Privacy Policy

This policy covers two groups, and our responsibilities differ for each.

Shops are businesses that subscribe to WrapPilot. We collect their information directly and act as the controller of it — we decide how it is used.

Customers are members of the public who submit a quote request through a Shop’s quote page. When you do this, the Shop is the controller of your information and we act as a processor on their behalf. We store and process your information to provide the Shop with software, but the Shop decides how it is used and is responsible for its own privacy practices.

If you are a Customer and want your information corrected or deleted, contact the Shop you submitted your request to. You may also contact us and we will assist them in responding.

From Shops

• Account information — name, email address, phone number, business name, business address, and password (stored as a cryptographic hash; we never see or store your actual password).
• Business configuration — logo, branding, service catalog, labor rates, material costs, margins, pricing rules, availability, and deposit policies.
• Billing information — subscription plan, billing status, and transaction history. We do not collect or store card numbers. Payment details are handled entirely by Stripe, Inc., our payment processor. We receive only a customer identifier, subscription status, and the last four digits and card brand.
• Usage information — login times, features used, leads received, emails sent, and errors encountered.

From Customers (on behalf of Shops)

When you submit a quote request through a Shop’s quote page, we collect on that Shop’s behalf:

• Contact information — name, phone number, email address, and city
• Vehicle information — year, make, model, trim, color, and condition details
• Photographs of your vehicle that you upload
• Project information — services requested, finish preferences, timeline, and any notes you write
• Technical information — IP address, browser type, referring page, and how you moved through the quote flow

Automatically

We use cookies and similar technologies that are strictly necessary to operate the Service — keeping you signed in, remembering which shop account you are viewing, and preventing abuse. We do not use advertising cookies and we do not sell data to advertisers.

We record analytics events about how quote pages are used — page views, steps started and completed, and drop-off points — so Shops can understand their own conversion funnel.

• To provide the Service — creating accounts, hosting quote pages, generating estimates, delivering leads to Shops, sending email, scheduling appointments, and processing payments.
• To analyze vehicle photographs — see Section 4.
• To send email — service and account email to Shops, and quote confirmations and follow-up email to Customers on behalf of Shops. Every follow-up email includes an unsubscribe link.
• To secure the Service — detecting abuse, rate limiting, preventing fraudulent quote submissions, and investigating security incidents.
• To improve the Service — understanding which features are used, diagnosing errors, and measuring performance. Where we analyze data across Shops, we do so only in aggregated, anonymized form that does not identify any Shop or individual.
• To meet legal obligations — tax, accounting, and responding to lawful requests.

We do not sell personal information. We do not share it with advertisers, data brokers, or marketers.

This section matters, so we are stating it plainly.

What happens. When a Customer uploads photographs of a vehicle, those images are transmitted to a third-party artificial intelligence provider to identify the vehicle, estimate the wrappable area, and note visible conditions such as existing wrap or body modifications. The AI also generates written summaries and drafts follow-up email text.

What we send. Only the vehicle photographs and the vehicle and project details needed to produce the analysis. We do not send a Customer’s name, phone number, or email address to the AI provider.

Training. We use the provider’s API under terms that do not permit your data to be used to train their models.

Retention by the provider. Our AI provider may retain submitted content briefly for abuse monitoring, consistent with their published policies, and does not use it for any other purpose.

Photographs of people. Our quote flow asks for photographs of vehicles, not people. Please do not upload images of individuals. If a person appears incidentally, we do not attempt to identify them and we do not use facial recognition.

Automated decisions. AI output is advisory. It informs a price estimate that a human at the Shop reviews. No legally or similarly significant decision about any individual is made solely by automated means.

With the Shop you contacted. If you are a Customer, everything you submit goes to that Shop. That is the purpose of the Service.

With service providers who help us operate, each bound by contract to protect the information:

For legal reasons — if required by law, subpoena, or court order, or where we believe disclosure is necessary to protect our rights, investigate fraud, or address an imminent safety threat.

In a business transfer — if WrapPilot is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction. We will provide notice before your information becomes subject to a materially different privacy policy.

We never sell your personal information.

After a Shop’s account terminates, we retain data for 30 days so it can be exported, then delete it. Backups may persist briefly beyond deletion and are overwritten on a rolling basis.

We protect information using:

• Encryption in transit (HTTPS/TLS) on all connections
• Database-level access controls that isolate each Shop's data from every other Shop
• Private file storage — uploaded photographs are never publicly accessible and are served only through short-lived, expiring links
• Server-side authorization checks on every request touching business data
• Cryptographic verification of all payment events
• API credentials stored as server-only secrets, never exposed to browsers

No system is perfectly secure. We cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify affected parties without undue delay as required by law.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct information that is inaccurate
• Delete your information, subject to legal retention requirements
• Export your information in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Not be discriminated against for exercising any of these rights

How to exercise them

Shops — most of this is available directly in the app under Settings, including full data export and account deletion. For anything else, email us.

Customers — contact the Shop you submitted your request to, since they control your information. If you are unsure how to reach them, or they do not respond, email us at wrapquotepilotai@gmail.com and we will help.

We respond to requests within 30 days. We may need to verify your identity first.

California residents. Under the CCPA/CPRA you have the rights described above. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information for purposes requiring a right to limit.

EEA and UK residents. Our legal bases are: performance of a contract (providing the Service), legitimate interests (security, improvement, and fraud prevention), consent (where required for marketing email), and legal obligation. You may lodge a complaint with your supervisory authority.

To Customers. Shops may send you automated follow-up email about the quote you requested. Every message includes an unsubscribe link. Unsubscribing is permanent and applies to all future email from that Shop through our Service. We do not send you marketing email on our own behalf.

To Shops. We send transactional email about your account, billing, and security that you cannot opt out of while you hold an account. Any product or marketing email we send includes an unsubscribe link.

No text messages. The Service does not send SMS to anyone.

The Service is not directed to children under 16 and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

We operate in the United States, and information is processed and stored there. If you access the Service from outside the U.S., you understand your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

We may update this Policy. If changes are material, we will notify Shops by email or through the Service at least 30 days before they take effect, and update the date at the top. Continued use after the effective date constitutes acceptance.

Questions, requests, or complaints about privacy:

WrapPilot AI
Email: wrapquotepilotai@gmail.com
Web: wrappilot.us

If you are a Customer asking about information you submitted to a specific shop, please contact that shop first. We will assist if they do not respond.