Privacy Policy

We collect the following types of information:

• Account information: name, email address, username, password (stored as a bcrypt hash — we never store plaintext passwords), and optional profile information (bio, location, profile photo).
• Google Sign-In data: if you choose to sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.
• Listing content: photos, descriptions, specs, prices, and location for items you list on the marketplace.
• Messages: direct messages exchanged between users, stored to deliver them and provide conversation history.
• Reviews: ratings and text reviews you submit for RC models and other sellers.
• Technical information: IP address, browser type, device identifiers, and general usage patterns (for security and service improvement).

Your information is used to:

• Create and maintain your account and authenticate sign-ins
• Display your listings and profile publicly within the marketplace
• Enable communication between buyers and sellers
• Send you essential service notifications (not marketing, unless you opt in)
• Detect and prevent fraud, abuse, or violations of our terms
• Improve the Service based on how users interact with it

We do not sell your personal information. We share information only in these cases:

• Publicly visible content: your username, profile photo, listings, reviews, and seller rating are visible to other users. Your email address is not publicly displayed.
• Service providers: we use infrastructure providers (hosting, database, email delivery) that process data on our behalf under confidentiality obligations.
• Legal compliance: if required by law, court order, or government request, we may disclose information to the extent legally required.
• Safety: we may share information to protect the rights, property, or safety of RC Flip, our users, or the public.

When you sign in with Google, we receive only the basic profile information Google shares by default: your name, email address, and profile picture. We do not access your Gmail, Google Drive, Contacts, Calendar, or any other Google service data. We use this information solely to create and authenticate your RC Flip account.

You can revoke RC Flip's access to your Google account at any time from your Google Account settings at myaccount.google.com/permissions.

We retain your account information as long as your account is active. You may request deletion of your account at any time by contacting us, and we will delete your personal information within 30 days except where retention is required by law or to resolve disputes. Messages and reviews tied to a deleted account may remain visible in an anonymized form.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information in your account
• Request deletion of your personal information
• Object to or restrict processing of your data
• Export your data in a portable format

To exercise any of these rights, contact us at the email listed at the bottom of this policy.

We use reasonable technical and organizational measures to protect your information, including password hashing, HTTPS encryption in transit, and access controls on our servers. However, no online service can guarantee absolute security, and you use the Service at your own risk.

RC Flip is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Significant changes will be communicated via email or a notice on the Service.

Questions or requests related to this policy can be sent to privacy@rcflip.com.