1. Scope

This policy applies when you use https://wrapup.dev, create an account, subscribe to paid services, receive our newsletter emails, or contact support.

2. Information we collect

We collect the following categories of information:

• Account and sign-in data: name, email, profile image, account identifier, and provider details from GitHub OAuth sign-in.
• Profile and newsletter settings: interests/tags, delivery email, optional bio/job title, and email opt-out state.
• Subscription and billing data: subscription status, renewal/cancellation state, and invoice/billing metadata provided by Polar and its payment processor(s). We do not store full payment card numbers.
• Newsletter interaction data: recommendation click events and unsubscribe token metadata (hashed token, expiry, and used-at time).
• Technical and security data: session data, IP address, user agent, timestamps, and operational/security logs.
• Support and communications data: information you include in support requests or other direct communications with us.

We use cookies and similar technologies primarily for authentication, session management, security, and core functionality.

3. How we use information

We use personal information to:

• Provide, maintain, and improve the Service.
• Personalize weekly recommendations and newsletter content.
• Authenticate accounts, secure the Service, and prevent abuse/fraud.
• Manage subscriptions, billing, renewals, cancellations, and support.
• Send transactional and service messages (for example billing receipts, account notices, and policy updates).
• Send newsletter emails based on your subscription and email preferences.
• Comply with legal obligations and enforce our Terms.

4. Legal bases (where required)

Where applicable law requires a legal basis for processing, we rely on one or more of:

• Contract: to provide the Service you request.
• Legitimate interests: to operate, secure, and improve the Service.
• Consent: where required (for example for certain optional communications).
• Legal obligation: to comply with laws, regulations, and lawful requests.

5. How we share information

We do not sell personal information for money, and we do not share personal information for cross-context behavioral advertising.

We may share information with:

• Service providers/processors that help us operate the Service, such as hosting/infrastructure providers, authentication providers, billing/payment providers, database/storage providers, and email delivery providers.
• GitHub for authentication and account linking.
• Polar and related payment providers for subscription and billing operations.
• Legal/safety recipients when required by law, court order, or to protect rights, safety, and security.
• Successors/assigns in connection with a merger, financing, acquisition, reorganization, or asset sale.

6. Data retention

We retain information for as long as reasonably necessary for the purposes described above, including legal, accounting, fraud-prevention, and dispute-resolution needs.

Current retention targets (subject to legal requirements and backups):

• Account/profile data: while account is active, then up to 24 months after account closure.
• Subscription/invoice records: up to 7 years for tax/accounting compliance.
• Security/technical logs: typically 30 to 180 days.
• Recommendation/click data: typically up to 24 months.
• Unsubscribe token and suppression metadata: for as long as needed to honor opt-out requests and demonstrate compliance.

When feasible, we delete or de-identify data no longer needed.

7. Your choices and rights

You can:

• Update profile, preferences, and delivery email.
• Unsubscribe from newsletter emails at any time, including one-click unsubscribe where available.
• Cancel subscription renewal from billing/account settings.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export your personal information.

To submit a privacy request, email support@wrapup.dev with subject line Privacy Request and enough information for us to verify your identity and process your request.

8. U.S. state privacy disclosures

For the 12 months before the last updated date, we collected and disclosed the categories listed in Section 2 for business purposes described in Sections 3 and 5.

We do not:

• Sell personal information for money.
• Share personal information for cross-context behavioral advertising.

9. EEA and UK users

If you access the Service from the EEA or UK, additional rights and legal-basis disclosures apply as described above. You may also lodge a complaint with your local supervisory authority.

10. Email communications and unsubscribe

We send transactional and service emails related to your account, billing, and operation of the Service.

For newsletter emails:

• Each email includes an unsubscribe mechanism.
• One-click unsubscribe links are intended to work without login.
• We process unsubscribe requests as quickly as practicable and, when required, within legally mandated timelines.

11. International transfers

Your information may be processed in countries other than your own. Our primary infrastructure provider is Railway (railway.app), based in the United States.

Where required by applicable law, transfers are covered by appropriate safeguards including Standard Contractual Clauses (SCCs) adopted by the European Commission, or UK-equivalent mechanisms.

12. Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information. No system is perfectly secure.

13. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and update the last updated date.

15. Contact

Xander Gouws and Omar Hayat, d/b/a WrapUp.dev
Email:support@wrapup.dev
Mailing address: PO Box 46012, GLOUCESTER RPO BEACON HILL, ON, K1J9M7, Canada