How we handle your data.

1. Who we are

Autoflip is based in Belgium. For questions about your privacy: hallo@autoflip.eu. We are the data controller for the processing described below. If you want our full company details, we send them on simple request via that address.

2. Which data we collect

From you as a user we keep:

• Email address (to log you in and send invoices)
• Plan choice and subscription status
• Your filter rules (brand, price, year, etc.)
• Telegram chat ID (to be able to send you alerts)
• The push address of your phone if you use the Autoflip app (to send your alerts as notifications; it disappears when you log out or delete your account)
• Photos you add yourself to a car in your stock
• Match history (which listings you received as alerts, 1 year, so you can find them in your workbook)
• Message preferences
• Payment reference (customer ID at Stripe or Mollie - we never see a card number)
• Phone number (given at signup, so we can reach you about your account)
• The IP address of your signup (once, to prevent anyone creating unlimited trial accounts)
• Your invoice details if you fill them in yourself (company name, address, VAT number) plus your invoices

During your use we register no analytics cookies, no IP addresses for tracking and no profiles. We do keep a short technical access log for security (max. 30 days).

Minimum age. Autoflip is only for people aged 18 or older. We do not knowingly collect data from anyone under 18. If we find out that an account belongs to someone under 18, we close it. We then delete all data we are not legally required to keep. Do you think a minor has an account? Email us at hallo@autoflip.eu.

3. Listing and seller data from the platforms

For each listing we store the generic characteristics (make, model, price, year, mileage, city, fuel, seller type as a category). We delete this listing data automatically after 7 days. Except listings you received as alerts: we keep those for 1 year, so you can find them in your workbook. We do not collect contact details (phone/email) of advertisers.

For the price rating we read the short text snippet shown in the search results on 2dehands and Marktplaats (at most 200 characters). We only look for words such as "engine damage" or "export" and we do not store the text itself. On Facebook Marketplace we read the listing description for this (at most 600 characters), also to find the year, mileage and gearbox. We do not store that text either. For Dutch listings we read the licence plate in the photo and request facts about the car from the RDW's open data, such as the MOT date, the list price when new and the odometer assessment. We do not store the plate itself; only those facts about the car stay with the listing and disappear with it. We also keep an anonymous price statistic (make, model, year, mileage, list price and asking price) without link, title or location, so no listing or seller can be traced from it. Without a list price we delete it after 90 days. With a list price from the RDW we keep it longer, but after 90 days we round the mileage, the asking price and the date.

Once a week a language model rereads part of that week's listing titles, to recognise damaged cars better. Only the listing title goes to OpenRouter, never a text snippet, name or contact detail. We ask OpenRouter to use only providers that do not store those titles or train on them.

We store no names, profiles or contact details of advertisers and we do not contact advertisers.

4. If you are a partner

If you sign up for the partner programme, we also keep: your name, email address, phone number, country, your referral code and, if you fill them in, your IBAN, the name on your account and your VAT number. Legal basis: performance of the contract (art. 6(1)(b) GDPR). For the payouts the statutory retention obligation applies as well.

When a customer comes in through your link, we record that they are assigned to you, together with the IP address of that signup. We use that IP only to spot whether someone is referring themselves. In your partner dashboard you see only a masked email address of the customers you referred, never the full address.

If you click a partner link, we set a cookie (af_ref) that keeps for 30 days which partner you came in through. That cookie contains only the partner's code and no personal data.

5. Legal basis

• Performance of the contract (Art. 6(1)(b) GDPR) - to deliver the service you pay for
• Legal obligation (Art. 6(1)(c)) - for invoicing and accounting
• Legitimate interest (Art. 6(1)(f)) - for security and fraud prevention
• Legitimate interest (Art. 6(1)(f)) - to send you as a customer the occasional email or Telegram message about Autoflip: tips, new features and offers. We may do so because you are or were a customer. You can always unsubscribe for free: click the unsubscribe link at the bottom of every email or send /stop_marketing to our Telegram bot. Your alerts keep running as normal.

6. Who else sees your data

Not every party below has the same role. That difference determines what we can enforce for you, so they are listed separately.

Processors: they act solely on our instruction

These parties may use your data only for what we instruct them to do. None of them may do anything else with it. With each of them we have a data processing agreement.

Independent controllers: they decide themselves what they do with your data

These parties are not our processors. They also process data for their own purposes and determine the purpose and means themselves. We cannot conclude a data processing agreement for that, because none exists for these services. What they do with your data is set out in their own privacy statement.

No data of yours

To search the listing platforms we use Webshare (proxy services, EU and US). None of your data passes through them: those connections only fetch public listings.

Statistics and session recordings. PostHog and Microsoft Clarity are only loaded once you tick the Statistics category in the cookie banner. If you do not, nothing about you is measured. PostHog registers which steps you take and recognises you by an internal customer number, never by your email address or phone number. Clarity makes a rendering of mouse movements, clicks and scrolling; no image or sound of you is recorded. Clarity deliberately does not run on your dashboard, your account page or the partner pages, because your invoice and contact details are on screen there. The Telegram connection code is masked in the recording. Microsoft processes this data in the United States; the basis for that is the EU-US Data Privacy Framework, for which the European Commission adopted an adequacy decision. You can withdraw your consent at any time via the link at the bottom of every page.

For Clarity, Microsoft is not a processor but an independent controller. That is an essential difference: Microsoft also processes the data coming in via Clarity for its own purposes, including improving its services. Microsoft determines the purpose and means itself. We therefore do not conclude a data processing agreement with Microsoft for Clarity; Microsoft does not offer one for this service. What Microsoft does with that data is set out in the Microsoft privacy statement. That is precisely why we load Clarity only after your explicit consent. On the pages that show your invoice and contact details it never runs.

7. Retention periods

• Account and filters: as long as your account is active. After your subscription ends, another 12 months, then we anonymise your data
• Listings: max. 7 days, then deleted automatically
• Match history: 1 year, for your workbook
• Withdrawals (name, email address and time): 2 years, as proof in a dispute about the cooling-off period
• Payment and invoice data: 7 years (statutory tax retention obligation)
• Access logs: 30 days
• Partner data and payouts: as long as you are a partner, then 7 years for the bookkeeping
• Push address of your phone: until you log out of the app, delete the app or delete your account

8. Your rights

Under the GDPR you have the right to:

• Access - download all your data from your dashboard ("Data-export · GDPR")
• Rectification - pas je gegevens aan in je dashboard
• Erasure - the "Delete account" button in your dashboard erases everything within 24h. We only keep invoices for 7 years (legal obligation)
• Restriction and objection - write to hallo@autoflip.eu
• Portability - data-export geeft je een JSON-bestand om te migreren
• Lodge a complaint - with the Data Protection Authority (BE) or Dutch Data Protection Authority (NL)

9. Cookies

We set cookies that are strictly necessary (the session token that keeps you logged in) plus two functional cookies: your language choice and the partner code you came in with. Statistics cookies from PostHog and Microsoft Clarity are only added if you consent to them in the cookie banner. We use no marketing or advertising cookies. See the full cookie statement.

10. Changes

For material changes we email you 14 days in advance. Continued use after that period means acceptance. Otherwise you can terminate your account free of charge.