Privacy Policy

Wrap ("we", "us") makes software that café and food-and-beverage businesses use to run their operations. This policy explains what personal data we collect, why we collect it, and the choices you have.

1. Information we collect

We collect the minimum needed to operate the service. That falls into three categories:

• Account data — name, work email, and a hashed password when you (or your manager) creates a user. Employees who only use the cashier app via PIN do not need an email.
• Business data — your menu, recipes, ingredient costs, outlet locations, orders, shifts, and cash reconciliation records. This is your data; you own it, and we hold it on your behalf so the apps can read and write it.
• Diagnostic data — anonymous error reports and performance metrics. These contain no menu items, no order details, and no personally identifying information.

2. How we use it

We use your data only to:

• Run the cashier, kitchen, HR, and dashboard apps you've paid for (or use on the Free plan).
• Send you billing receipts and operational notices.
• Diagnose problems when something breaks. Where possible we do this on anonymised samples.
• Comply with legal obligations (e.g. tax records retention).

We do not sell your data. We do not share it with advertisers. We do not train AI models on your menu, orders, or staff data.

3. Where your data lives

Wrap stores data in managed Postgres databases hosted in Singapore, with daily encrypted backups retained for 30 days. If you are in a jurisdiction with specific data-residency rules, contact us before signing up — we can usually accommodate.

4. Sharing with third parties

We use a small set of vendors to run the platform. They process data on our instructions only:

• Hosting — our cloud provider runs the databases and application servers.
• Payments — when you take card or QRIS payments, the payment processor sees the transaction amount and metadata required by the network. We never see card numbers.
• Email delivery — for receipts and password resets.

5. Your rights

You can export your business data as CSV from the dashboard at any time. You can ask us to delete your account, and the associated business data, by writing to privacy@wrap.app. We will confirm the deletion within 30 days, subject to any tax records we are legally required to retain.

6. Children

Wrap is a business tool. We do not knowingly collect data from anyone under 18 except as part of an employer's payroll record where the employee is legally permitted to work.

7. Changes

When we make material changes to this policy we'll email account owners and update the effective date at the top of this page.

8. Contact

Questions, requests, or concerns? Write to privacy@wrap.app and we'll get back within two business days.