1. Controller and data
Flip Oppussing AS, Norwegian organisation number 928 635 414, is the controller for Flip. Contact hei@flip.no.
We process account and contact details, language and notification choices, addresses, descriptions, images, documents, quotes, contracts, chat, project logs, defects, reviews, payment status, business and registry data, and necessary security and usage logs.
2. Purposes and legal bases
We use data to provide the account and project flow, verify businesses, communicate, document contracts, support invoices and payments, prevent misuse and meet legal duties. The legal basis is usually a contract, a legal obligation or our legitimate interest in a secure and effective service.
Personal product analytics, advertising measurement and marketing require separate consent. After an explicit refusal we may count a limited set of product steps and verified conversions without an analytics identifier, account link, free text or session recording. Before a choice no analytics events are sent. Consent can be withdrawn in the privacy settings.
3. Artificial intelligence
Flip may use AI to structure text and images, suggest questions, describe scope and provide indicative estimates. Results may be wrong and must be assessed by users. We do not make decisions with legal or similarly significant effects based solely on an AI result.
4. Sharing and providers
Job data are shared with those who need them to assess or perform the work. We use providers including Amazon Web Services, OpenAI, Google, SendGrid, Twilio and Stripe where enabled. PostHog EU is used for personal product analytics with consent and, where enabled, limited counts without analytics identifiers after explicit refusal. Session recording is disabled. Google and Meta are used for optional analytics and advertising measurement after the relevant consent. Transfers outside the EEA use a valid transfer mechanism and safeguards.
5. Retention and deletion
Data are kept while the account and contractual relationship are active, then deleted or anonymised when no longer needed. Contracts, invoices, transactions, security logs and dispute records may be kept longer for law or legal claims. Email and SMS delivery logs are kept only as long as needed for operations, security and documentation.
6. Your rights
You may request access, correction, deletion, restriction and portability, object to legitimate-interest processing and withdraw consent. Use Profile or contact hei@flip.no. You may complain to Datatilsynet or the data protection authority in your country.
7. Cookies, security and changes
Necessary cookies and similar technologies support sign-in, security, language, operation and remembering the privacy choice. Personal product analytics and advertising tracking require consent. We use technical and organisational safeguards, restrict access and will communicate material changes to this notice.
Google Maps on company profiles
Ratings are fetched automatically through Flip's server using the company's place ID, without sending the visitor's IP address or account details to Google. Ratings are not stored permanently. When you open Google maps, links or Google's own display, your browser connects to Google, which processes IP addresses and technical details under its Privacy Policy. Flip stores the place ID and company identity verification, not Google review texts or reviewer names. Report incorrect connections to hei@flip.no.