Legal

Privacy Policy

Last updated: April 17, 2026

1. The short version

We collect your contact info and shop details to build your website. We don't sell your data. We don't track visitors beyond basic infrastructure analytics. Your shop's content belongs to you.

2. What we collect

From the lead form

Your name, email, phone number, shop name, shop URL, and the message you write. This gets stored in our database so we can reply to your inquiry and prepare a quote.

From billing

Stripe collects your payment details and billing address. We only see the last four digits of your card, the billing country, and the status of each charge. Full card numbers never touch our servers.

From server logs

Standard web-server logs: IP address, timestamp, requested page, user agent. These are used to debug issues and defend against abuse. We do not build cross-site tracking profiles.

3. How we use it

To design and build your website.
To reply to your inquiry and send you a staging link for sign-off.
To process payments and issue receipts.
To diagnose bugs and respond to support requests.
To send you account emails related to your subscription (renewals, failed charges, service notices).

We do not use your data for advertising and we do not sell it.

4. Third-party processors

These are the four services that see any of your data, and what they see.

Supabase

Your lead-form submissions, subscription status, and customer records.

Vercel

Your website hosting traffic, request logs, and basic first-party analytics.

Resend

Transactional emails we send you (staging links, receipts, service notices).

Stripe

Your billing address, card details, and charge history.

5. What we don't do

No advertising cookies.
No reselling of your data to any third party.
No marketing analytics beyond the first-party traffic data Vercel provides natively.
No tracking of you across unrelated websites.

6. Data retention

Lead-form data is kept for 24 months after the last contact. Billing records are kept for 7 years to comply with IRS requirements. You can request deletion at any time by emailing joseph@wrapsiteforge.com. If you are an active paying customer, we keep billing and contact records for as long as your subscription is live.

7. Your rights

You can ask us to:

Send you a copy of the personal data we hold about you.
Correct anything that is wrong.
Delete your data, subject to the retention rules above.

We respond to verified requests within 30 days. Send them to joseph@wrapsiteforge.com.

8. Children

WrapSiteForge is a business-to-business service. It is not directed at children under 13, or under 16 where local law applies. We do not knowingly collect data from minors.

9. International

All data is processed in the United States. If you are in the EU or the UK, GDPR-style rights apply and you can exercise them through the contact method above. If you are in the US, Maryland state-level privacy law applies.

10. Contact

Privacy questions and data requests go to joseph@wrapsiteforge.com or through our contact page. Postal mail: Marian Media LLC, Towson, MD 21204.