Privacy Policy

Version 2026-08-02 · Effective 2 August 2026

This is an initial operational draft prepared to describe how the service works. It is not legal advice and has not been reviewed by a solicitor. All business details are complete and no placeholders remain, but the wording should still be reviewed by a qualified professional.

This policy explains what personal information Wrap My Whip AI ("we", "us") collects when you use the service at wrapmywhipai (the "Service"), why we collect it, and how we handle it. It is intended to be read together with our Terms and Conditions.

1. Who we are

The Service is operated by Bartosz Wieslaw Burczaniak (trading as Wrap My Whip AI, a sole trader based in England and Wales). Our business correspondence address is Cannington, Henfields Farm, TA5 2QD, Somerset, United Kingdom. For any privacy question you can contact us at support@wrapmywhipai.com.

2. Information we collect

Account information — the email address you sign up with, a display name, and (if you choose Google sign-in) the basic profile information Google returns to us.
Uploaded content — photographs of vehicles that you upload, optional design/logo images you upload, and any text prompts you enter.
Generated content — the AI-generated preview images produced from your uploads.
Usage records — the number of successful, pending and failed generations linked to your account, so we can enforce the free allowance and purchased balance.
Payment records — when you buy a Design Pack, our payment processor (Stripe) collects and processes your payment details. We receive and store the transaction identifier, amount, currency, the email address associated with the payment, and which policy version you agreed to. We do not receive or store your full card number.
Community Garage activity — if you choose to share a design publicly: the post record, your public nickname, votes you cast, and any reports you submit.
Technical information — standard server logs (approximate request time, error codes) generated when you use the Service. We do not run third-party advertising trackers.

3. How we use your information

To provide the Service (uploading, generating and displaying wrap previews).
To enforce your free allowance and purchased balance.
To take payment for Design Packs and issue refunds where applicable.
To keep the Service secure and investigate abuse.
To comply with our legal obligations, including accounting and fraud-prevention rules.

4. Legal bases (UK GDPR)

Contract — to deliver the Service you asked for.
Legal obligation — to keep payment and tax records.
Legitimate interests — to keep the Service running securely and prevent abuse.
Consent — where we ask for it (for example, the digital-delivery acknowledgement at checkout).

5. AI processing

Uploaded images and any prompt text are sent to the google/gemini-3-pro-image model through the Lovable AI Gateway to generate your preview. We do not use your uploads or generated images to train AI models. Please see the model provider's own policies for information about how AI providers may process request data.

6. Where your data is stored

Uploaded images, generated images, database records and account details are stored using Lovable Cloud infrastructure (backed by Supabase). Payments are processed by Stripe. Both providers act as our data processors. Data may be stored or processed in the UK, the EU or other countries where these providers operate; where transfers outside the UK take place they are protected by standard contractual safeguards.

7. How long we keep your data

Uploaded source images (car photos, design images, logos): retained for up to 30 days after the generation that uses them and then automatically deleted from our storage by a scheduled cleanup job. You can also delete your account at any time to remove them sooner.
Generated wrap previews: remain stored until you delete them from your history or close your account.
Account records (email, display name, usage counters): kept for as long as your account is open. If you delete your account we remove your profile, remaining uploaded images and generated images, subject to the exceptions below.
Payment records: retained for At least 5 years after the 31 January Self Assessment submission deadline for the relevant tax year, or longer where required for legal, tax, fraud-prevention or dispute purposes for accounting, tax and fraud-prevention purposes, in anonymised form after account deletion (customer email removed, account reference cleared).
A one-way hash of your email address: retained after account deletion so that free generations already used cannot be reset by deleting and re-creating an account. This hash cannot be used to identify or contact you.

8. Community Garage (optional public sharing)

Community Garage is an optional public gallery. Nothing you create is made public unless you explicitly choose to share it — public sharing is opt-in only.

A shared post may publicly display the generated image, the wrap colour or finish, the share date, your public nickname and the vote count.
Your email address is never displayed publicly. Only the nickname you choose is shown.
Images in the gallery are served from private storage using short-lived signed links generated on our servers.
You must only share vehicle images you own or have permission to use, and we recommend obscuring number plates before sharing publicly, as a plate is personal data in some circumstances.
Other signed-in users can vote on posts and can report posts. We record who voted and who reported in order to enforce one vote per user and to review reports.
We may hide or remove posts for safety, abuse, copyright, privacy or moderation reasons, and we keep an internal audit log of those moderation actions.
If you unshare a post it is removed from the public feed and from future voting, but we may retain limited moderation and audit records where necessary for safety, abuse-prevention, legal compliance or dispute-handling purposes.
Best Wrap of 2026: if your shared post wins the competition, your public nickname, the generated design, the winner badge, the rating points and the winning competition period may be displayed publicly in Community Garage, in My Showroom and in related promotional content. Best Wrap of 2026 runs from 2 August 2026 until 31 December 2026, 23:59 UTC and is a free community recognition feature with no cash or other monetary prize, and we keep records of votes, abuse signals and winner decisions to detect vote manipulation and to review winners.

9. Sharing your information

We share personal data only with:

Lovable Cloud / Supabase — hosting, storage and database.
Stripe — payment processing.
Google — only if you use Google sign-in.
AI providers via Lovable AI Gateway — to generate previews.
Other users of the Service — only for content you choose to share publicly in Community Garage.
Authorities or professional advisers where required by law.

We do not sell your personal data.

10. Your rights

Under UK GDPR you can ask us to access, correct, delete, restrict or port your personal data, and object to certain processing. The quickest way to exercise these rights is via the "Delete account" control inside your account page, or by emailing support@wrapmywhipai.com. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

11. Cookies and similar technologies

We use only cookies and browser storage that are strictly necessary to run the Service: a sign-in session cookie/local storage entry so you stay logged in, and Stripe cookies during checkout to complete your payment securely. We do not currently use analytics, advertising or third-party marketing trackers, so we do not display a cookie consent banner. If that changes, we will publish a separate Cookie Policy and, where required, ask for your consent.

12. Children

The Service is not intended for anyone under 16.

13. Changes to this policy

We may update this policy from time to time. The version number and effective date at the top of the page will change when we do.

Privacy · Terms · Refund policy · Acceptable use · Contact & support