Privacy Policy

This policy explains how FlipTally ("we", "us") collects, uses and protects your personal data when you use fliptally.co.uk and the FlipTally app. FlipTally is operated by Nathan West, trading as FlipTally, a sole trader based in the United Kingdom, who is the data controller and is registered with the UK Information Commissioner's Office (ICO registration number ZC210980). You can reach us at support@fliptally.co.uk, or by post at FlipTally, 27 Old Gloucester Street, London, WC1N 3AX. We collect as little as we can and never sell your data.

What we collect

• Waitlist: your email address and the part of the site you signed up from.
• Your account: your email address. Sign-in is passwordless (we email you a one-time code), so we do not store a password. If you choose to let us quote your feedback, we also store the first name you give us to credit the quote.
• The free tax calculator: figures you type into the free calculator are processed in your browser to show your result. We do not send those figures to our servers or store them unless you sign in and choose to save an import.
• Your marketplace sales (when you connect or upload them): if you connect eBay, we access and store your transaction data (sales, postage, fees, refunds, order and item details, dates) so we can work out your profit and tax. If you upload a Vinted income report, we read it in memory to extract your sale rows and store those; we do not keep the PDF.
• Costs and settings: any cost of goods, trading status and preferences you enter.
• Subscription: if you subscribe, your name and email and your Stripe customer and subscription identifiers and status. Your card details are collected and processed directly by Stripe; we never see or store your full card number.
• HMRC filing (only if you use it): if you connect HMRC (Making Tax Digital) and file through FlipTally, we store the access and refresh tokens HMRC issues, your National Insurance number (so you need not retype it), and a record of exactly what we submitted on your behalf and HMRC's response.
• Referrals and feedback: your referral code and who you referred, and any feedback you submit.
• Usage and technical data: basic, privacy-friendly usage analytics (via Vercel Analytics) and standard server logs (e.g. IP address) needed to run and secure the service.

How we use it, and our legal basis

• To provide the app you signed up for — importing your sales, calculating your profit and tax, generating your SA103/Tax Pack, and (if you use it) filing to HMRC. Legal basis: performance of a contract.
• To take payment and manage your subscription. Legal basis: contract.
• To send the waitlist and product/marketing emails, and to quote feedback where you have agreed. Legal basis: consent (you can withdraw it any time via the unsubscribe link or by emailing us).
• To keep records we are legally required to keep, including tax and accounting records and the audit log of anything filed to HMRC. Legal basis: legal obligation.
• To run, secure and improve the website and app (including basic usage analytics and fraud/abuse prevention). Legal basis: our legitimate interests in operating a reliable service.

We do not sell your data and we do not use it for third-party advertising.

Who we share it with

We use a small number of trusted service providers ("processors") to run FlipTally. They only process your data on our instructions:

• Supabase: our database and sign-in provider — stores your account, imported sales, costs, settings, subscription record, referrals, feedback and (if you use HMRC filing) tokens, National Insurance number and submission log.
• Vercel: hosts the website and app and provides privacy-friendly usage analytics.
• Stripe: processes card payments and manages subscriptions (a regulated payment provider).
• Resend: sends our transactional and summary emails (e.g. your welcome email and monthly summary).
• Cloudflare: provides our domain, DNS and email routing.

We also exchange data with two services at your direction: eBay, when you connect your account so we can read your sales, and HMRC, when you choose to file your figures. We are not affiliated with or endorsed by eBay, Vinted, Depop or HMRC, and we never ask for your marketplace password.

International transfers

Some of our processors are based outside the UK. Where personal data is transferred outside the UK, we rely on appropriate safeguards (such as UK adequacy regulations or the ICO's International Data Transfer Agreement / Standard Contractual Clauses).

Cookies and analytics

FlipTally does not use advertising cookies. We use strictly necessary cookies to keep you signed in (Supabase). Our usage analytics (Vercel Analytics) is cookieless but does process limited technical data such as your IP address to produce aggregate statistics. Our payment provider (Stripe) may set cookies that are strictly necessary to process a payment securely on its own checkout page.

How long we keep it

• Waitlist emails: until you ask us to remove them or the project ends.
• Account, sales and tax data: while your account is active. Where we are required to keep tax and accounting records (including anything filed to HMRC), we retain them for as long as UK law requires (generally around six years).
• eBay / HMRC tokens: until you disconnect the relevant account or delete your account.

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have it corrected or deleted;
• object to or restrict how we use it;
• ask for a copy in a portable format;
• withdraw consent at any time (e.g. unsubscribe).

To exercise any of these, email support@fliptally.co.uk and we will action your request (including deleting your account and associated data, subject to records we must keep by law). You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.

Changes

We may update this policy as the product grows. We'll change the "last updated" date above when we do.

Contact

Questions about your data? Email support@fliptally.co.uk.