Last updated 24 September 2026
FlipFindr is software for real estate investors. It scores MLS listings for signs of a motivated seller, prepares a purchase offer and the accompanying contract, and sends that offer by email to the listing agent from the user's own email address.
This policy describes what data FlipFindr handles, where it is stored, and what it is used for. It describes the software as it actually behaves.
FlipFindr requests one Gmail permission:
gmail.send. That permission allows an application to send mail on
your behalf. It does not allow it to read, search, list, download, modify or delete any
message in your mailbox, and FlipFindr does none of those things.
It also requests openid and email,
which let it see your Google account's email address. That address is used only to show
you which Gmail account is connected.
Gmail is connected only when you press Connect Gmail in FlipFindr's settings and approve on Google's own screen. Google then gives FlipFindr a refresh token, which lets it send on your behalf until you disconnect. FlipFindr stores that token on its server, encrypted (AES-256), and tied to your FlipFindr account. It is never shown to you, your browser or anyone else, and it is never written to a log. The short-lived access token Google issues for each send is used once and not stored.
When you review an offer and choose to send it, FlipFindr uses gmail.send to
deliver that one message from your address to the listing agent you selected, with the
purchase contract attached. The message is composed in the application and shown to you
before it goes. Nothing is sent without that action.
For your Google connection, FlipFindr keeps the encrypted refresh token, the connected email address, and the permissions Google granted. These are deleted when you disconnect.
For each offer it sends, FlipFindr keeps the identifier Gmail returns, together with the recipient address, the subject line, the property address, the MLS number and the offer amount, so that a sent offer can be traced afterwards and is not sent twice. This record is kept in your FlipFindr account. If you connect a CRM, it is also written there. The body of the message is not stored by FlipFindr. It is an ordinary email in your own Sent folder.
FlipFindr's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
| Data | Where it lives | Why |
|---|---|---|
| Your sign-in (name and email address) | Clerk, our sign-in provider | So only you can open your account |
| MLS listing exports you import | Your FlipFindr account on our server, and your browser | To score and rank listings, on any device you sign in from |
| Contract templates you upload, and the filled contracts produced from them | Your FlipFindr account on our server, and your browser | To attach a completed contract to an offer |
| Your notes, offer amounts, status tracking and agent contacts | Your FlipFindr account on our server, and your browser | So you can work a list across sessions and devices |
| Your CRM API key, if you connect one | Your own configuration, on your own machine | To log sent offers to your CRM |
| A log of offers sent, if you send through a local relay instead of connecting Gmail | The machine running the relay | So a send can be traced and not repeated |
Data in your FlipFindr account is private to your account. No other user can read it. We do not sell it, share it, or combine it with other users' data. MLS data you import is yours, and you are responsible for having the right to use it.
Your Google connection is deleted from our server the moment you press Disconnect in FlipFindr, and FlipFindr also revokes it at Google. Data in your FlipFindr account stays until you remove it in the application or ask us to delete your account at [email protected], which we do within 30 days. Data held in your browser stays until you clear it. Records written to your CRM are yours and are governed by your own CRM settings.
You can disconnect Gmail at any time with Disconnect in FlipFindr's settings, or at Google Account permissions. Either one stops FlipFindr from sending any further mail on your behalf immediately. It does not delete offers already sent, which are ordinary emails in your own Sent folder.
All traffic between your browser, FlipFindr's server and Google is encrypted in transit (HTTPS). Google refresh tokens are encrypted at rest with a key that exists only on FlipFindr's server, and each one is bound to its own account so that it cannot be used by any other. Every request to your account data requires you to be signed in, and an account can read only its own data.
FlipFindr is a business tool and is not directed to anyone under 18.
If this policy changes in a way that affects how Google user data is used, the updated policy will be posted here with a new date before the change takes effect.
Questions about this policy or about data FlipFindr handles: [email protected]