FlipWeiser

Privacy

Privacy Policy

Last updated: May 17, 2026

Who we are

FlipWeiser is an AI-assisted listing tool for eBay resellers, operated by Rick Courcy. You can reach us at [email protected] for any privacy-related question, including data access or deletion requests.

What we collect

We collect only what's necessary to make FlipWeiser work for you:

  • eBay account data: When you connect your eBay account through OAuth, eBay shares your access and refresh tokens, store details (subscription tier, listing allowance), business policies, and inventory locations with us. We never see your eBay password.
  • Photos and listing content: Photos you upload for item identification, AI-generated titles and descriptions, prices, condition assessments, and the inventory metadata (SKU, storage location) you assign.
  • Account session: A signed cookie that keeps you authenticated. It contains an expiration timestamp and a signature — no personal data.
  • Waitlist email: If you join the launch waitlist, the email address you submit so we can notify you when access opens.
  • Operational logs: Standard request logs from our hosting provider (timestamps, IP addresses, status codes) retained for short periods for debugging and abuse prevention.

We do not collect analytics on your browsing, run third-party ad trackers, or sell your data to anyone.

How we use it

  • Identify items in your photos and generate listing content.
  • Fetch sold-listing comparables and compute profit / sellability estimates.
  • Create and publish eBay listings on your behalf, against the eBay account you connected.
  • Keep your inventory tracking up to date so you can find items.
  • Email you launch updates if you joined the waitlist.

Third parties we share with

To deliver FlipWeiser, your data passes through these service providers. Each is bound by their own privacy policy:

  • Cloudflare — hosts the app, API, and storage (Workers, KV, R2). All persistent data lives in Cloudflare's infrastructure.
  • eBay — receives listing data you publish; provides account data and sold-listing context.
  • Anthropic — processes photos and listing content via the Claude API for item identification and description generation.
  • SerpApi — queries public sold-listing search results to compute pricing comparables.
  • Resend — delivers waitlist and account emails.

We share only the data needed for each provider to do its job — never your full dataset.

Where your data lives

Cloudflare's Workers KV and R2 services are globally distributed. Data may be processed and stored in data centers outside your country of residence, including the United States. By using FlipWeiser, you consent to this transfer.

How long we keep it

  • eBay tokens: Until they expire or you disconnect. We use the refresh token to keep your session current; if it expires, you re-authorize.
  • Photos and listing drafts: Indefinitely, until you delete them from the app or your account.
  • Inventory records: Until you remove them.
  • Waitlist email: Until you ask us to remove it or unsubscribe.
  • Operational logs: Typically 7–30 days, depending on the log source.

eBay account deletion

FlipWeiser complies with eBay's Marketplace Account Deletion notification requirement. If eBay tells us your eBay account has been deleted or your data-deletion request has propagated, we will purge your stored OAuth tokens, account info, business policies, inventory locations, inventory records, and user settings from our systems within a reasonable window (typically minutes).

Your rights

Regardless of where you live, you can request:

  • A copy of the personal data we hold about you.
  • Correction of inaccurate data.
  • Deletion of your data ("right to be forgotten").
  • Disconnection of your eBay account at any time from Settings.

Email [email protected] and we'll act on the request within 30 days.

Children

FlipWeiser is not intended for children under 16 and we don't knowingly collect data from them. eBay's terms of service also require all sellers to be 18 or older.

Security

Authentication is enforced with signed session cookies over HTTPS. OAuth tokens are stored in encrypted-at-rest Cloudflare KV. We do not store passwords. No system is perfectly secure, but we follow industry-standard practices and patch promptly when issues come to our attention.

Changes to this policy

If we update this policy materially, we'll update the "Last updated" date above and, for substantive changes, notify users by email or an in-app banner. Continued use after a change means you accept the updated policy.

Contact

Questions, requests, or complaints: [email protected] .