Last updated: June 20, 2026
1. Introduction
Welcome to FlipLogic ("Company", "we", "our", "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.
2. The Data We Collect About You
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data includes first name, last name, username or similar identifier.
- Contact Data includes billing address, email address, and telephone numbers (including mobile phone numbers used for SMS verification and account security).
- Financial Data includes payment card details (processed securely by our payment providers — we never store card numbers directly).
- Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
- Property Data includes property addresses, deal information, rehab budgets, expense records, and photos you upload to the platform.
- Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Usage Data includes information about how you use our website, products and services.
3. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Where we need to perform the contract we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal obligation.
- To send you transactional SMS messages, including one-time passcodes (OTPs) for account verification and two-factor authentication.
- To process your payments and manage your subscription.
- To provide AI-powered features such as property design generation and content creation.
- To enrich property data from third-party property data providers when you add a new property.
4. Third-Party Service Providers
We share your data with trusted third-party service providers who assist us in operating our platform. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
- Payment Processing: We use Stripe, Inc. to process payments. When you subscribe or make a purchase, your payment information is transmitted directly to Stripe and is subject to Stripe's Privacy Policy. We do not store your full credit card number.
- Cloud Infrastructure & Authentication: We use cloud infrastructure providers to host our application, store your data, and manage authentication. Your data is stored with encryption at rest and in transit.
- Email Delivery: We use email delivery services to send transactional emails (account verification, signature requests, notifications). Only your email address and name are shared for delivery purposes.
- SMS Delivery: SMS messages are delivered via Twilio, Inc. Your phone number is transmitted to Twilio solely for message delivery. See Twilio's Privacy Policy.
- Analytics & Marketing: We use analytics services (such as Google Analytics) and conversion tracking tools to understand how visitors use our website and measure the effectiveness of our marketing. These services may set cookies on your device (see Section 8).
- Error Monitoring: We use error monitoring services to detect and fix software issues. These services may receive technical data, error traces, and anonymized user identifiers.
- AI Services: We use AI service providers to power features like the Design Studio and content generation. Property photos and design prompts may be sent to these providers for processing. No financial data is ever sent to AI services.
- Property Data: We use third-party property data providers to auto-fill property details (square footage, lot size, year built, etc.) when you add a new property address.
- Accounting Integration: If you connect your Intuit QuickBooks Online account, we access and synchronize financial data as described in Section 6 below.
- Lender Marketplace: If you submit a loan application through our Lender Marketplace, your application data (property details, loan amount, contact info) is shared with the selected lending partner(s) to process your request.
We do not sell your personal data to any third party. Data is shared only as described above and only to the extent necessary to provide our services to you.
5. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. All data is encrypted in transit (TLS) and at rest. We use row-level security policies to ensure multi-tenant data isolation.
6. QuickBooks Online Integration & Data Handling
FlipLogic integrates with Intuit QuickBooks Online ("QBO") to help you synchronize your financial data between FlipLogic and your QuickBooks account. This section explains how we handle your QuickBooks data.
Data We Access from QuickBooks
When you connect your QuickBooks account, FlipLogic may access the following types of data from your QBO account:
- Vendor records — names, contact information, and account details.
- Expense/Purchase records — transaction amounts, dates, categories, and descriptions.
- Chart of Accounts — account names and types for expense category mapping.
- Bill records — contractor invoices synced as bills.
- Class records — property-based tracking categories (Plus and Advanced tiers only).
How We Use Your QuickBooks Data
- To synchronize expenses, vendors, and invoices between FlipLogic and your QuickBooks account.
- To display sync status and history within your FlipLogic dashboard.
- To map your FlipLogic expense categories to your QuickBooks Chart of Accounts.
We do NOT use your QuickBooks data for advertising, analytics, marketing, or any purpose unrelated to providing the FlipLogic service to you. Your QuickBooks data is never shared with other FlipLogic customers or any third parties.
How We Store Your QuickBooks Data
Your QuickBooks OAuth tokens (access and refresh tokens) are stored encrypted in our secure database with row-level security (RLS) policies ensuring only your company's authorized users can access them. We do not store your QuickBooks username or password. Sensitive API routes use Cache-Control: no-cache, no-store headers to prevent browser caching of financial data.
Disconnecting & Deleting Your QuickBooks Data
You can disconnect your QuickBooks account at any time from your FlipLogic Settings → Integrations page. When you disconnect:
- Your OAuth tokens are immediately revoked with Intuit and deleted from our database.
- No further API calls will be made to your QuickBooks account.
