Privacy Policy
Last updated October 6, 2026
BoxFlipping helps sellers turn products they already source into managed listings on eBay. This policy explains what information we collect when you visit this site or use the BoxFlipping app, how we use that information, and what choices you have. We kept the language plain on purpose. If anything here is unclear, email us and we will explain it.
Information we collect
Account information
When you create an account, we collect your email address and the password you choose. We store your password using a one way hashing method, which means we cannot read it and we never store it in plain form.
Workspace content
BoxFlipping is built around workspaces. The products, photos, prices, boxes, notes, and other details you add to a workspace are stored so the app can show them back to you and your team. Who can see a workspace depends on the roles the workspace owner assigns.
eBay connection data
If you connect an eBay store, eBay asks you to approve the connection on the eBay site. After you approve, eBay sends us authorization tokens for that store. We store those tokens so BoxFlipping can create and manage listings for you until you disconnect the store or the approval expires. We also keep listing details and sale records connected to your store so your inventory and sales history stay accurate inside the app.
TikTok import data
When you paste a TikTok product link into BoxFlipping, we read the product details that the page makes available, such as the title, the price, and the photos, and we save them into your workspace as a draft you can review and edit.
Waitlist emails
If you join the waitlist on this site, we collect the email address you enter so we can tell you when BoxFlipping opens. Joining the waitlist does not create an account.
Payment information
Paid plans are handled by ThriveCart. When you buy or renew a plan, ThriveCart collects and processes your payment. We do not see or store your full card number. ThriveCart tells us whether a payment succeeded, which plan you are on, and whether a subscription is active or cancelled, so we can set the right plan limits in your workspace.
Cookies and technical records
We use a session cookie to keep you signed in to the app. We also keep basic technical records about requests to our service, such as the time of a request and the address it came from. We use these records to run the service, to keep accounts secure, and to find problems when something breaks.
How we use information
We use the information above to run BoxFlipping for you. That includes showing your inventory, building and managing the listings you send to eBay, applying your plan, answering support questions, and sending the account and waitlist messages you asked to receive. We do not use your product photos or listing content to advertise other businesses.
When we share information
We share information only where the service needs it to work:
- eBay. When you ask us to publish or update a listing, we send the listing details and the photos to eBay under your connected store.
- ThriveCart. Plan purchases and renewals run through ThriveCart, which receives the information needed to process your payment.
- Service providers. Companies that provide hosting, storage, and similar infrastructure for BoxFlipping can process data on our behalf so the service can run.
- Legal reasons. We may share information when the law requires it, or when sharing is needed to protect our users, our service, or our rights.
We do not sell your personal information. We do not rent it or trade it.
How long we keep information
We keep account and workspace information while your account is open, because the service needs it to show your inventory and listings. Waitlist emails are kept until we send the launch notice or until you ask us to remove yours. eBay authorization tokens are kept until you disconnect the store or the approval ends. When you ask us to delete your account, we delete the personal information tied to it, apart from records we must keep for legal or accounting reasons.
Your choices
You can ask us to show you the personal information we hold about you, to correct it, or to delete it. Email support@boxflipping.com and tell us what you need. You can disconnect an eBay store inside the app at any time, which removes the stored authorization tokens for that store. You can leave the waitlist by emailing us from the address you signed up with.
eBay account deletion notices
eBay may tell us when a seller account connected to BoxFlipping has been closed. When we receive that notice, we delete the eBay data we hold for that seller account, including stored authorization tokens and listing data tied to that account.
Security
Data moving between your browser and BoxFlipping is encrypted in transit. Passwords are hashed. Access to stored data is limited to the systems and people who need it to run the service. No system is perfect and we cannot promise that information will never be exposed, but we work to protect it, and we will tell account owners if a serious problem affects their data.
Children
BoxFlipping is built for people who run a selling business. It is not directed at children, and we do not knowingly collect information from children.
Changes to this policy
When this policy changes, we will post the new version on this page and update the date at the top. If a change affects how we handle your information in a material way, we will say so plainly in the update.
Contact us
Questions about this policy or your information belong in an email to support@boxflipping.com.