Privacy Policy

This policy explains what Ripflow collects, why we use it, which service providers receive it, and how you can delete it. It applies to the Ripflow iOS app, website, and API.

1. Information we collect

• Account data: email address, optional name, password hash, account identifier, login timestamps, plan, and usage counters.
• Card and catalog data: card photos, AI-produced identification fields, your corrections, prices, comparables, listing descriptions, inventory notes, and workflow history.
• Connected-account data: encrypted eBay OAuth tokens, eBay username and immutable user identifier, listing IDs, listing status, and authorized marketplace actions.
• Billing data: Stripe customer and subscription identifiers, plan, status, and billing-period dates. Ripflow does not store full payment-card numbers.
• Analytics and diagnostics: account-linked user ID, email, plan, product interactions, and app events used to understand reliability and feature use.
• Technical data: request metadata, security logs, device-generated upload data, and error details needed to operate and protect the service.

2. How we use information

We use information to authenticate you; identify cards; provide pricing estimates; create and manage listings you authorize; store your catalog; enforce plan limits; process subscriptions; detect abuse and security incidents; troubleshoot failures; measure product reliability; communicate service information; and comply with legal obligations.

3. Service providers and sharing

• OpenAI: receives card images and related prompts to identify cards and may receive listing text for an optional polish pass. Do not include people or unrelated sensitive information in card photos.
• eBay: receives listing information, images, prices, and authorized account actions; eBay also provides listing and market data.
• Stripe: processes subscription checkout, customer, billing, and payment information.
• PostHog: receives account-linked identifiers and product-interaction analytics. Ripflow configures this for product analytics, not advertising tracking.
• Supabase/PostgreSQL: hosts account, catalog, marketplace, and billing records.
• Cloudflare: stores and delivers card images and may provide network/security services.
• Hosting and email providers: process application traffic, operational logs, and service emails as needed to run Ripflow.

We may also disclose information when required by law, to protect users or the service, or as part of a corporate transaction subject to appropriate safeguards.

4. Retention

We retain account and catalog information while your account is active. Short-lived presigned image URLs expire automatically; the underlying photos remain until you delete the account or the service no longer needs them. Security, billing, and transaction records may be retained when reasonably necessary for fraud prevention, disputes, tax, accounting, or other legal obligations.

5. Security

Ripflow uses encrypted transport, encrypted marketplace tokens, access controls, user-scoped storage paths, and database isolation controls. No system is perfectly secure. Protect your password and report suspected unauthorized access to support@ripflow.app.

6. Your choices and deletion

You can correct card data in the app, disconnect eBay, and initiate permanent account deletion from Settings → Delete account. Deletion requires your current password and typed confirmation. Ripflow then removes your account, catalog, photos, pricing history, and marketplace tokens and deletes the associated Stripe customer when present, except for records we must retain to satisfy a legal obligation. You may also contact support@ripflow.app for access, correction, deletion, or privacy questions.

7. Children

Ripflow is not intended for children under 13, and our Terms require account holders to be at least 18. Contact us if you believe a child provided personal information.

8. International processing

Ripflow and its providers may process information in the United States and other countries. Those locations may have different data-protection laws from your country.

9. Changes

We may update this policy as the service changes. We will revise the date above and provide additional notice when required.

10. Contact

Email support@ripflow.app with privacy questions or requests.