Last Updated: [DATE]
1. Introduction
Flipping Portal LLC ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights — in compliance with applicable US privacy law including the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (VCDPA), and other applicable state privacy laws.
2. Information We Collect
2.1 Information You Provide
- Account registration: name, email address, phone number, password, selected professional role, city, and state;
- Profile information: business name, bio, professional license number, specialisms, service areas, portfolio photos, and transaction history;
- Listing data: property address, price, ARV, rehab estimates, photos, and deal description;
- Payment information: billing address and payment method (processed directly by Stripe — we do not store full card numbers);
- Communications: messages you send through the Platform, support requests, and survey responses;
- Advertising information: company name, ad creative, target audience preferences, and billing information for advertisers.
2.2 Information Collected Automatically
- Device and browser: IP address (hashed in logs after 30 days), browser type, operating system, device identifiers;
- Usage data: pages visited, search queries, listings viewed, profiles clicked, and time spent on Platform;
- Cookies and similar technologies: as described in our Cookie Policy;
- Location: general location inferred from IP address for search relevance and analytics. We do not collect precise GPS location without explicit consent.
2.3 Information from Third Parties
- License verification: professional license status from state licensing authority APIs (NMLS, state bar APIs, CSLB);
- Identity verification: where applicable, identity verification service providers;
- Analytics: aggregated data from analytics providers (see Cookie Policy).
3. How We Use Your Information
| Purpose | Legal Basis (where applicable) |
|---|---|
| Provide and operate the Platform | Contract performance — necessary to deliver the service you signed up for |
| Process payments and manage subscriptions | Contract performance; legal obligation (tax and financial records) |
| Verify professional credentials and display badges | Contract performance; legitimate interest in platform integrity |
| Enable search, matching, and discovery | Contract performance — core platform functionality |
| Display your profile to other users | Contract performance; your consent (you choose to make a profile public) |
| Send transactional emails (new messages, alerts) | Contract performance; legitimate interest in service communication |
| Send marketing emails | Your consent (opt-in); unsubscribe available at any time |
| Serve and measure advertising | Legitimate interest; consent where required by applicable law |
| Improve the Platform and AI features | Legitimate interest in product development (aggregated/anonymised data) |
| Detect fraud, abuse, and safety violations | Legal obligation; legitimate interest in platform security |
| Comply with legal obligations | Legal obligation |
4. How We Share Your Information
4.1 With Other Users (By Design)
Your public profile — including your name, role, city, state, credentials, portfolio, and deal history — is visible to all registered users and, for public profile URLs, to anyone on the internet. Deal listings you post are publicly accessible by design to enable deal distribution. You control what you add to your profile.
4.2 With Service Providers
We share data with trusted third-party service providers who process data on our behalf, including: Stripe (payments), Amazon Web Services (hosting and storage), SendGrid (email delivery), Datadog (monitoring), Elasticsearch (search), and analytics providers. These providers are contractually bound to process data only as instructed by us.
4.3 With Advertisers
Advertisers receive aggregated, non-personally identifiable analytics about ad performance (impressions, clicks, demographics) but do not receive individual user personal data without your explicit consent.
4.4 Legal Requirements
We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect rights, property, or safety.
4.5 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all assets, your information may be transferred as part of the transaction. We will notify you via email before your data becomes subject to a materially different privacy policy.
5. Your Privacy Rights
| Right | Description | How to Exercise |
|---|---|---|
| Access | Request a copy of the personal data we hold about you | Email privacy@Flippingportal.com with subject "Data Access Request" |
| Correction | Request correction of inaccurate or incomplete personal data | Update directly in Account Settings, or email us |
| Deletion | Request deletion of your personal data (subject to legal retention obligations) | Email privacy@Flippingportal.com — processed within 30 days |
| Portability | Receive your data in a structured, machine-readable format | Email privacy@Flippingportal.com with subject "Data Export Request" |
| Opt-Out of Sale | We do not sell personal data. This right is preserved as required by CCPA. | No action required — we do not sell data |
| Marketing Opt-Out | Unsubscribe from marketing emails at any time | Click "Unsubscribe" in any marketing email, or email us |
| Non-Discrimination | We will not discriminate against you for exercising privacy rights | Your rights are guaranteed — exercising them has no effect on your service |
6. Data Retention
We retain personal data for as long as your account is active or as needed to provide services. After account deletion, we retain: (a) basic account information for 90 days in case you wish to restore the account; (b) financial records (transaction history, invoices) for 7 years as required by law; (c) communications relevant to ongoing or potential legal disputes for the duration of that dispute plus applicable statute of limitations. Anonymised/aggregated data derived from your usage may be retained indefinitely.
7. Data Security
We implement industry-standard security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest for sensitive data, hashed passwords (bcrypt, cost factor 12), access controls, and regular security audits. No system is 100% secure. In the event of a data breach affecting your rights, we will notify you as required by applicable law.
8. Children's Privacy
Flipping Portal is not intended for use by individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at privacy@Flippingportal.com and we will promptly delete it.
9. Contact
Privacy questions, requests, or complaints: privacy@Flippingportal.com Mailing address: Flipping Portal LLC, Cincinnati, Ohio 45202, United States