Last updated: September 16, 2026
SideFlip - Project Ledger is built to help you track your flips and know your profit. We take your privacy seriously and keep things simple — no ads, no selling your data, ever.
When enabled, PostHog usage analytics may use a generated device or session identifier and your SideFlip account ID after sign-in. For verified subscription payments, analytics may include provider, plan, status, amount, and currency. Analytics never include project titles or descriptions, listing text, photos, raw VINs, project financial amounts, card details, credentials, provider transaction identifiers, or signed purchase data. Session replay, input autocapture, advertising tracking, and IP geolocation are disabled.
When you request a generated listing description, SideFlip sends the project details needed for that request—including your seller brief, relevant project notes, existing listing description, and relevant work, parts, and expense descriptions—to xAI to generate the draft. Do not include information you do not want processed for listing generation. Generated drafts remain editable and should be reviewed before use.
When you start manufacturer maintenance research, SideFlip sends only the vehicle or item type and available confirmed year, make, model, trim, engine, transmission, drivetrain, fuel, and market details to xAI so Grok can search approved manufacturer or authorized-dealer sources. SideFlip does not send the VIN, serial number, notes, location, costs, or expenses for this research. You must review cited source links and select suggestions before anything is added to a maintenance schedule. SideFlip does not use listing or maintenance requests to train models; xAI may retain request data for safety and abuse monitoring for up to 30 days under its provider policy.
When you choose Decode VIN, SideFlip sends your full VIN to the U.S. Department of Transportation’s National Highway Traffic Safety Administration (NHTSA) vPIC service solely to decode vehicle details. SideFlip’s VIN decode service does not store or log the full VIN. SideFlip may cache the decoded vehicle fields and NHTSA warning codes for up to 30 days under an HMAC-derived lookup key instead of the full VIN. VIN-request rate-limit records contain an account ID, request count, and timestamps—not the VIN—and are eligible for cleanup after seven days without an update. NHTSA processes the request under its own policies; SideFlip does not control or promise NHTSA’s retention period.
We use trusted third-party services to run SideFlip:
Each of these services has their own privacy policy. We only share the minimum data needed for them to do their job.
Photos you add to projects and receipts are stored in Supabase Storage. SideFlip serves these images through public, non-expiring URLs. The URLs are designed to be unguessable, but they are not access-controlled; anyone who has or obtains an image URL can view the image without signing in. We do not use your photos for advertising or sell them.
Your account and project data are kept while your account is active. Product analytics events are automatically deleted after 12 months. VIN decode cache entries expire after 30 days; the cache contains decoded fields, NHTSA warning codes, and an HMAC-derived lookup key, not the full VIN. VIN-request rate-limit records are eligible for cleanup after seven days without an update.
Account deletion removes your SideFlip authentication account and customer content. It does not cancel an Apple or Stripe subscription. Apple, Stripe, xAI, NHTSA, and other providers may retain billing, transaction, fraud-prevention, security, or legal records under their own policies and applicable law.
SideFlip retains a minimal deletion-suppression record containing the account ID and Apple or Stripe subscription identifiers as needed to prevent delayed Apple or Stripe events from recreating access for a deleted account and to satisfy security or legal obligations. If analytics were enabled, SideFlip queues a PostHog analytics deletion request before deleting the account. Submission and provider erasure are asynchronous; SideFlip retries the request until PostHog accepts it, and PostHog controls final processing timing.
You can disable product analytics in SideFlip Settings. You can also request a copy of your data, ask us to delete it, or ask any questions about how it's used by contacting us below. We'll respond within 5 business days. We do not sell personal information or use product analytics for cross-app advertising.
SideFlip is not directed at children under 13 and we do not knowingly collect data from them.
If we make significant changes to this policy, we'll notify you by email or in the app.
Questions? We're real people — just send us an email.
tyler@tourbillionenergy.com
SideFlip · sideflip.org