Privacy Policy

1. Introduction

Flow Auctions Inc. ("Flow Dealers," "we," "us," or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, process, and safeguard your information when you use our B2B marketplace platform for professional dealers, including our website, mobile applications, APIs, and all related services (collectively, the "Platform").

This Privacy Policy applies to all users, including dealers, buyers, sellers, administrators, and visitors. By accessing or using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and consent to our collection, use, and disclosure of your information as described herein.

IMPORTANT: If you do not agree with our privacy practices described in this Policy, please do not use our Platform or provide us with any personal information.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us:

• Account Information: Name, email address, phone number, business name, tax ID (EIN or SSN), business address, and password
• Business Verification: Business license, dealer licenses, tax documentation, government-issued identification
• Financial Information: Bank account information (via Stripe Connect), payment method details, billing address
• Listing Information: Photos, descriptions, pricing, inventory details, grading information
• Transaction Data: Purchase history, sales records, offers, shipping information
• Communications: Messages, support requests, feedback, and correspondence

2.2 Information Collected Automatically

When you use our Platform, we automatically collect certain information:

• Device Information: IP address, browser type, device type, operating system, mobile device identifiers
• Usage Information: Pages viewed, features used, search queries, browsing behavior, session duration
• Location Information: General location based on IP address (with your consent for precise location)
• Cookies and Tracking: Cookies, web beacons, pixels, and similar tracking technologies

2.3 Information from Third Parties

• Stripe Connect: Payment processing, payout information, fraud prevention data
• OAuth Providers: Google, Apple Sign-In (name, email, profile information)
• Shipping Partners: Shippo, ShipStation (shipping labels, tracking, delivery confirmation)
• Verification Services: Business verification, identity verification, fraud prevention

3. How We Use Your Information

We use your information for the following purposes:

3.1 Platform Operations

• Create and manage your account
• Process transactions, payments, and payouts
• Facilitate listings, offers, and sales
• Provide customer support and respond to inquiries
• Send transactional emails and notifications

3.2 Business and Security

• Verify business credentials and dealer licenses
• Prevent fraud, abuse, and unauthorized access
• Comply with legal obligations and regulations
• Enforce our Terms of Service and policies
• Protect the rights and safety of users

3.3 Platform Improvement

• Analyze usage patterns and trends
• Improve features, functionality, and user experience
• Develop new products and services
• Conduct research and analytics
• Personalize content and recommendations

4. Information Sharing

We share your information in the following circumstances:

4.1 With Other Dealers

When you list items or make purchases, we share necessary information with other dealers to facilitate transactions (business name, shipping address, contact information).

4.2 With Service Providers

• Stripe: Payment processing, payouts, fraud prevention
• Shippo/ShipStation: Shipping labels, tracking, delivery
• AWS: Cloud hosting, data storage, infrastructure
• PostHog: Analytics and product insights
• Email Services: Transactional emails, notifications

4.3 Legal Requirements

We may disclose your information when required by law, court order, subpoena, or to protect our rights, property, or safety.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication and access controls
• Regular security audits and monitoring
• PCI DSS compliance for payment processing
• Employee training and confidentiality agreements
• Incident response and breach notification procedures

6. Your Privacy Rights

You have the following rights regarding your information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your information (subject to legal obligations)
• Portability: Request a copy of your data in a portable format
• Opt-Out: Unsubscribe from marketing emails and notifications
• Object: Object to certain processing activities

To exercise these rights, contact us at privacy@flowauctions.com.

7. Data Retention

We retain your information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Account information is retained for 7 years after account closure for regulatory compliance. Transaction records are retained for 10 years for tax and audit purposes.

8. Children's Privacy

Flow Dealers is a B2B platform for professional dealers and businesses. Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries outside your jurisdiction, including the United States. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and data processing agreements with service providers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our Platform. Your continued use of the Platform after changes become effective constitutes acceptance of the updated Privacy Policy.