- Synced records in FlipLogic (expenses, vendors) remain in your FlipLogic account but are no longer linked to QuickBooks.
To request complete deletion of all QuickBooks-related data, including sync history and entity mappings, contact us at support@fliplogic.io.
AI Features & QuickBooks Data
FlipLogic includes AI-powered features for property photo enhancement and content generation. These features operate exclusively on user-uploaded photos and property details. No QuickBooks financial data is ever sent to, processed by, or used to train any AI model.
7. SMS Messaging & Phone Number Use
FlipLogic uses your mobile phone number solely for account security and verification purposes. Specifically, we may send you:
- One-Time Passcodes (OTPs) during account registration to verify your phone number.
- Security alerts when unusual login activity is detected on your account.
Message frequency: Message frequency varies. You may receive up to 2 messages per login or registration event.
Carrier charges: Message and data rates may apply. FlipLogic is not responsible for any charges from your mobile carrier.
Opt-out: To stop receiving SMS messages, reply STOP to any message. You may also contact us at support@fliplogic.io. Note that opting out of verification messages may prevent you from accessing your account.
Third-party provider: SMS messages are delivered via Twilio, Inc. Your phone number is transmitted to Twilio solely for message delivery and is not used for any other purpose. Twilio's privacy policy can be found at twilio.com/legal/privacy.
8. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to operate our website and improve your experience. A cookie is a small text file stored on your device by your web browser.
Types of Cookies We Use
- Essential Cookies: Required for authentication and core functionality (e.g., session cookies set by our authentication provider). These cannot be disabled without breaking the application.
- Analytics Cookies: Set by Google Analytics to help us understand how visitors use our website (e.g.,
_ga, _gid). These collect anonymized usage data. - Marketing Cookies: Set by Meta (Facebook) Pixel to measure advertising effectiveness and provide relevant ads (e.g.,
_fbp).
Managing Cookies
If you are located in the European Union, we will ask for your consent before setting non-essential cookies via our cookie banner. You can change your preferences at any time by clicking "Cookie Preferences" in our website footer.
You can also control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling essential cookies may prevent you from using core features of our platform.
9. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Account data: Retained while your account is active. After account deletion, data is purged within 30 days, except where retention is required by law.
- Financial & transaction data: Retained for 7 years to comply with tax and accounting obligations.
- QuickBooks sync data: Retained while your QuickBooks integration is connected. Deleted upon disconnection (except synced records that remain in your FlipLogic account).
- Error logs: Retained for 90 days for debugging and quality assurance purposes.
- Analytics data: Subject to the retention settings of our analytics provider (typically 14 months).
10. Your Legal Rights
Under applicable data protection laws, you have the following rights:
- Request access to your personal data.
- Request correction of your personal data.
- Request erasure of your personal data.
- Object to processing of your personal data.
- Request restriction of processing your personal data.
- Request transfer of your personal data (data portability).
- Right to withdraw consent.
To exercise any of these rights, please contact us at support@fliplogic.io. We will respond within 30 days.
11. Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
- Right to Delete: You may request that we delete the personal information we have collected from you, subject to certain exceptions.
- Right to Correct: You may request that we correct inaccurate personal information.
- Right to Opt-Out of Sale: We do not sell your personal information. We do not share personal information for cross-context behavioral advertising.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To exercise these rights, email us at support@fliplogic.io with the subject line "CCPA Request". We will verify your identity before processing your request.
12. Additional Rights for EU Residents (GDPR)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Legal Basis for Processing: We process your data based on: (a) your consent, (b) performance of a contract, (c) our legitimate business interests, or (d) compliance with legal obligations.
- Data Transfers: Your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place through standard contractual clauses with our service providers.
- Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority.
- Consent for Cookies: We will obtain your affirmative consent before setting non-essential cookies (analytics and marketing) when you visit from the EEA.
13. Electronic Signatures (eSign)
FlipLogic includes an electronic signature feature ("eSign"). By using eSign, you acknowledge and agree that:
- Electronic signatures created through FlipLogic are intended to be legally binding under the United States Federal Electronic Signatures in Global and National Commerce (ESIGN) Act and the Uniform Electronic Transactions Act (UETA).
- You consent to conducting transactions and receiving documents electronically.
- Signed documents are stored securely and accessible from your FlipLogic account.
- FlipLogic is not a party to any agreement you sign using eSign and provides the tool "as is."
14. Changes to This Privacy Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new privacy policy on this page and updating the "Last updated" date. We encourage you to review this page periodically for any changes.
15. Contact Us
If you have any questions about this privacy policy, our privacy practices, or wish to exercise your data protection rights, please contact us: