Privacy Policy

1. About This Policy

This Privacy Policy explains how SuperFlip ("we", "us" or "our") collects, uses, discloses and protects your personal information when you visit our website, join our early access waitlist, use our tools or otherwise interact with us (together, the "Service").

We are based in Australia and handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, as well as other privacy laws that may apply to individuals in other jurisdictions, such as the EU/UK General Data Protection Regulation (GDPR), where relevant.

2. Personal Information We Collect

The types of personal information we collect depend on how you use the Service. We may collect:

2.1 Information you provide to us

• Contact details, such as your email address and any name or contact details you choose to provide when you join the waitlist, create an account, or contact us.
• Profile and business information, such as your country and city, preferred categories, platforms you sell on, typical deal sizes, profit targets, sourcing habits and other information you choose to submit in questionnaires or forms about how you use marketplaces and operate your reselling activities.
• Communications, including the content of emails or messages you send to us (for example, support requests, feedback or survey responses).

2.2 Information we collect automatically

When you visit our website or use the Service, we may automatically collect:

• Usage data, such as pages viewed, features used, time and date of visits, referring/exit pages and the way you interact with the Service.
• Device and technical data, such as your IP address, browser type and version, operating system, device identifiers and similar technical information.
• Approximate location derived from your IP address (for example, city and country), where permitted by law.
• Cookies and similar technologies – small files stored on your device that help us recognise your browser, understand usage patterns and improve the Service. See Section 7 below for more detail.

2.3 Information from third parties

We may receive information about you from third-party service providers (for example, analytics, email and customer support tools) and from publicly available sources, in accordance with those providers' privacy policies and the law. We may combine this information with the information we collect directly from you.

3. How We Use Personal Information

We use personal information for the following purposes, to the extent permitted by applicable law:

• to provide, operate and maintain the Service, including managing waitlists, accounts and user preferences;
• to analyse reselling behaviour and preferences so we can design features, alerts and tools that are relevant to you;
• to communicate with you, including sending administrative messages, early access invitations, feature updates and marketing communications (where permitted and with the ability to opt out);
• to personalise your experience, such as tailoring content, recommendations and alerts based on your settings and usage patterns;
• to monitor and improve the Service, including debugging, data analysis, testing, research and developing new products and features;
• to protect the security and integrity of the Service, prevent fraud and abuse, and enforce our Terms of Service; and
• to comply with our legal, regulatory and risk management obligations, and to respond to lawful requests by public authorities.

3.1 Legal bases for processing (EEA/UK users)

Where the GDPR or equivalent laws apply, we process personal information on one or more of the following legal bases:

• Contract – where processing is necessary to perform our contract with you or to take steps at your request before entering into a contract (for example, providing the Service you sign up for);
• Consent – where you have given us clear consent for a specific purpose (for example, certain marketing communications);
• Legitimate interests – where we have a legitimate business interest in processing that is not overridden by your rights and interests (for example, improving the Service, preventing abuse and personalising content); and
• Legal obligation – where processing is required to comply with applicable laws.

4. When We Share Personal Information

We do not sell your personal information. We may share personal information with:

• Service providers who help us operate the Service (for example, hosting, analytics, customer support, email delivery, communications and payment processing). These providers may be located in Australia or overseas and are only authorised to use personal information as necessary to perform services for us.
• Professional advisers, such as lawyers, auditors and insurers, where reasonably necessary for the purposes of obtaining advice, managing risk or complying with our obligations.
• Business transfers, in connection with a merger, acquisition, reorganisation or sale of some or all of our business or assets, in which case personal information may be transferred as part of the transaction.
• Law enforcement and regulators, where we are required or permitted by law to do so, or where we reasonably believe disclosure is necessary to protect our rights, your safety or the safety of others.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you, for example aggregated statistics about marketplace activity or user behaviour.

5. International Transfers

We are based in Australia but work with service providers and infrastructure that may be located in other countries, including countries in the European Union, the United States and elsewhere. This means your personal information may be transferred to and processed in countries that may have different data protection laws to those in your home country.

Where required by law, we take appropriate steps to ensure that international transfers are subject to suitable safeguards (for example, by using standard contractual clauses approved by the European Commission, or by ensuring recipients are subject to comparable privacy obligations).

6. Retention of Personal Information

We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Service, comply with our legal obligations, resolve disputes and enforce our agreements.

When we no longer need personal information, we will take reasonable steps to delete or de-identify it. In some cases, we may retain de-identified or aggregated information for analytics, product improvement and historical reporting.

7. Cookies & Similar Technologies

We use cookies and similar technologies to operate and improve the Service, remember your preferences, understand how users interact with our website and measure the effectiveness of our campaigns.

Most web browsers are set to accept cookies by default. You can usually choose to set your browser to remove or reject cookies, or to prompt you before cookies are stored. If you disable cookies, some features of the Service may not function properly.

8. Your Rights & Choices

Subject to applicable law, you may have the right to:

• request access to the personal information we hold about you;
• request that we correct inaccurate, out-of-date or incomplete personal information;
• request deletion of your personal information, in certain circumstances;
• object to or request restriction of certain processing, including personalised marketing;
• withdraw consent where processing is based on your consent (for example, marketing emails); and
• receive a copy of your personal information in a portable format, where technically feasible and required by law.

If you are located in the EEA/UK, you also have the right to lodge a complaint with your local data protection authority. If you are in Australia, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you are not satisfied with our response.

If you are a resident of certain US states (such as California), you may have additional rights in relation to your personal information under state privacy laws. We do not sell your personal information. You can contact us using the details in Section 10 to exercise your rights or ask questions.

You can opt out of marketing communications at any time by following the unsubscribe link in our emails or by contacting us. Even if you opt out of marketing, we may still send you non-promotional messages about your account or important service updates.

9. Security

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps may include technical, administrative and physical safeguards appropriate to the nature of the information we hold.

However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk. If you suspect any unauthorised access to your account or personal information, please contact us immediately.

10. Children

The Service is intended for adults who are engaged in or exploring reselling and related business activities. We do not knowingly collect personal information from children under 18 years of age. If you believe a child has provided us with personal information without appropriate consent, please contact us so we can take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, the Service or applicable laws. When we make material changes, we will update the "Last updated" date at the top of this page and may provide additional notice (for example, by posting a notice on our website). We encourage you to review this Policy periodically.

12. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or our handling of personal information, please contact us at support@superflip.ai.