Privacy Policy

This Privacy Policy explains how LensFlip (LensFlip (operated by Jake [YOUR_LAST_NAME], sole proprietor)) collects, uses, and protects your personal information when you use our Service at www.lensflip.app. We keep the data we collect narrow and we do not sell it.

1. What we collect

• Account info: your email address and a hashed password (we use bcrypt; we never see your plaintext password).
• Subscription info: your tier (free/Pro), a Stripe customer ID, subscription status, and daily scan counters. We do not store your credit-card number — that lives entirely at Stripe.
• Item photos: when you use photo identification, your image is sent to our image-recognition provider (Anthropic) for analysis and is not retained by us after the response is returned.
• Search queries: when you scan a barcode or search by text, we send the query to eBay to fetch comparable listings. We log aggregate query volume for capacity planning but do not tie searches to individuals in our logs.
• Server logs: IP address, user-agent, and URL path for requests, retained for up to 30 days for security and debugging.

2. How we use it

• To provide the Service: identify items, look up eBay prices, return buy/pass recommendations, and enforce daily scan limits.
• To process subscriptions and send receipts via Stripe.
• To send transactional emails (account creation, password reset, subscription renewal, cancellation confirmation).
• To detect abuse, fraud, and security threats.
• To improve the Service based on aggregate usage patterns.

We do not use your data for advertising, and we do not sell it to third parties.

3. Third-party processors

We rely on the following service providers to operate the Service. Each receives only the minimum data needed for its function:

• Stripe, Inc. (payments) — email, billing address, payment method. See Stripe's privacy policy.
• Anthropic, PBC (image identification) — item photos you submit for identification. See Anthropic's privacy policy.
• eBay, Inc. (pricing data) — the text of your search query. See eBay's user privacy notice.
• Hostinger International (hosting) — server logs and the database.

4. Cookies and storage

We use a session cookie to keep you logged in and browser localStorage to save small UI preferences (e.g., your last-used zip code for the sales finder). We do not use advertising or tracking cookies.

5. Data retention

• Account data: until you close your account.
• Subscription records: for up to 7 years after account closure for tax/accounting purposes, as required by US law.
• Item photos: discarded immediately after the identification response is returned; never written to long-term storage.
• Server logs: up to 30 days, then purged automatically.

6. Your rights

You can request any of the following by emailing privacy@lensflip.app :

• A copy of the personal data we hold about you.
• Correction of inaccurate data.
• Deletion of your account and associated data.
• Opt-out of marketing emails (transactional emails will continue until your account is closed).

We will respond within 30 days. California residents have the rights described above plus the right to know the categories of personal information we collect, use, and disclose, under the California Consumer Privacy Act.

7. Security

We encrypt data in transit with HTTPS, hash passwords with bcrypt, and run on Hostinger's managed infrastructure with regular OS-level security updates. No system is perfectly secure; if we discover a breach affecting your data we will notify you by email without undue delay.

8. Children

The Service is not directed to children under 13 and we do not knowingly collect their data. If you believe we have, please email privacy@lensflip.app and we will delete it.

9. International visitors

The Service is operated from the United States. If you access it from outside the US, your data will be transferred to and processed in the US. We take reasonable steps to protect your data regardless of where you are located.

10. Changes

We may update this Policy. Material changes will be announced by email or in-app at least 14 days before taking effect. The "Effective" date at the top of this page always reflects the current version.

11. Contact

LensFlip (operated by Jake [YOUR_LAST_NAME], sole proprietor)
806 North Davis Street, Cornelius, Oregon 97113, United States
Privacy contact: privacy@lensflip.app