Privacy Policy

• Account information: name, email address, password (hashed), company/organization name, and related account details.
• Billing information: billing name, billing address, transaction and subscription information, and payment details processed through PayRight and our third-party PCI-DSS compliant payment processing partner.
• Usage and technical data: features used, actions taken, timestamps, session data, log files, device/browser type, and IP address.
• Communications: information you provide when you contact support or otherwise communicate with us.
• Consent records: records of your agreement to our Terms of Service, Refund Policy, and Privacy Policy, including date/time, IP address, account/user identifier, and document version.

We collect operational data entered into the Service in the course of a shop's business, including services performed, service volumes, vehicle records, inventory information, film/material types and quantities, workflow activity, and related shop operational information.

We use this information to operate the Service for the shop and may also analyze eligible shop-level operational data to identify market and industry trends, improve features, develop platform-wide analytics and benchmarking, and proactively identify shops that may benefit from additional support or attention.

Where appropriate, analytics, benchmarking, research, or external reporting uses aggregated and/or de-identified information designed not to identify a specific shop or individual end customer.

Shop-Level Analytics, Benchmarking & Data-Use Opt-Out

Business subscribers may opt out of the optional pooling, aggregation/de-identification, benchmarking, commercialization, and marketing-trend use of their shop-level operational or inventory data by emailing contact@wrapright.app. After a valid opt-out request is processed, WrapRight will not include that shop's eligible shop-level operational or inventory data in new optional benchmarking, commercialization, or marketing-trend datasets or analyses.

This opt-out does not apply to processing that is necessary to provide, secure, maintain, troubleshoot, support, bill for, or comply with legal obligations relating to the Service. It also may not permit removal of information that was previously transformed into aggregated or de-identified data that can no longer reasonably be linked back to the requesting shop.

End-customer information entered by a shop is processed on behalf of that shop to provide the Service. The shop is responsible for determining the lawful basis for collecting its customers' information, providing required notices, obtaining required consents, and complying with applicable privacy laws.

• Provide, operate, maintain, authenticate, troubleshoot, and secure the Service;
• Process billing and administer subscriptions;
• Communicate about accounts, support, updates, security notices, and product information where permitted;
• Monitor and analyze performance, security, feature adoption, and usage;
• Identify shops that may need proactive product, onboarding, operational, or customer-success attention;
• Subject to the opt-out described in Section 2, build aggregated/de-identified market trends, benchmarks, research, and platform insights;
• Detect, investigate, and prevent fraud, abuse, security incidents, or Terms violations;
• Comply with legal obligations, resolve disputes, and enforce agreements.

Information is primarily processed and stored in the United States. Access to identifiable information is limited to personnel, systems, and service providers that need it for authorized business purposes.

We do not sell personal information for money. We may disclose information in the following circumstances:

• Service providers and subprocessors: vendors that provide cloud hosting/infrastructure, communications, email delivery, payment processing, analytics, security, customer support, and related operational services. These providers receive information only as reasonably necessary to perform their functions and are expected to protect it.
• Communications providers: integrations such as Quo and RingCentral may receive phone numbers, message content, call information, and related data needed to provide communications functionality.
• Payment providers: PayRight and its underlying payment processing partner receive information necessary to process transactions, manage payment methods, and address payment risk or disputes.
• Legal requirements and safety: we may disclose information when required by law, subpoena, legal process, or when reasonably necessary to protect rights, property, safety, or security.
• Business transfers: information may be transferred in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable law and appropriate privacy protections.
• Aggregated/de-identified information: subject to the shop-level opt-out described in Section 2, we may use or share aggregated and/or de-identified operational information for benchmarking, research, market trends, product improvement, or other lawful business purposes when it cannot reasonably identify a specific shop or individual.

We use cookies and similar technologies to keep users logged in, remember preferences, provide security, and understand Service usage. Browser settings may allow you to control cookies, although disabling some cookies may affect functionality.

We retain personal information for as long as reasonably necessary to provide the Service, maintain an active account, comply with legal and accounting obligations, resolve disputes, enforce agreements, and protect the Service. Consent, billing, security, and dispute records may be retained after account closure when reasonably necessary. Aggregated or de-identified data that can no longer reasonably be linked to a shop or individual may be retained for longer periods, subject to applicable law.

Billing is handled through PayRight, our payment processing brand, powered by a third-party payment processing partner. The processing partner is responsible for handling and securing payment card details under applicable PCI-DSS requirements. WrapRight may retain billing and transaction records necessary to administer subscriptions, such as billing history, last-four card digits where provided to us, transaction status, and payment status. Full card numbers and sensitive authentication data are processed by the payment partner rather than stored directly by WrapRight.

We use administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction. No system is completely secure, and we cannot guarantee absolute security.

Depending on your state of residence and applicable law, you may have rights concerning personal information, which may include:

• Accessing or confirming the personal information we process about you;
• Correcting inaccurate personal information;
• Requesting deletion of personal information, subject to legal and operational exceptions;
• Obtaining a portable copy of certain information;
• Opting out of certain processing where applicable law provides that right, including certain sale, sharing, targeted-advertising, profiling, or similar uses if WrapRight engages in such processing;
• Withdrawing consent where processing is based on consent;
• Appealing a decision concerning a privacy-right request where applicable law provides an appeal right.

To exercise an applicable privacy right, request deletion, or submit the shop-level data-use opt-out described in Section 2, contact contact@wrapright.app. We may need to verify your identity or authority before completing a request. We will respond in accordance with applicable law. Certain information may be retained where permitted or required for legal compliance, security, fraud prevention, billing, dispute resolution, or other legitimate purposes.

When you click "I Agree" or use a similar affirmative control to accept our Terms of Service, Refund Policy, or Privacy Policy, we may create and retain a timestamped record of acceptance, including the account/user identifier, IP address, document version, and method of acceptance. These records may be retained as evidence of agreement.

The Service is not directed to individuals under 18, and we do not knowingly collect personal information directly from children for their own use of the Service. If we learn that we have collected such information contrary to this policy or applicable law, we will take appropriate steps to delete it.

WrapRight is based in the United States, and information we collect is processed and stored in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States, which may have different data-protection laws than your jurisdiction.

We may update this Privacy Policy from time to time. For material changes, we will provide advance notice by email before the change takes effect. If a material change affects your data-processing rights, we will also present the change to you upon login and require affirmative opt-in re-consent before applying that materially changed processing to you, where required. We will not rely solely on passive continued use to obtain consent for a material change affecting data-processing rights. The updated policy will identify its effective or last-updated date.

Questions or requests regarding this document may be directed to:

Premium Systems Inc. / WrapRight
1232 N Saginaw St
Lapeer, MI 48446
Phone: 989-397-5274
Email: contact@wrapright.app