This Privacy Policy describes how WrapSnap (operated by MRJ, a Polish sole-trader business) collects, uses, and protects your personal data. We comply with UK GDPR and EU GDPR.
1. Data we collect
- Account data: email, name, workspace details
- Customer data: the names, emails, addresses, and quote history you input about your customers
- Billing data: handled by Stripe — we store only a customer ID + subscription status
- Usage data: page views, feature usage (via PostHog EU, anonymised for non-logged-in visitors)
- Technical data: IP address, browser type, error logs (via Sentry)
2. How we use it
- To provide the Service (storing quotes, sending emails on your behalf)
- To improve the Service (anonymised usage analytics)
- To communicate with you (transactional emails, product updates if you opt in)
- To meet legal obligations (tax, accounting)
3. Where we store it
Customer data resides in the UK (Supabase London / eu-west-2). Our data controller (MRJ) is in Poland and accesses data under the UK→EU adequacy decision. Backups are stored in the same region.
4. Who we share it with
We share data only with the following processors, each under a Data Processing Agreement:
- Supabase (database + storage)
- Vercel (hosting)
- Stripe (billing)
- Resend (transactional email)
- PostHog EU (analytics)
- Sentry (error tracking)
- Cloudflare (DNS + future WAF)
5. Your rights
Under GDPR you have the right to:
- Access your data
- Correct inaccurate data
- Request deletion
- Object to processing
- Data portability (export)
Exercise any of these by emailing hello@wrapsnap.app. We respond within 30 days.
6. Retention
Account data: retained while your subscription is active + 60 days after cancellation. Customer data: retained per your tier (3 months Starter, 12 months Pro, unlimited Business). Audit logs: 6 months Starter, 24 months Pro, unlimited Business+. Reminder + digest sends: 180 days.
7. Cookies
See our Cookie Policy for details on cookies + tracking technology.
8. Contact
Data Protection contact: privacy@wrapsnap.app.