Privacy Policy
Last updated: October 2026
FlipsideUS ("FlipsideUS," "we," "us") provides an all-in-one platform that gives local businesses a website with online ordering, bookings, payments, and point-of-sale. This policy explains what information we handle and how we protect it. It covers two groups: the businesses that use FlipsideUS ("merchants") and the customers who shop or book on a merchant's FlipsideUS site.
Information we collect
From merchants: account details you provide when you sign up — business name, owner name, email, phone, and the content you add (menu, services, hours, branding). We also process operational data your business generates on the platform (orders, bookings, staff logins).
From your customers: we deliberately keep this minimal. For an order or booking we store a first name and a phone number and the order/booking details — not full profiles. A delivery or service location is kept as a job-scoped map pin, not a saved street address, and is automatically deleted after the job per the merchant's retention setting.
Payment information: card payments are processed by our payment provider, Stripe. Card numbers are entered directly on Stripe's secure fields and are never stored on our servers — we retain only a payment reference for reconciliation and refunds.
If a merchant's staff member connects their Google Calendar: this is optional and done individually by that person, from their own Google account — never required, and never done on a customer's or merchant's behalf without that specific staff member's sign-in to Google. If they choose to connect it, we access their calendar's free/busy times (when they're available or not — never the title, description, attendees, or any other detail of their events) so the platform can avoid booking a customer appointment on top of something already on their personal calendar. We store their Google account email (so they can see which account is connected) and an encrypted security token that lets us check their calendar on their behalf; we do not store calendar entries themselves. A staff member can disconnect this at any time from their own account settings, which deletes that stored token immediately. We do not use this access for advertising, and we do not share it with anyone outside the specific business the staff member works for.
How we use information
To operate and support the platform: build and host merchant sites, process orders and bookings, take payments and issue receipts, send transactional notifications (order/booking confirmations, reminders), provide customer support, and keep the service secure and reliable. With a merchant's configuration, we send that merchant's own marketing messages to customers who have opted in.
What we don't do
We do not sell personal information. We do not build advertising profiles of a merchant's customers. We keep customer data lean by design.
Sharing
We share information only with service providers that help us run the platform (for example, Stripe for payments, messaging providers for email/SMS, and Google — only for the staff member who has personally chosen to connect their calendar, as described above), and only as needed to provide the service. We may disclose information if required by law. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Data retention & your choices
Merchants own their business and customer data and can export or request deletion of it. Customers can reply STOP to opt out of SMS at any time. Job-scoped delivery/service locations are purged automatically on the merchant's schedule. A staff member who has connected their Google Calendar can disconnect it at any time from their account settings, or by revoking access directly from their Google Account's security settings — either way, our access and the stored security token are removed.
Security
We use encryption in transit (HTTPS), keep card data off our systems (handled by Stripe), enforce tenant isolation so one business's data is never visible to another, and take regular backups.
Contact
Questions about this policy or your data? Email hello@flipsideus.com.
This policy is provided for transparency and may be updated as the service evolves. It is not legal advice.