Privacy Policy

Who we are

WrapPal is wrap shop management software for running projects, customers, teams, production, billing, marketing, social media publishing, and shop operations. This policy explains what we collect and how we use it.

Information we collect

• Account details: name, email address, shop name, and profile photo.
• Google sign-in data: when you choose "Continue with Google", we receive your basic profile and email address so we can create or restore your WrapPal account. We do not receive your Google password.
• Facebook and Instagram data authorized when you connect those accounts (see below).
• Shop data you enter: clients, leads, projects, proofs, tasks, inventory, invoices, agreements, and marketing content.
• Usage and diagnostic data needed to operate and secure the service.

Facebook and Instagram data

When a WrapPal user chooses to connect a Facebook or Instagram account, WrapPal may receive and process information the user authorizes through Facebook Login and the Facebook permissions they grant. Depending on the connection, this may include:

• Facebook Page information, such as the Pages linked to the connected account, Page names, and Page identifiers, used to select where content is published.
• Instagram Business account information, such as the professional accounts linked to those Pages, used for social media publishing.
• Social publishing permissions, used to create, schedule, and manage posts and content on the connected Pages and accounts on behalf of the shop.
• Basic profile details associated with the connected account, such as name and email address, used to identify the connection.

WrapPal only requests these permissions when a user explicitly connects an account, and only uses them to provide the WrapPal features the shop chooses to use. WrapPal does not post, message, or take actions on connected accounts except as directed by the shop's users.

Facebook Lead Ads data

When a shop enables Facebook Lead Ads lead intake for a connected Page, WrapPal may receive lead information submitted through that shop's Facebook and Instagram Lead Ads, such as the name, email address, phone number, and any other form answers the person submitted to the shop's ad.

This information is delivered to us by Meta after the person submits the lead form, and is used solely to create and manage the corresponding lead in that shop's WrapPal CRM, match it against existing contacts, and help the shop follow up. We do not use Facebook Lead Ads data for any other purpose, and each lead is accessible only to the shop whose ad generated it.

How information is used

We use your information to provide the WrapPal platform, authenticate you, generate the documents and AI outputs you request, publish social media content on connected accounts, retrieve and process Facebook Lead Ads leads, process payments, send service notifications, and improve reliability and security. We do not sell your data and we do not use your shop, customer, Facebook, or Instagram data for our own advertising or to train generalized AI models.

Data storage and security

Data is stored in hosted cloud infrastructure protected by authentication, row-level database policies that keep each shop's data isolated from other shops, and encryption in transit. Sensitive connection credentials, such as tokens for connected Facebook Pages and Instagram accounts, are stored encrypted and are never exposed in the browser. Access to data is limited to the shop's own team members and to the service providers needed to operate WrapPal.

Third-party services

We share data only with service providers that operate WrapPal on our behalf — hosting and database infrastructure, authentication, email delivery, payment processing, AI model providers, communications providers, and Meta (Facebook/Instagram) for account connections, social publishing, and Lead Ads delivery — and only as needed to deliver the features you use. These providers process data under their own privacy terms. We may disclose information when required by law.

Data retention

Data is retained while your account is active and for as long as needed to meet legal and accounting obligations. If you disconnect a Facebook or Instagram account, or disable Lead Ads intake, we stop receiving new data from those connections; previously received data is retained according to the retention rules above until you request deletion.

Your rights and choices

• You can update your profile and shop information in the app at any time.
• You can connect or disconnect Facebook and Instagram accounts and enable or disable Lead Ads intake from the shop's social and connection settings.
• Disconnecting a connection or removing WrapPal's access in your Facebook settings stops all further data collection from that account.
• You can request export or deletion of your account data by contacting us. Deleting your account removes your shop data, including data received through Facebook and Instagram connections, subject to legal retention requirements.

Requesting deletion of your data

To request deletion of your WrapPal account data, or data we have received through a Facebook or Instagram connection, email us at support@mywrappal.com with the email address associated with your account. We will confirm the request and delete the applicable data within 30 days, except where we are required to retain it by law. If you submitted information to a shop through a Facebook or Instagram Lead Ad and want it removed, contact that shop directly, or contact us and we will forward your request.

Contact

Questions about this policy? Email support@mywrappal.com.