Privacy Policy

1. What we collect

We collect information you give us directly:

• Contact and lead forms (contact page, website audit, project assessment): your name, email, and what you tell us about your project, business, goals, timeline, and budget.
• Client accounts: your name, email, and company, created when you purchase a package.
• Project collaboration: files you upload, messages you send in the client portal, and deliverable feedback.
• Purchases: order details (package, amount, payment status). Payment is handled entirely by Stripe — we never receive or store your card number.

2. How we use it

• To respond to inquiries and provide quotes and assessments.
• To deliver purchased services: run your project, communicate with you, share files and deliverables, and collect payments.
• To send transactional email — order confirmations, account invitations, project notifications. We do not send marketing email without your consent.
• To keep the site and portal secure.

3. The AI assessment

If you use our free project assessment, the answers you provide (your project needs and goals — not your payment details) are processed by an AI model via a third-party AI infrastructure provider to generate a package recommendation. Your answers are used to produce your recommendation and stored with your inquiry so we can follow up; they are not used to train AI models by us.

4. Service providers

We share data only with the providers required to run the service, and only what each needs:

• Stripe — payment processing (they handle your card details under their own privacy policy).
• Supabase — our database, authentication, and secure file storage.
• Cloudflare — website hosting and delivery.
• Google Workspace — business email; form submissions and project notifications arrive in our email.
• AI infrastructure providers — assessment answers only, as described above.

5. Connecting your social accounts

If you ask us to publish to your social accounts, you connect each account yourself through that platform’s own sign-in screen, and you choose whether to allow it. We never ask for, see, or store your social media password.

• What we receive: an access token issued by the platform, a refresh token where the platform provides one, your account name, handle, profile image, and account identifier. That is what appears in your dashboard so you can tell which account is connected.
• What we do with it: publish only the posts you have created and approved in your account with us, at the times you scheduled them. Nothing is posted that you have not approved.
• Platforms we connect to and the permissions we request: Meta (Facebook Pages and Instagram) to publish posts to a Page or Business account you manage; LinkedIn to share posts as you; X to post on your behalf; TikTok to upload video content. Each platform shows you these permissions before you agree to them.
• We do not read your private messages, we do not post advertising, and we do not use anything from your connected accounts to build a profile of you or to train models.
• Tokens are encrypted at rest and used only to publish your scheduled posts. We refresh them automatically so your connection keeps working, and we stop using them the moment a connection is removed.
• You are in control: disconnect an account from your dashboard at any time, or revoke our access directly in that platform’s own settings. Either one takes effect immediately, and we delete the stored tokens when a connection is removed.

6. What we don’t do

• We do not sell or rent your personal information.
• We do not use third-party advertising trackers on this site.
• We do not store payment card details.

7. Retention

We keep inquiry and lead information as long as it is useful for responding to you. Client account, project, and order records are kept for the life of the client relationship and as required for tax and accounting purposes. Project files may be removed after a project concludes; keep your own copies of final deliverables once delivered.

8. Your rights

You can request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it (subject to records we must keep, like completed order history). Email [email protected] and we will respond promptly. Colorado residents have rights under the Colorado Privacy Act; we honor equivalent requests from anyone.

9. Security

Client data is protected with authenticated accounts, per-client access controls at the database level, and private file storage. No internet service can guarantee perfect security, but we build with access restricted by default.

One exception, by design: artwork you upload in WrapPort (and the design proof image) is stored at an unguessable, unlisted web address so your design can be shared by link and printed — treat wrap designs as shareable, not confidential.

10. Children

Our services are for businesses and adults; we do not knowingly collect information from children under 13.

11. Changes

If we change this policy, we will update it here with a new effective date. Material changes will be flagged on this page.