Introduction
UFLIP, LLC ("UFLIP," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our websites (uflip.com, my.uflip.com, and related subdomains), mobile applications, and services (collectively, the "Platform").
By using our Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree with our practices, please do not use our Platform.
Information We Collect
We collect different types of information depending on how you interact with our Platform and whether you register as a Flipper (independent contractor) or Broker (business user).
Information You Provide Directly
Account Registration (All Users):
- Name, email address, phone number
- Username and password
- Mailing address
Flipper Registration (Independent Contractors):
- Government-issued identification (driver's license, passport, or state ID)
- Selfie photograph for identity verification
- Social Security Number (for tax reporting/1099 purposes)
- Bank account or payment information
- Date of birth
Broker Registration (Business Users):
- Business name and address
- Tax identification number (EIN)
- Payment and billing information
- Point-of-sale system credentials (for integration)
Transaction Information:
- Ticket purchase details and history
- Bid amounts and auction participation
- Payment transactions
- Communications with support
Information Collected Automatically
When you access our Platform, we automatically collect:
- IP address and device identifiers
- Browser type and operating system
- Pages viewed and features used
- Date, time, and duration of visits
- Referring website or source
- Location data (with your permission)
Cookies and Tracking Technologies
We use cookies, web beacons, and similar technologies to:
- Keep you logged in and remember your preferences
- Understand how you use our Platform
- Improve our services and user experience
- Provide relevant communications
You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Platform.
Identity Verification (Flippers)
Why We Verify Identity: UFLIP's compliance framework requires that every Flipper is a verified real person. Identity verification is central to our commitment to legal, ethical ticket acquisition.
Plaid Identity Verification
We use Plaid, Inc. ("Plaid") to verify Flipper identities. When you complete identity verification, Plaid may collect:
- Images of your government-issued ID
- Selfie photographs for facial comparison
- Information extracted from your ID (name, address, date of birth, ID number)
Plaid processes this information according to their own privacy policy, available at plaid.com/legal. We receive verification results (verified/not verified) and verified identity data from Plaid.
Biometric Data Notice
The identity verification process may involve biometric data (facial geometry extracted from your selfie for comparison with your ID photo). This biometric data is:
- Processed by Plaid, not stored by UFLIP
- Used solely for identity verification purposes
- Retained by Plaid according to their data retention policies
- Deleted after verification is complete (Plaid does not retain biometric data)
Illinois Residents: By submitting to identity verification, you consent to the collection and use of biometric identifiers as described above, in compliance with the Illinois Biometric Information Privacy Act (BIPA).
How We Use Your Information
We use the information we collect to:
Provide and Improve Our Services
- Create and manage your account
- Verify your identity (Flippers)
- Process transactions and payments
- Facilitate ticket acquisition and transfers
- Integrate with your point-of-sale systems (Brokers)
- Provide customer support
- Improve our Platform and develop new features
Compliance and Legal Obligations
- Maintain audit trails for regulatory compliance
- Issue tax documents (1099s for Flippers)
- Respond to legal requests and prevent fraud
- Enforce our Terms of Service
Communications
- Send transaction confirmations and account updates
- Notify you of ticket requests and opportunities (Flippers)
- Provide platform announcements and policy updates
- Respond to your inquiries
Disclosure of Your Information
We may share your personal information in the following circumstances:
Service Providers
We share information with third-party service providers who perform services on our behalf (see Third-Party Service Providers section below).
Business Transfers
If UFLIP is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.
Legal Requirements
We may disclose your information if required to do so by law or in response to valid legal requests, including:
- Court orders and subpoenas
- Government or regulatory requests
- To protect our rights, privacy, safety, or property
- To investigate potential violations of our Terms of Service
With Your Consent
We may share your information for other purposes with your explicit consent.
We Do Not Sell Your Personal Information. UFLIP does not sell, rent, or trade your personal information to third parties for their marketing purposes.
Third-Party Service Providers
We work with the following categories of service providers:
| Provider Type | Purpose | Data Shared |
|---|---|---|
| Plaid, Inc. | Identity verification (KYC) | ID documents, selfie, identity data |
| Payment Processors | Payment processing | Payment card/bank info, transaction amounts |
| Cloud Hosting | Platform infrastructure | All platform data (encrypted) |
| Analytics Providers | Usage analytics | Anonymized usage data |
| Communication Services | Email and SMS delivery | Contact information, message content |
All service providers are contractually obligated to protect your information and use it only for the purposes we specify.
Data Retention
We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specific retention periods include:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account information | Duration of account + 3 years | Service provision, legal compliance |
| Transaction records | 7 years | Tax and regulatory compliance |
| Identity verification records | 5 years after last activity | Regulatory audit requirements |
| Tax documents (1099s) | 7 years | IRS requirements |
| Support communications | 3 years | Service quality, dispute resolution |
| Usage logs | 1 year | Security, fraud prevention |
After the retention period expires, we securely delete or anonymize your information.
Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Access controls limiting who can view your information
- Regular security assessments and monitoring
- Employee training on data protection
- Incident response procedures
Data Breach Notification
In the event of a data breach that affects your personal information, we will:
- Notify affected users within 72 hours of discovery (where required by law)
- Provide information about what data was affected
- Describe steps we are taking to address the breach
- Offer guidance on steps you can take to protect yourself
While we take security seriously, no method of transmission over the internet is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.
Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
Access and Portability
You can request a copy of the personal information we hold about you in a commonly used, machine-readable format.
Correction
You can update your account information at any time by logging into your account. You may also contact us to correct inaccurate information.
Deletion
You can request deletion of your personal information, subject to certain exceptions (such as legal retention requirements). To request deletion, contact us at support@uflip.com.
Opt-Out of Communications
You can opt out of promotional communications by clicking "unsubscribe" in any email or by updating your notification preferences in your account settings. Note that you cannot opt out of transactional communications related to your account or transactions.
Cookie Preferences
You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies.
To exercise any of these rights, contact us at support@uflip.com. We will respond to your request within 30 days (or sooner if required by applicable law).
California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
Right to Know
You have the right to request information about the categories and specific pieces of personal information we have collected, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
Right to Delete
You have the right to request deletion of your personal information, subject to certain exceptions.
Right to Correct
You have the right to request correction of inaccurate personal information.
Right to Opt-Out of Sale/Sharing
UFLIP does not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
Right to Non-Discrimination
We will not discriminate against you for exercising your privacy rights.
Categories of Information Collected
In the past 12 months, we have collected the following categories of personal information:
- Identifiers (name, email, phone, address, IP address)
- Financial information (payment card, bank account)
- Government identifiers (SSN for tax purposes, ID for verification)
- Biometric information (facial geometry for identity verification, processed by Plaid)
- Internet activity (browsing history on our Platform)
- Professional information (business name, role)
How to Submit a Request
To exercise your California privacy rights, you may:
- Email us at support@uflip.com
- Call us at [phone number]
We will verify your identity before processing your request. You may designate an authorized agent to submit requests on your behalf.
Children's Privacy
Our Platform is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@uflip.com, and we will delete that information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you by email (if you have an account)
- Display a prominent notice on our Platform
We encourage you to review this policy periodically. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
UFLIP, LLC
Email: support@uflip.com