1. Overview
Altus Labs ("FlipIt," "we," "us," or "our") provides the FlipIt desktop application for managing resale inventory, purchases, sales, shipments, expenses, subscriptions, and order records. This Privacy Policy applies to the FlipIt application, its account-access services, and this website.
FlipIt processes connected Gmail information only to provide user-requested order scanning and related application features. It is not used for advertising or unrelated profiling.
2. Information we handle
Account and access information
When you create or use a FlipIt account, we may handle your email address, display name, authentication provider, access role, account status, and related login or authorization metadata. If you sign in with Discord, we may also handle your Discord user ID, username, server membership, role IDs, and profile image supplied by Discord.
Business records you enter
FlipIt stores information you enter or import, such as inventory descriptions, product images, purchase and sale amounts, marketplace, fees, expenses, subscriptions, customer or shipment details, tracking numbers, notes, and dates.
Technical information
We may process limited technical information required to operate and secure account access, such as application version, request timestamps, authentication events, and error information. The public website may receive ordinary hosting logs such as IP address, browser type, requested URL, and timestamp from Cloudflare.
3. Google user data
Google access is optional and begins only when you select Connect Google account and approve Google’s authorization screen. FlipIt requests the gmail.readonly scope.
Data accessed
FlipIt may access the connected Google account’s email address and Gmail messages, including message metadata and content, that match order-related searches. This can include merchant names, order numbers, product names, quantities, prices, purchase dates, shipping status, carriers, tracking numbers, and delivery information contained in order confirmations and shipping updates.
How Google data is used
Google user data is used only to search for relevant purchase and shipping messages, extract order information, show scan results, and create or update records that you choose to keep in FlipIt. FlipIt does not use Gmail access to send email, change messages, delete messages, create advertising profiles, or train general-purpose artificial intelligence models.
Storage and transfer
OAuth access and refresh tokens are stored on the device running FlipIt, using operating-system credential encryption where available. Gmail requests are made directly from the desktop application to Google. FlipIt is designed to process message content locally and does not intentionally upload Gmail message content or OAuth tokens to the FlipIt account-access backend.
Google Limited Use
FlipIt’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.
4. How we use information
We use information to:
- provide inventory, sales, shipment, expense, subscription, and order-scanning features;
- authenticate users and determine application access;
- connect user-selected services such as Google, Discord, shipping, or marketplace integrations;
- calculate and display business metrics requested by the user;
- maintain security, diagnose errors, prevent abuse, and support users; and
- comply with applicable legal obligations.
6. Storage and security
FlipIt is designed as a local-first desktop application. Business records, connected-account tokens, and parsed order information are generally stored on your device. Account identity, access status, role-verification data, and administrative audit records may be stored with our authentication and backend provider.
We use reasonable administrative and technical safeguards, including encrypted network connections, access controls, server-side secret storage for shared integration credentials, and operating-system encryption for locally saved credentials where supported. No security method is perfect, and we cannot guarantee absolute security.
7. Retention and deletion
Locally stored records remain until you delete them, clear application data, or uninstall FlipIt and remove its application data. Connected Google tokens remain until you remove the Google account from FlipIt, clear the application’s credentials, or revoke FlipIt from your Google Account connections. Parsed order records may remain after disconnecting Google until you delete those records.
Backend account and access information is retained while your account is active and as reasonably necessary for security, dispute resolution, legal compliance, and enforcement. You may request deletion of backend account information by contacting us. We will delete or de-identify information when it is no longer reasonably needed, subject to legal retention obligations.
8. Your choices and rights
- Google connection: Connecting Google is optional. You can disconnect an account in FlipIt and separately revoke access in your Google Account.
- Local records: You can edit, delete, export, or clear records using FlipIt’s controls.
- Account requests: You may ask to access, correct, or delete backend account information by contacting us.
- Permissions: You can decline optional permissions, although the associated feature may not work.
Depending on where you live, applicable law may provide additional privacy rights. We may need to verify your identity before fulfilling a request.
9. Children’s privacy
FlipIt is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us so we can investigate and take appropriate action.
10. Changes to this policy
We may update this Privacy Policy to reflect changes to FlipIt, legal requirements, or our data practices. We will update the effective date and provide additional notice when required. Material changes to how Google user data is used will be reflected here before those practices begin.
11. Contact us
Questions, privacy requests, and account-deletion requests can be sent to:
Altus Labs — FlipIt
Email: chrispham1620@gmail.com