Privacy Policy

1. Scope

This policy covers the CarFlip website and application at carflip.shop. It explains what information we collect when you create an account, build a listing, publish a vehicle, contact a seller, or apply for CarFlip Business early access.

2. Information we collect

• Account data — email address and authentication records needed to sign you in and keep your listings with your account.
• Listing content — vehicle details, VIN, mileage, title status, condition, disclosures, price, notes and photographs that you enter or upload.
• Buyer inquiries — the name, email, optional phone number and message a buyer submits on a published listing, which we deliver to that listing's seller.
• Business early access — business name, contact name, email, approximate inventory size and optional phone number.
• Technical data — standard server and security logs generated when your browser makes a request.

We do not collect payment card data, government identification, credit information or precise device location.

3. How we use it

To operate your account, save and score your listings, publish the listings you choose to publish, deliver buyer inquiries to the correct seller, respond to Business early-access requests, keep the service secure and prevent abuse, and communicate essential service messages such as password resets.

We do not sell personal information, and we do not run advertising or third-party behavioral tracking on CarFlip.

4. What is public

A listing is private until you publish it. When you publish, the vehicle details, photos and disclosures you entered become viewable by anyone with the link and can appear in the CarFlip marketplace. Your email address and account identifiers are not shown on public listing pages; buyers reach you through the inquiry form. Unpublishing removes public access going forward.

5. Service providers

CarFlip runs on third-party infrastructure that processes data on our behalf, including our hosting platform, our managed database, authentication and file storage provider, and — for vehicle specifications — the public NHTSA vPIC VIN lookup service. These providers may only process data to deliver their service to us.

6. Retention

Account, listing and inquiry records are kept while your account is active and for a reasonable period afterwards for security, dispute and record-keeping purposes. You can delete individual listings and photos at any time. To request deletion of your account and associated data, contact us at the address below.

7. Security

Data is stored with access controls that restrict each record to its owner, encrypted in transit, and photographs are held in private storage served through authorized requests only. No online service can guarantee absolute security, and we do not claim certification under any specific security or privacy framework.

8. Your choices

You can review and edit your listings, unpublish a public listing, delete photos, and request access to or deletion of your account data. Buyers who submitted an inquiry can request its removal by contacting us with the email address they used.

9. Children

CarFlip is not intended for anyone under 18 and we do not knowingly collect their data.

10. Changes and contact

Updates to this policy will be posted here with a new effective date. Questions or requests: privacy@carflip.shop.