Privacy Policy

Effective Date: March 26, 2026

Introduction

INNOV8 Ventures LLC, doing business as Phlip ("we," "us," "our," or "Company"), is committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at phlip.app (the "Platform").

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Platform.

Information We Collect

We collect information in several ways:

• Account Information: When you sign up, we collect your name, email address, and optional profile information through Auth0, our identity provider. If you choose to sign in via a social account (Google, Microsoft, GitHub), we receive basic profile data as authorized by you.
• Usage Data: We automatically collect information about your interactions with the Platform, including pages visited, features used, session duration, device type, browser type, and IP address.
• Marketplace Data: When you import marketplace listings or credentials, we collect the data you choose to upload. Marketplace platform credentials (eBay, Facebook, Amazon, etc.) are encrypted using AES-256-GCM and never stored in plaintext.
• Payment Information: We collect billing information through Stripe, our payment processor. We do not directly store your full credit card details.
• Communications: When you contact us, we collect any information you provide in support requests, feedback, or correspondence.

How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, operate, and improve the Platform and deliver the features you request.
• AI Analysis: To process your marketplace data through Anthropic's Claude API for arbitrage opportunity analysis, pricing suggestions, and deal scoring. Personal data is not retained by Claude or used to train AI models.
• Platform Improvement: To understand how you use the Platform, identify bugs, optimize performance, and develop new features.
• Communications: To send you service announcements, security alerts, account updates, and responses to your inquiries. You can opt out of non-essential communications in your account settings.
• Analytics: To track aggregate usage patterns and improve the user experience.
• Legal Compliance: To comply with applicable laws, regulations, and legal obligations.

How We Share Your Information

We do not sell your personal information. We may share your information with the following third parties:

• Stripe: We share payment and billing information with Stripe to process subscriptions and transactions.
• Auth0: We use Auth0 to manage authentication and user identity. Auth0 processes your email and optional social profile data according to their privacy practices.
• Anthropic (Claude API): We send marketplace listing data and analysis requests to Anthropic's Claude API. Your personal identifying information (name, email, account details) is not included in API calls. Anthropic does not use data for model training.
• Infrastructure Providers: Supabase (database hosting) and Upstash (cache/Redis) host our infrastructure. Data transmitted to these services is encrypted in transit with TLS.
• Error Tracking & Analytics: Sentry collects error logs and performance data to help us diagnose issues and improve reliability.
• Legal Requests: We may disclose information if required by law, court order, or government authority.

Data Security

We implement robust technical and organizational safeguards to protect your information:

• Encryption at Rest: Marketplace platform credentials are encrypted using AES-256-GCM before storage. Sensitive configuration data is similarly protected.
• Encryption in Transit: All data transmitted between your device and our servers uses TLS (Transport Layer Security).
• Authentication: Auth0 provides secure authentication with industry-standard protocols and optional multi-factor authentication.
• Access Controls: Access to sensitive data is restricted to authorized personnel on a need-to-know basis.

However, no system is completely secure. While we strive to protect your information, we cannot guarantee absolute security. We encourage you to use strong passwords and enable multi-factor authentication on your account.

Your Rights

Depending on your location, you may have the following rights:

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You can request that we correct inaccurate or incomplete information.
• Right to Deletion: You may request deletion of your account and associated data, subject to legal retention requirements.
• Right to Data Portability: You can request a copy of your data in a portable format.
• Right to Opt-Out: You can opt out of non-essential communications and certain types of data processing.

To exercise any of these rights, please contact us at privacy@phlip.app.

Cookies & Analytics

We use cookies to enhance your experience on the Platform. Cookies help us remember your preferences and understand how you use our services. You can control cookie preferences through your browser settings.

We use Sentry for error tracking and performance monitoring. Sentry collects information about errors and exceptions to help us improve stability. Sentry's data collection is minimal and does not include personal identifiers by default.

Third-Party Services

Our Platform integrates with the following third-party services. Each third party has its own privacy policy:

• Auth0: Identity and access management. Auth0 Privacy Policy
• Stripe: Payment processing. Stripe Privacy Policy
• Anthropic: AI analysis via Claude API. Anthropic Privacy Policy
• Supabase: Database hosting. Supabase Privacy Policy
• Upstash: Cache and data storage. Upstash Privacy Policy

Children's Privacy

The Platform is not intended for children under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected information from a child under 18, we will delete such information and terminate the child's account.

Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. You can request deletion of your account and associated data at any time. Some information may be retained for legal, tax, or compliance purposes.

International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your home country. By using the Platform, you consent to the transfer of your information to countries outside your country of residence, including the United States.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Effective Date" at the top of this page indicates when the policy was last revised. Your continued use of the Platform after changes become effective constitutes your acceptance of the updated Privacy Policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Privacy Team
INNOV8 Ventures LLC
Email: privacy@phlip.app