WrapUp Privacy Policy

Effective date: October 11, 2026

WrapUp is a business application for vehicle wrap, paint protection film, window film and graphics shops. It is used to manage requests, quotes, design approvals, planning, invoicing and communication with customers and installers.

WrapUp is operated by 2WRAP USA, a Nevada corporation, 31328 Via Colinas, Unit 101, Westlake Village, California 91362, United States ("WrapUp", "we", "us"). Questions about this policy: support@gowrapup.com.

1. Who this policy covers

Business users: the shops and their staff who use WrapUp ("Customers" and "Users").
People our Customers work with: their own customers, contacts, suppliers and independent installers whose details a Customer enters into WrapUp or who interact with WrapUp pages (for example a quote link, a design approval page or an installer invitation).

For data about the people our Customers work with, the Customer decides what is collected and why. WrapUp processes that data on the Customer's behalf and on its instructions, as a service provider (in the European Union: as a processor). Questions or requests about that data are best sent to the shop you deal with; we will help them answer.

2. What we collect

Account data: name, business e-mail, phone number, role, company and shop, sign-in details and security codes.

Business data a Customer enters or receives through WrapUp:

contact details of their customers and contacts (name, company, e-mail, phone, billing and installation address, VAT or tax number);
project details: vehicles or objects (make, model, year, VIN, colour), photos, designs, files, quotes, prices, approvals and signatures, planning, notes and messages;
installer details: name, company, phone, e-mail, services offered, availability preferences and tax documents such as a W-9 or a business number;
messages sent and received by e-mail, text message and phone through WrapUp, including voicemail.

Data from connected services, only when a Customer connects them:

QuickBooks Online (Intuit): company name and ID, customers, products and services, tax rates and tax codes, invoices, and the status of invoices and payments.
Eenvoudig Factureren: customers, articles, invoices, credit notes and payment status.

Technical data: log data such as IP address, browser type, pages requested, dates and times, and error reports, used for security and to keep the service working.

Cookies: we only use cookies that are necessary to sign in and keep a session secure, and the bot protection on public forms (Cloudflare Turnstile) may set its own necessary cookies. Some interface preferences are stored in your browser only and never leave your device. We do not use analytics, tracking or advertising cookies, and we do not sell data to advertisers.

3. How we use data

to provide WrapUp: create and send quotes and design approvals, plan work, send messages and reminders, and keep project history;
to create invoices in the accounting software a Customer connects (QuickBooks Online or Eenvoudig Factureren) and to show their status (created, sent, paid, changed, credited) back in WrapUp;
to look up the sales tax rate and check an address with public tax services, such as the California Department of Tax and Fee Administration;
to secure accounts, prevent abuse and spam, and fix errors;
to support Customers when they ask for help;
to meet legal obligations.

We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not use data from QuickBooks or any other connected service for any purpose other than providing WrapUp to the Customer who connected it.

4. QuickBooks Online and other connected services

A Customer connects QuickBooks Online through Intuit's own sign-in page and can disconnect at any time in WrapUp or in QuickBooks.
WrapUp only reads and writes what it needs to create invoices and follow their status. WrapUp does not send invoices to customers itself: a person reviews and sends them in QuickBooks.
Access tokens are stored encrypted and are never shown to Users.
When a Customer disconnects, WrapUp stops all access and deletes the stored tokens. WrapUp keeps its own record of invoices it created, as part of the project history, unless the Customer asks us to delete it.
Use of QuickBooks Online is also governed by Intuit's terms and privacy statement.

We share data only with companies that help us run WrapUp, under contracts that require them to protect it and use it only for us:

hosting and databases (Railway);
web delivery, security, bot protection and file storage (Cloudflare, with files stored in the European Union);
e-mail delivery (Twilio SendGrid);
text messages and phone calls (Twilio);
AI services, only for the task a User starts: Anthropic (reading uploaded documents and VIN images, translating, reading replies from installers), Vectorizer.AI (converting an uploaded image into a vector file) and the providers behind WrapUp's design previews. Anthropic does not use this content to train its models. Vectorizer.AI states in its own privacy policy that it may use uploaded images to improve its image processing; WrapUp asks it to keep each image for one day only. Do not use vectorization for images you do not want shared with that service. No data from QuickBooks Online is ever sent to an AI service;
accounting software the Customer connects (Intuit QuickBooks Online, Eenvoudig Factureren);
public lookup services that receive only an address or a VIN: the California Department of Tax and Fee Administration (sales tax rate) and the U.S. National Highway Traffic Safety Administration (vehicle details from a VIN).

We may also share data when the law requires it, to protect rights and safety, or as part of a merger or sale of the business, in which case this policy continues to apply.

6. Where data is stored

WrapUp's servers, databases and file storage are located in the European Union (servers and databases in the Netherlands). Data is accessed from the United States and Belgium by the people who run and support WrapUp. Where the law requires it, we use appropriate safeguards for international transfers, such as the European Commission's standard contractual clauses.

7. How long we keep data

We keep data for as long as the Customer's account is active and as needed to provide WrapUp. When a Customer closes their account and asks us to delete its data, we delete or anonymise it within 90 days of that request, except where we must keep it longer by law (for example tax and accounting records) or to resolve disputes. Backup copies are deleted on their normal rotation.

8. Security

We protect data with encryption in transit, encrypted storage of access tokens and keys, separation of each Customer's data, role-based access, two-step confirmation for approvals, logging and regular, automatic database backups. No system is perfectly secure; if we learn of a security incident that affects personal data, we will inform the affected Customers and, where required, the authorities.

9. Your rights

Depending on where you live, you may have the right to ask for access to your personal data, a copy of it, correction, deletion, restriction of or objection to its use, and to withdraw consent.

California residents have these rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know, delete and correct, and the right not to be discriminated against for using them. We do not sell or share personal information as defined by that law.
People in the European Union have these rights under the General Data Protection Regulation (GDPR) and may complain to their data protection authority (in Belgium: the Gegevensbeschermingsautoriteit).

To use your rights, write to support@gowrapup.com. If your data was entered by a shop that uses WrapUp, we may forward your request to that shop.

10. Text messages

Shops use WrapUp to send text messages about requests, quotes, appointments and invoices, and to send job requests to installers who agreed to receive them. Message and data rates may apply. Reply STOP to stop receiving texts, or HELP for help.

11. Children

WrapUp is a business tool and is not meant for children under 16. We do not knowingly collect their data.

12. Changes

We may update this policy. We will post the new version on this page with a new effective date and, for important changes, inform Customers by e-mail or in WrapUp.

13. Contact

2WRAP USA · 31328 Via Colinas, Unit 101, Westlake Village, California 91362 · support@gowrapup.com