regulation, legal process, or governmental request.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
With Your Consent: We may share information for any other purpose with your explicit consent.

5. Location Information

Sellers provide a pickup city when listing items to indicate their general location for local pickup eligibility. We do not collect precise real-time GPS location from your device. We may infer an approximate location from your IP address for fraud prevention and to improve the relevance of listings shown to you.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to operate and improve the Platform. Types of cookies we use include:

Essential Cookies: Required for core features like staying logged in and maintaining your session.
Analytics Cookies: Help us understand how users interact with the Platform so we can improve it.
Preference Cookies: Remember your settings, such as dark mode.

Most browsers allow you to control cookies through their settings. Disabling cookies may affect certain features of the Platform. We do not use cookies for targeted advertising.

7. Data Retention

We retain your account data for as long as your account is active. Archived organizations are permanently deleted after 30 days. Transaction records may be retained longer as required by law or for accounting purposes. You may request deletion of your account and associated data at any time through the Settings page.

8. Children's Privacy

The Platform is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. Users between the ages of 13 and 17 may only use the Platform under the supervision of a parent or legal guardian who agrees to our Terms of Service.

If we learn that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a child under 13, please contact us via our Contact page.

9. Security

We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and secure session management. Sensitive payment data is handled entirely by Stripe, which is PCI Service Provider Level 1 certified. However, no system is completely immune to breaches, and we encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access to your account.

10. Your Rights & Choices

You have the right to:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your account and associated data via the Settings page.
Opt-Out of Communications: Unsubscribe from non-essential emails at any time using the link in any email we send.
Data Portability: Request a copy of your data in a portable format.

To exercise any of these rights, please contact us via the Contact page.

11. Do Not Sell or Share My Personal Information

Flip It Exchange does not sell your personal information to third parties for money. We also do not share your personal information with third parties for cross-context behavioral advertising. If your state's law provides a formal "Do Not Sell or Share" right, you can exercise it by contacting us via our Contact page.

12. State-Specific Privacy Rights

Depending on where you live, you may have additional rights under your state's privacy laws.

California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with the following rights:

The right to know what personal information we collect, use, disclose, and sell.
The right to delete your personal information.
The right to correct inaccurate personal information.
The right to opt out of the sale or sharing of your personal information.
The right to non-discrimination for exercising your rights.
The right to limit the use of sensitive personal information.

To exercise these rights, contact us via our Contact page. We will respond within 45 days as required by law. We do not discriminate against users who exercise their privacy rights.

Shine the Light: California residents may also request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

Virginia, Colorado, Connecticut, Texas & Other States

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with consumer privacy laws have similar rights to access, correct, delete, and opt out of certain processing of their personal data. To exercise these rights, please contact us via our Contact page.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised date. For material changes, we may also send a notification to your account email address.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please reach out through our Contact page.