Privacy Policy
Last updated: 13 July 2026
This policy explains what personal data SpecWrap collects, why, and the rights you have over it. It is written to meet the EU General Data Protection Regulation (GDPR).
1. Data controller
The data controller is Robert Baiesita, Str. Valperga 48, 10080 Salassa (TO), Italy, VAT no. (P.IVA) 12651010014 ("SpecWrap", "we", "us").
For any privacy request, contact support@specwrap.xyz.
2. What data we collect
•
Account data: email address, shop/business name, city (optional), country and VAT number (optional), language preference.
•
Content you upload: photographs of vehicles and the AI Renders generated from them, project details you enter (client name, vehicle, notes, contact details of your clients), and issue reports you submit.
•
Purchase data: your plan, credit balance and history, and purchase records (product, price, currency, store, transaction identifier) reported to us by Apple/Google via RevenueCat. We never see or store your card details.
•
Technical data: push notification tokens, device platform, and service logs (e.g. render processing times and errors) needed to operate and secure the Service.
•
Sign-in data: if you use Google Sign-In, we receive your Google account email and basic profile identifiers.
We do not run third-party advertising or sell personal data.
3. Client data you enter
When you add your own clients’ details (names, phone numbers, emails, vehicle information) to projects, you act as controller of that data and we process it on your behalf to provide the Service. Ensure you have a lawful basis to store your clients’ data and to share gallery links containing their vehicle photos.
4. Why we process your data (legal bases)
•
To provide the Service — creating your account, storing photos, generating Renders, syncing projects, processing credits and purchases (Art. 6(1)(b) GDPR — performance of a contract).
•
To send you service notifications (render complete, client activity, credits, report outcomes) — Art. 6(1)(b). Push notifications can be disabled in your device settings at any time.
•
To secure the Service, prevent abuse and keep records of transactions — Art. 6(1)(c) and 6(1)(f) (legal obligations and legitimate interest).
•
To comply with tax and accounting obligations — Art. 6(1)(c).
5. AI processing of your photos
To generate a Render, your uploaded photo and reference images of the selected film are processed by Google’s Gemini API (Google Cloud). The photo is transmitted for the purpose of generating the preview image and panel detection only. We do not use your photos to train AI models.
Uploaded photos and Renders are stored in Google Cloud Storage (Firebase) associated with your account until you delete them or your account.
6. Processors and recipients
•
Google Ireland Ltd / Google LLC — Firebase (authentication, database, file storage, cloud functions, hosting) and the Gemini API (render generation).
•
RevenueCat, Inc. — purchase and subscription management.
•
Apple Inc. / Google LLC — payment processing as merchants of record for in-app purchases.
•
Expo (650 Industries, Inc.) — push notification delivery.
Some providers process data outside the EEA (notably in the United States). Where they do, transfers are safeguarded by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
7. Retention
•
Account and content data: kept while your account is active; deleted or anonymized upon account deletion, except where retention is legally required.
•
Failed renders: automatically deleted after 30 days.
•
Purchase and credit records: kept for the period required by tax and accounting law (currently up to 10 years in Italy).
•
Client gallery share links: active until you delete the project or regenerate the link.
8. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent where processing is based on consent.
To exercise any right, email support@specwrap.xyz. We respond within one month. You also have the right to lodge a complaint with a supervisory authority — in Italy, the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).
9. Account deletion
You can request deletion of your account and associated data at any time by contacting support@specwrap.xyz from your registered email address. Deletion removes your account, photos, Renders and projects; purchase records are retained only as required by law.
10. Security
Data is stored on Google Cloud infrastructure with encryption in transit and at rest. Access to your content is restricted by per-account security rules; administrative access is limited and logged. No system is perfectly secure — notify us immediately at support@specwrap.xyz if you suspect a breach of your account.
11. Children
The Service is intended for business professionals and is not directed at children under 18. We do not knowingly collect data from children.
12. Changes to this policy
We may update this policy from time to time. For material changes we will notify you in the app or by email before they take effect. The "Last updated" date above reflects the latest version.
13. Contact
Privacy questions and requests: support@specwrap.xyz.
SpecWrap — operated by Robert Baiesita · Str. Valperga 48, 10080 Salassa (TO), Italy · P.IVA 12651010014 · support@specwrap.xyz