Wrap My WhipAI
Home

Privacy Policy

Version 2026-07-25 · Effective 25 July 2026

This is an initial operational draft prepared to describe how the service works. It is not legal advice and has not been reviewed by a solicitor. Placeholders shown in square brackets must be completed and the wording reviewed by a qualified professional before public launch.

This policy explains what personal information Wrap My Whip AI ("we", "us") collects when you use the service at wrapmywhipai (the "Service"), why we collect it, and how we handle it. It is intended to be read together with our Terms and Conditions.

1. Who we are

The Service is operated by [COMPANY_LEGAL_NAME], trading as Wrap My Whip AI (company registration [COMPANIES_HOUSE_NUMBER]), registered address [REGISTERED_POSTAL_ADDRESS, UK]. For any privacy question you can contact us at support@wrapmywhipai.com.

2. Information we collect

  • Account information — the email address you sign up with, a display name, and (if you choose Google sign-in) the basic profile information Google returns to us.
  • Uploaded content — photographs of vehicles that you upload, optional design/logo images you upload, and any text prompts you enter.
  • Generated content — the AI-generated preview images produced from your uploads.
  • Usage records — the number of successful, pending and failed generations linked to your account, so we can enforce the free allowance and purchased balance.
  • Payment records — when you buy a Design Pack, our payment processor (Stripe) collects and processes your payment details. We receive and store the transaction identifier, amount, currency, the email address associated with the payment, and which policy version you agreed to. We do not receive or store your full card number.
  • Technical information — standard server logs (approximate request time, error codes) generated when you use the Service. We do not run third-party advertising trackers.

3. How we use your information

  • To provide the Service (uploading, generating and displaying wrap previews).
  • To enforce your free allowance and purchased balance.
  • To take payment for Design Packs and issue refunds where applicable.
  • To keep the Service secure and investigate abuse.
  • To comply with our legal obligations, including accounting and fraud-prevention rules.

4. Legal bases (UK GDPR)

  • Contract — to deliver the Service you asked for.
  • Legal obligation — to keep payment and tax records.
  • Legitimate interests — to keep the Service running securely and prevent abuse.
  • Consent — where we ask for it (for example, the digital-delivery acknowledgement at checkout).

5. AI processing

Uploaded images and any prompt text are sent to the google/gemini-3-pro-image model through the Lovable AI Gateway to generate your preview. We do not use your uploads or generated images to train AI models. Please see the model provider's own policies for information about how AI providers may process request data.

6. Where your data is stored

Uploaded images, generated images, database records and account details are stored using Lovable Cloud infrastructure (backed by Supabase). Payments are processed by Stripe. Both providers act as our data processors. Data may be stored or processed in the UK, the EU or other countries where these providers operate; where transfers outside the UK take place they are protected by standard contractual safeguards.

7. How long we keep your data

  • Account, uploads, generations: for as long as your account is open. If you delete your account we remove your profile, uploaded images and generated images, subject to the exceptions below. Backups may retain copies for up to [RETENTION_PERIOD e.g. 12 months from last account activity].
  • Payment records: retained for [PAYMENT_RECORDS_RETENTION e.g. 6 years, HMRC requirement] for accounting, tax and fraud-prevention purposes, in anonymised form after account deletion (customer email removed, account reference cleared).
  • A one-way hash of your email address: retained after account deletion so that free generations already used cannot be reset by deleting and re-creating an account. This hash cannot be used to identify or contact you.

8. Sharing your information

We share personal data only with:

  • Lovable Cloud / Supabase — hosting, storage and database.
  • Stripe — payment processing.
  • Google — only if you use Google sign-in.
  • AI providers via Lovable AI Gateway — to generate previews.
  • Authorities or professional advisers where required by law.

We do not sell your personal data.

9. Your rights

Under UK GDPR you can ask us to access, correct, delete, restrict or port your personal data, and object to certain processing. The quickest way to exercise these rights is via the "Delete account" control inside your account page, or by emailing support@wrapmywhipai.com. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

10. Cookies and similar technologies

We use only cookies and browser storage that are strictly necessary to run the Service: a sign-in session cookie/local storage entry so you stay logged in, and Stripe cookies during checkout to complete your payment securely. We do not currently use analytics, advertising or third-party marketing trackers, so we do not display a cookie consent banner. If that changes, we will publish a separate Cookie Policy and, where required, ask for your consent.

11. Children

The Service is not intended for anyone under 16.

12. Changes to this policy

We may update this policy from time to time. The version number and effective date at the top of the page will change when we do.

Privacy · Terms · Refund policy · Acceptable use · Contact & support