1. Introduction
This Privacy Policy explains how FlipReply ("we", "us", or "our") collects, uses, stores, and protects information when you install and interact with our software suite, which includes our Chrome Extension, Web Dashboard CRM, and synchronization services (collectively, the "Service").
By installing the extension or accessing our portal, you agree to the collection and use of information in accordance with this policy.
2. Information We DO NOT Collect
To guarantee complete safety for your classified seller account, we strictly avoid collecting:
- No Passwords or OTPs: We never log, intercept, or request your OLX account login credentials or multi-factor authentication codes.
- No Payment Details: We do not collect credit card numbers, CVVs, UPI PINs, or bank account credentials.
- No General Web Browsing History: The extension operates only when you visit verified OLX chat domains (
olx.in/nf/chat/*). It cannot access any other website you browse.
3. Information We Collect and Process
We process only the minimum operational data required to deliver AI suggestions and multi-turn CRM synchronization:
- Ad Specifications & Floor Rules: Ad title, listed price, minimum acceptable floor price, pickup instructions, and seller notes configured in your dashboard.
- Active Chat Turn Context: Buyer messages in active threads to formulate accurate, relevant RAG responses.
- Outbox Queue Payloads: Replies you draft from the central CRM queued for automated relay to OLX.
- Anonymous Performance Telemetry: Error logs, extension version identifiers, and latency metrics to diagnose bugs.
4. How Your Data Is Stored & Protected
We implement industry-standard encryption protocols to protect your information:
- Client-Side Sandboxing: All DOM interactions occur in isolated Chrome content scripts.
- Encryption in Transit: All communication between the Chrome Extension, Web CRM, and Firebase Realtime Database is encrypted via TLS 1.3 / HTTPS.
- Role-Based Access: Firebase Security Rules ensure that only your authenticated seller account (UID) can access your listings, chat history, and outbox queue.
5. AI Processing & Third-Party LLM Providers
When you trigger on-demand AI suggestions, the multi-turn chat context and your ad policies are sent to the AI inference engine (Google Gemini API or OpenAI API).
If you provide your own API key via "Bring Your Own Key" (BYOK), the requests are billed directly to your provider account according to their enterprise privacy commitments (meaning your data is not used for public model training).
6. Data Retention and Deletion Rights
You retain complete ownership over your seller data. At any time, you can:
- Clear cached conversation histories from your local browser storage.
- Delete ad listings, buyer threads, and outbox logs from the central dashboard.
- Request a full purge of your Firebase account records by contacting our support team.
7. Contact Us
If you have questions regarding this Privacy Policy or your data rights, please contact our Data Protection Officer at:
Email: privacy@FlipReply.com
Support: support@flipreply.com