Privacy Policy

CarFlipper ("we," "us," or "our") operates the car-flip-finder.com website and service. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service. We are committed to protecting your privacy and handling your data with transparency and care.

By using CarFlipper, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect information you provide directly, including:

• Name
• Email address
• Password (stored in hashed form; we never store plaintext passwords)
• Account preferences and settings

1.2 Usage Data

We automatically collect certain information when you access and use the Service, including:

• Pages and features you visit or interact with
• Search queries and filter preferences
• Saved listings and deal alerts you configure
• Device information (browser type, operating system, screen resolution)
• IP address and approximate geographic location
• Date and time of access
• Referring website or link

1.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to operate and improve the Service. For detailed information about the cookies we use, please see our Cookie Policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide the Service: To operate, maintain, and deliver the features and functionality of CarFlipper, including deal scoring, price estimates, and listing alerts
• Account management: To create and manage your account, authenticate your identity, and process subscription payments
• Improve the product: To understand how users interact with the Service, identify areas for improvement, and develop new features
• Communications: To send you service-related notifications such as deal alerts, account updates, security notices, and support responses
• Product updates: To inform you about new features, changes to the Service, or relevant announcements (you can opt out of non-essential communications at any time)
• Security: To detect, prevent, and address fraud, abuse, security issues, and technical problems
• Legal compliance: To comply with applicable laws, regulations, and legal processes

3. Data Sharing and Disclosure

We do not sell your personal data. We do not rent, trade, or otherwise make your personal information available to third parties for their marketing purposes.

We may share your information only in the following limited circumstances:

• Service providers: We share data with trusted third-party providers who assist us in operating the Service, such as email delivery services, payment processors, and hosting providers. These providers are contractually obligated to use your data only to perform services on our behalf and to maintain its confidentiality
• Legal requirements: We may disclose your information if required to do so by law, or in response to valid legal requests by public authorities (such as a court order or government agency)
• Business transfers: If CarFlipper is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy
• Protection of rights: We may disclose information when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request

4. Data Security

We take the security of your data seriously and implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Hashing of passwords using industry-standard algorithms
• Regular security assessments and updates
• Access controls limiting employee access to personal data on a need-to-know basis

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you
• Correction: You can request that we correct any inaccurate or incomplete personal data
• Deletion: You can request that we delete your personal data, subject to certain legal exceptions
• Export: You can request a portable copy of your data in a structured, commonly used format
• Restriction: You can request that we restrict the processing of your personal data under certain circumstances
• Objection: You can object to our processing of your personal data where we rely on legitimate interests as the legal basis
• Withdraw consent: Where processing is based on your consent, you can withdraw that consent at any time

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. You may also manage some of your data directly through your account settings.

6. Cookies

We use essential cookies to operate the Service, including session authentication and cookie consent preferences. For complete details about the cookies we use and how to manage them, please see our Cookie Policy.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

• Account data: Retained for the duration of your account and for up to 30 days after account deletion to allow for recovery
• Usage data: Retained in identifiable form for up to 12 months, after which it is aggregated or anonymized
• Payment records: Retained as required by applicable tax and financial regulations
• Support communications: Retained for up to 24 months after resolution

After the applicable retention period expires, we will securely delete or anonymize your personal data.

8. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at [email protected].

9. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from the laws of your country. When we transfer your data internationally, we take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable data protection laws.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will also send a notification to the email address associated with your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

[email protected]

If you are located in the European Economic Area and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.