Privacy Policy
Effective 30 August 2026 · Version 0.1-draft (draft)
This is a pilot-stage draft, not a final legal document.
flipexcess is an early, pilot-stage marketplace. This policy has not yet been reviewed by a qualified lawyer against Singapore's Personal Data Protection Act (PDPA) and PDPC guidance, and should not be relied on as complete. A fuller, professionally reviewed version will replace this page before flipexcess accepts real transactions at scale.
1. What we collect
To create an account and use flipexcess, we collect: your business name, email address, and password (via Supabase Auth); and, during business verification, your business registration details, GST status, a bank statement or equivalent document to confirm the account name, and contact person details. Listing and transaction activity (listings, bids, orders, questions, inspection requests) is stored against your account.
2. Why we collect it
Verification documents are used to confirm you're a real, authorised Singapore F&B business before you can publish listings, bid, or transact — unverified accounts may still browse and save drafts. We do not currently have a published minimisation or redaction policy for bank statements; you may redact balances and unrelated transactions when you upload one.[Full purpose limitation and retention schedule requires professional privacy review — see Session 06/08 of our public build plan.]
3. Who can see it
Verification documents are intended to be reviewed only by flipexcess's verification team. Public-facing information (your business name, verification status, and listing content) may be visible to other verified businesses or the public depending on the listing's visibility settings. We have not yet published a detailed access-control and reviewer-audit description for verification documents.[Access control claims require independent confirmation before publication — see Admin Session A04.]
4. How long we keep it
We don't yet have a published data-retention schedule. This section will be completed once one is defined.
5. Your rights
You can request a copy of the personal data we hold about your account, or request its correction or deletion, by emailing support@flipexcess.com. We have not yet built a self-service data export or deletion flow.
6. Changes to this policy
We'll update the effective date and version above whenever this policy changes, including once it has had professional review.
7. Contact
Questions about this policy, or requests relating to your personal data, can be sent to support@flipexcess.com.