Flipeo PR

Privacy Policy

Last updated: October 20, 2026

This Privacy Policy explains how Flipeo PR ("we", "us") collects, uses, and protects information when you use our service. We try to keep this short and plain. Questions: [email protected].

1. What We Collect

You give us

  • First and last name
  • Email address
  • Phone number
  • A password (stored only as a one-way bcrypt hash, never plain text)
  • Invite code (during private beta)
  • Anything you choose to send us (support messages, feedback)
  • Files, documents and records you add to your account

We collect automatically

  • IP address and approximate location (country/region)
  • Browser type, device, and operating system
  • Pages visited and features used
  • Search queries you run inside the platform
  • Errors encountered and timestamps
  • Records of your acceptance of our terms, policies and agreements
  • Device and browser identifiers

From your billing transaction

When you subscribe to a paid plan, payment is handled by external providers we contract with. We never see, store, or have access to your full credit card number, CVC, or bank account. We receive limited information from our payment provider, such as a customer reference ID, your subscription status, billing interval, the last 4 digits of your card, and payment-method identifiers.

2. How We Use It

We use the information collected to:

  • Authenticate you and operate the service
  • Process payments and send billing receipts
  • Send transactional email: verification codes, password resets, billing notifications, important service announcements
  • Detect and prevent fraud, chargeback abuse, scraping, and other violations of our Terms
  • Respond to support requests
  • Improve the service through aggregated analytics
  • Comply with legal obligations and respond to lawful requests
  • Enforce our Terms and establish, exercise, or defend legal claims

We do not sell, rent, or trade your personal information. We do not send marketing or promotional emails. We do not share your data with advertisers or data brokers.

3. External Providers

We rely on a small set of trusted external providers to operate, for payment processing, transactional email, content delivery and bot protection, maps and imagery, cloud hosting, and other services needed to operate. Each receives only the data needed to do its job. None of these providers receive your password, payment card number, or sensitive financial data.

You can request the current list of named providers by emailing [email protected].

4. Cookies

We use cookies only for things that make the service work:

  • Authentication: an HTTP-only, secure cookie that keeps you logged in
  • Bot protection: a short-lived cookie used by our anti-bot challenge during signup and login

We use Google Analytics to count visits. We don't use advertising cookies or retargeting pixels.

5. Property & Public Records

Flipeo PR aggregates publicly recorded property data (parcels, deeds, ownership history, transaction prices, court records, and public notices) from Puerto Rico government sources and other publicly available providers. This is public-record data about properties, not personal information about you (the user). It's indexed and made searchable by us.

If you believe a public record displayed about you contains an error, contact the government office that keeps that record for a correction. We can only display what the public record holds.

6. How Long We Keep It

  • Active accounts: while your account is open
  • Closed accounts: deleted within 30 days of account closure (except records we keep as required by law or to establish, exercise, or defend legal claims)
  • Server logs: 90 days, then automatically purged
  • Email verification codes / password reset tokens: 15 minutes
  • Support communications: kept while your account is active for context

7. Security

What we do to protect your data:

  • HTTPS (TLS) for all traffic
  • Bcrypt password hashing (cost factor 12)
  • HTTP-only authentication cookies (immune to JavaScript theft / XSS)
  • Bot mitigation and DDoS protection at the edge
  • Encrypted database backups
  • Principle of least privilege for staff access

No system is 100% secure. If we discover a breach affecting your personal information, we will notify you within 72 hours.

8. Your Rights

You can:

  • Access your account data from your dashboard
  • Correct account details from your settings
  • Delete your account. We'll remove personal data within 30 days
  • Export a copy of your personal data: email [email protected]
  • Object to specific processing

California residents have additional rights under the CCPA, including the right to know what information we hold about you, the right to delete it, and the right to non-discrimination for exercising those rights. We do not sell personal information. To exercise CCPA rights, email [email protected].

We respond to all rights requests within 30 days.

9. Children

The service is not directed to people under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we'll delete it.

10. Where Your Data Lives

Flipeo PR is hosted in the United States. By using the service, you agree to your data being processed in the U.S. and Puerto Rico.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If a change is material, we'll notify active users by email at least 14 days before it takes effect. The "Last updated" date at the top reflects the most recent revision. Continued use of the service after changes take effect means you accept the updated Policy.

12. Contact

For privacy-related questions, requests, or complaints:
Email: [email protected]
Web: flipeopr.com
Jurisdiction: Commonwealth of Puerto Rico (United States)