Privacy Policy

1. Who we are

ResortFlips ("ResortFlips," "we," "us," or "our") is operated by Indigo Property Services LLC, a North Carolina limited liability company with its principal place of business in Apex, North Carolina. We operate an online marketplace at resortflips.com for vacation ownership listings, valuations, and rentals.

This Privacy Policy describes how we collect, use, store, and disclose information when you visit our website, use our tools, register an account, or transact through the platform. It applies to all visitors, registered users, sellers, buyers, and renters.

2. Information we collect

Information you give us directly

• Account information: name, email, phone number, password (hashed), and mailing address when you register.
• Listing information: resort, unit type, season, point allocation, maintenance fee data, photos, and asking price when you post a listing.
• Verification documents: if requested, a copy of your recorded deed, recent maintenance fee statement, developer reservation confirmation, government-issued photo ID, and Form W-9 or equivalent tax identification.
• Payment information: billing details processed by Stripe, Inc. We do not store full credit card numbers on our servers.
• Communications: messages you send to us or to other users through the platform, including support inquiries.
• Valuation requests: the resort, brand, ownership type, points, season, and other details you enter into our valuation tool.

Information collected automatically

• Device and browser data: IP address, browser type and version, operating system, device type, screen size, time zone, and referring URL.
• Usage data: pages viewed, links clicked, time spent on pages, search queries, and how you navigate through the site.
• Cookies and similar technologies: see Section 5 below.

Information from third parties

• Payment processors: Stripe provides us with limited transaction information (amount, status, last four digits of card) but not full payment credentials.
• Resort and developer confirmations: if we verify a listing directly with a resort, we may receive confirmation of reservation status, owner of record, and unit type.
• Analytics providers: Google Analytics provides aggregated and pseudonymous information about how visitors use our site.

3. How we use information

We use the information we collect to:

• Operate, maintain, and improve the ResortFlips platform and its tools.
• Process and facilitate listings, rentals, and sales between users.
• Verify identity, prevent fraud, and protect users and ResortFlips from abuse.
• Send transactional emails (confirmations, receipts, dispute notifications) and, with your permission, marketing or product update emails.
• Generate valuation estimates and aggregated market data.
• Respond to support inquiries and resolve disputes.
• Comply with legal obligations, including tax reporting and responses to lawful requests.
• Analyze site usage to understand what works and what doesn't.

4. When we share information

We do not sell your personal information. We share information only in the following circumstances:

• With other users: when you post a listing, your first name, listing details, and relevant ownership information are visible to other users. We do not display your last name, email, phone number, or address on public listings without your permission.
• With service providers: we use third parties to host our site, process payments, send email, and run analytics. These providers receive only the information needed to perform their service and are contractually obligated to protect it.
• For legal reasons: when required by subpoena, court order, or law enforcement request, or when we believe disclosure is necessary to protect our rights, our users' safety, or public safety.
• In a business transfer: if ResortFlips or its parent (Indigo Property Services LLC) is involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction. We will notify users of any such change.
• With your consent: in any other circumstance where you have specifically agreed to the sharing.

5. Cookies and tracking

We use cookies and similar technologies to keep you logged in, remember your preferences, understand how the site is used, and measure marketing effectiveness. The categories we use:

• Essential cookies: required for the site to function — session management, security tokens, and your saved consent preferences. These cannot be disabled.
• Analytics cookies: set by Google Analytics to measure how visitors interact with the site. IP addresses are anonymized. You can opt out of these via the cookie banner shown on your first visit or in your browser settings.
• Functional cookies: remember your preferences like which valuation result you last viewed.

We do not use third-party advertising cookies, behavioral retargeting cookies, or cross-site tracking pixels.

6. Your privacy rights

Depending on where you live, you may have the following rights:

• Right to know: what personal information we have about you, where it came from, and who we've shared it with.
• Right to access: request a copy of your personal information.
• Right to correct: have inaccurate information about you corrected.
• Right to delete: request that we delete your personal information, subject to certain legal exceptions (e.g., transaction records we are required to retain).
• Right to opt out of sales: we do not sell your personal information, but you may submit a request anyway as a precaution.
• Right to non-discrimination: we will not retaliate against you for exercising these rights.

To exercise any of these rights, contact us using the information in Section 10. We will respond within the timeframes required by applicable law (typically 30 to 45 days). We may need to verify your identity before fulfilling certain requests.

California residents (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act, including the right to limit the use of sensitive personal information. Since we do not sell personal information and do not use information for cross-context behavioral advertising, those rights are addressed by our existing practices.

EU and UK residents (GDPR)

If you are located in the European Union or United Kingdom, the legal bases under which we process your information are: (a) contract — to provide the services you have requested; (b) legitimate interests — to operate and improve our platform, prevent fraud, and ensure security; (c) consent — for optional analytics, marketing emails, and any other use where we have asked for your permission; and (d) legal obligation — to comply with applicable law.

7. Security and retention

We use reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit (TLS/HTTPS), encryption at rest where applicable, role-based access controls, and regular security reviews. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

We retain your information for as long as your account is active and for as long as needed afterward to comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account data: retained while your account is active, plus 90 days after deletion.
• Transaction records: retained for at least 7 years for tax and audit purposes.
• Analytics data: aggregated and pseudonymous, retained per Google Analytics retention settings (currently 14 months).
• Marketing communications: retained until you unsubscribe.

8. Children's privacy

ResortFlips is not intended for children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes that affect how we use your information, we will provide a more prominent notice (such as an email to registered users or a banner on the site).

Your continued use of ResortFlips after a change becomes effective constitutes acceptance of the updated policy.

10. How to contact us

This Privacy Policy is provided in good faith and is intended to inform users of our current practices. It does not constitute legal advice. Users with specific concerns about their privacy rights should consult an attorney.