Security

We don't retain files.

Flippy exists to flip your file and forget it. Here is exactly what happens to what you upload: no fine print required.

Draft: security review pending.

The life of a file, start to finish

  1. 1

    You upload a file. It lands in temporary storage, tied to your session.

  2. 2

    We process it: convert, compress or trim: and hand you a download link.

  3. 3

    Within about an hour of processing, both your original and the result are deleted automatically. Not archived, not soft-deleted, not "retained for quality purposes": deleted.

Deletion is enforced by the system itself: a cleanup job fires automatically when processing ends, so there is no "someone forgot" failure mode.

What we never keep

  • Your files: gone within about an hour of processing, originals and outputs alike.

  • Card details: payments run entirely through Stripe; card numbers never touch our servers.

  • Usage counters: free-plan limits are tracked against an anonymous browser cookie and IP address, and those counters self-erase after 48 hours.

  • Ad-tech profiles: no data sales: just minimal first-party product analytics.

In transit and at rest

Everything moves over HTTPS: uploads, downloads and everything in between. While a file waits its turn to be processed, it sits in private storage reachable only through short-lived, signed links, and then the hour-long clock above takes care of the rest.

Accounts

You don't need one for everyday use: that's deliberate: the least data we can hold is none. If you do create an account, we store your email, name and plan. Passwords are stored only as bcrypt hashes, never as plain text, and Google sign-in means we never see a password at all.

The pedigree behind it

Flippy is built on the technology behind HappyScribe: an AI notetaker that is SOC 2 certified and has processed other people's audio and video for nine years. Flippy inherits that machinery and that discipline. We are GDPR compliant: minimal data, short retention, deletion by default: and you can exercise your data rights any time via [CONTACT EMAIL]. More on the story on our about page.

Found something?

If you believe you've found a security issue, we want to hear about it before anyone else does: [SECURITY EMAIL]. We read every report.

The details of data handling live in our privacy policy.