Privacy Policy

Effective date: April 23, 2026 · Last updated: April 23, 2026

This Privacy Policy describes how October North LLC, doing business as WrapVault ("WrapVault," "we," "our," or "us") collects, uses, and protects information when you use the WrapVault platform ("Service"). By using the Service, you agree to the practices described in this policy.

WrapVault is a business-to-business (B2B) platform. Our customers ("Subscribers") are shop owners and their teams. Subscriber businesses are responsible for their own customers' personal data entered into the platform and must have appropriate legal basis to collect and store that data.

1. Information We Collect

Account and Business Information

When you register, we collect your name, email address, business name, address, phone number, and billing information. We use this to create and manage your account and process payments.

Customer and Business Data You Enter

As a Subscriber, you may enter data about your customers, vehicles, appointments, jobs, invoices, and other business records. This data belongs to you. We process it solely to provide the Service and do not use it for our own purposes beyond operating and improving the platform.

Usage Data

We automatically collect information about how you use the Service, including pages visited, features used, actions taken, timestamps, IP addresses, browser type, and device information. This helps us understand how the platform is used and where to focus improvements.

Communications

If you contact us by email or through the Service, we retain those communications to respond to your inquiry and improve our support.

Payment Information

Payments are processed by Stripe. We do not store your full credit card number, CVV, or other sensitive payment details. Stripe may store a tokenized reference to your payment method. Stripe's privacy practices are governed by Stripe's Privacy Policy.

2. How We Use Information

We use the information we collect to:

Provide, operate, and maintain the Service
Process payments and manage your subscription
Send transactional emails — account confirmations, trial status, invoices, and support responses
Send product updates and announcements (you may opt out at any time)
Diagnose technical problems and improve the Service
Monitor for fraud, abuse, and security threats
Comply with legal obligations

We do not sell, rent, or trade your personal information or your customers' data to third parties for marketing purposes.

3. Information We Share

We share information only in the following limited circumstances:

Service providers — third parties that help us operate the Service (listed in Section 4 below). They are contractually prohibited from using your data for purposes other than providing services to us.
Legal requirements — when required by law, court order, or government authority, or to protect the rights, property, or safety of WrapVault, our users, or the public.
Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you in advance of any such transfer.
With your consent — in any other case where you have expressly authorized us to share.

4. Third-Party Services We Use

The Service relies on the following third-party providers. Each has its own privacy policy.

Stripe

Payment processing. Handles subscription billing and card storage. Not used for marketing.

Resend

Transactional email delivery. Used to send platform emails (trial lifecycle, notifications). Email content is not retained beyond delivery.

Twilio

SMS delivery. Only used if a Subscriber configures their own Twilio account in Settings. We do not route SMS through a shared platform Twilio account.

Microsoft Azure

Photo and file storage. Vehicle inspection photos and job documentation are stored in Azure Blob Storage within the United States.

Google

Optional OAuth login and one-way Google Calendar sync. Only activated if a Subscriber connects their Google account. We request only the minimum OAuth scopes required.

Intuit QuickBooks

Optional accounting integration. Only activated if a Subscriber connects their QuickBooks account. Data sent is limited to invoices and payments.

Replicate

AI-powered wrap visualization feature. Vehicle images submitted to this feature are processed by Replicate's infrastructure. Images are not stored beyond the inference request.

Microsoft Application Insights

Error tracking and performance monitoring. Collects anonymized telemetry (exceptions, page load times, request counts). No personally identifiable information is intentionally included in telemetry.

5. Cookies and Tracking

We use session cookies to maintain your logged-in state. We do not use third-party advertising cookies or tracking pixels. We do not participate in cross-site behavioral advertising.

Our marketing site may use basic analytics (page view counts) to understand traffic patterns. No personally identifiable information is collected through these analytics.

6. Data Storage and Security

Your data is stored on servers located in the United States. We implement industry-standard security measures including encryption in transit (TLS), encryption at rest for sensitive fields, role-based access controls, and regular security reviews.

No method of transmission over the internet or electronic storage is 100% secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security. If you become aware of any security vulnerability, please contact us at support@wrapvaultpro.com.

7. Data Retention

We retain account and business data for as long as your account is active. After account termination, we retain data for up to 30 days to allow for reactivation or data export, after which it is permanently deleted from our systems.

Billing records and transaction logs may be retained longer where required by law (typically 7 years for financial records).

Usage and telemetry data (aggregated, anonymized) may be retained indefinitely for product analytics.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

Access — request a copy of the personal information we hold about you
Correction — request that we correct inaccurate or incomplete information
Deletion — request deletion of your personal information (subject to legal retention requirements)
Portability — export your business data at any time through the Service
Opt-out — unsubscribe from marketing emails at any time using the link in any marketing email

To exercise these rights, contact us at support@wrapvaultpro.com. We will respond within 30 days.

9. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how we use it, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell personal information.

To submit a verifiable consumer request, contact us at support@wrapvaultpro.com.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice within the Service before the changes take effect. The "Last updated" date at the top of this page reflects when the policy was most recently revised. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or how we handle your information, contact us at:
October North LLC, doing business as WrapVault
Cincinnati, Ohio
support@wrapvaultpro.com