How we handle your data.

How WrapAlly collects, uses, and protects your organization, lead, Gmail, and integration data.

Effective date: June 12, 2026

Information We Collect

Account information, such as your name, email address, authentication status, organization membership, and organization role.
Organization data you enter into WrapAlly, including leads, customer contact details, tasks, schedules, templates, invoice content, activity history, and related notes.
Integration data needed to connect services such as Gmail and DocuSign, including connection status, account identifiers, and encrypted access or refresh tokens.
Technical data needed to operate the service, such as request logs, device/browser information, error logs, security events, and cookies or similar technologies used for authentication and analytics.

To provide the WrapAlly CRM, task, template, invoice, scheduling, and workflow features.
To send emails, invoices, and signature requests only when an authorized user takes that action inside WrapAlly.
To maintain organization security, troubleshoot issues, prevent abuse, and improve product reliability.
To show records of sent emails, invoice activity, and other workflow history inside your organization.

WrapAlly requests Gmail send permission so you can send customer follow-up emails from your own connected Gmail account.
WrapAlly does not read your Gmail inbox, search your mailbox, import contacts, delete messages, or manage labels.
Email content is created from templates you control, previewed before sending, and sent only after you click the send action.
Gmail access and refresh tokens are stored encrypted and are used only to send user-approved emails through Gmail.
WrapAlly's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

If you connect DocuSign, WrapAlly uses the connection to create and send signature envelopes from invoice or document workflows you approve.
Integration tokens are used only for the connected workflow and are not sold or used for advertising.
You can disconnect supported integrations from your WrapAlly settings.

If you provide a mobile phone number and opt in, WrapAlly sends SMS text notifications alerting you when a new lead is delivered to your pipeline.
We do not sell or share your mobile phone number or SMS opt-in consent with third parties or affiliates for their own marketing purposes. Mobile opt-in information is never shared.
Message frequency varies based on your lead volume. Message and data rates may apply.
You can opt out at any time by disabling lead text alerts in your Settings, or by replying STOP to any message. Reply HELP for assistance.

WrapAlly uses Microsoft Clarity to understand how the product is used, through behavioral metrics, heatmaps, and session replay, so we can improve the service.
Clarity is configured with strict masking so that on-screen text, customer details, and other organization content are not captured in recordings.
Usage data collected through Clarity is processed under Microsoft's privacy terms. For more information, see the Microsoft Privacy Statement at privacy.microsoft.com.

WrapAlly does not sell your personal information, customer data, Gmail data, or integration data.
We share data with service providers only as needed to operate WrapAlly, such as authentication (Clerk), hosting and database infrastructure, transactional email delivery (Resend), payment processing (Stripe), usage analytics (Microsoft Clarity), email delivery through your connected Gmail account, and signature workflows through DocuSign.
If you enable payment collection, payment card details are collected and processed directly by Stripe — WrapAlly does not store your customers' full card numbers.
We may disclose information if required by law, to protect rights and safety, or to investigate abuse of the service.

WrapAlly uses access controls, encrypted integration tokens, and hosted infrastructure safeguards to help protect customer and organization data.
No internet service can guarantee perfect security, but we work to keep access limited to authorized users and operational service providers.
Organization data is retained while your account or organization uses WrapAlly, unless deleted or removed according to product functionality, support requests, or legal requirements.

You can update or remove many lead, template, task, and organization records inside WrapAlly.
You can disconnect Gmail or DocuSign from the Settings page.
You can request access to, correction of, or deletion of your personal information by contacting contact@wrapally.com. We will respond as required by applicable law.

For privacy questions or data requests, contact WrapAlly at contact@wrapally.com.