Privacy Policy

This Privacy Policy explains how Cyberwrap Studio, operated by Michael Russell as a sole proprietor (“we”, “us”, “our”), collects, uses, discloses, and safeguards your information when you use our fleet advertising platform, configurator, the Cyber Service mobile vehicle-care service, and related services (the “Service”).

1. Information We Collect

We collect information you provide directly and information generated through your use of the Service:

• Account information — name, company/fleet name, email address, and password (stored hashed by our authentication provider).
• Fleet and listing data — cab names, panel availability, pricing configurations, and designs you create.
• Advertiser inquiries — names, emails, messages, and proposal details submitted by advertisers who contact you through the Service.
• Cyber Service booking data — when you book our mobile vehicle-care service, we collect the name, email, phone, and the service address/location of the vehicle, your selected services, preferred and scheduled visit times, and any notes you provide (for example gate codes or parking instructions). We use the address only to reach the vehicle and coordinate the visit.
• Vehicle photos — for Cyber Service visits, we may capture before/after photographs of the vehicle to document the work performed and share them with you as proof of service. These images are stored privately and shared with you through a private, unguessable link.
• Payment information — handled by our payment processor (Stripe). We do not store full card numbers; we retain a customer reference, subscription/order status, and tier or amount.
• Usage & analytics data — log data, IP address, device/browser information, share-link view counts, and first-party product-analytics events (such as page views and which features you interact with). This analytics data is collected by us and stored in our own database; we do not use third-party advertising or tracking networks.
• Cyber Service member data — if you apply to become a Cyber Service member, we collect your name, email, phone, the areas you can cover, any notes you send, an optional profile photo, and your Cybercab certification results. Payout details (identity and bank information) are collected and held by Stripe, not by us.
• Member location during a job — while a member is on an active job, their device's location is stored on that job so the customer can see them arrive; it is visible only through that order's private link and is cleared when they stop sharing or the job ends. The location at the moment the job is marked complete is kept with the order as proof of the visit.
• Push notifications — if you turn on notifications, we store the push subscription your browser gives us so we can send you order and job updates. You can turn them off at any time in your browser or app settings.
• Feedback — notes you send through our feedback forms, with your email and the page you sent them from, so we can reply and act on them.

2. How We Use Your Information

• To provide, operate, and maintain the Service and your account.
• To process subscriptions, trials, advertiser payments, and Cyber Service orders via Stripe.
• To schedule, perform, and document Cyber Service visits, including coordinating timing at the address you provide and sending you completion photos.
• To send transactional and service emails (bookings, quotes, proposals and proposal follow-ups, messages, appointment confirmations and reminders, and billing notices).
• To detect, prevent, and address abuse, fraud, and security issues.
• To comply with legal obligations.

3. Service Providers

We share information with vendors who process data on our behalf, including Supabase (authentication, database, and private file storage for service photos), Stripe (payments and subscriptions), Netlify (hosting and serverless functions), and Resend (transactional email delivery). These providers are bound to use your information only to provide their services to us.

Our maps and address tools also send the minimum needed to these open mapping services: the address you type while booking goes to Photon (komoot) for suggestions, a ZIP code you check goes to Zippopotam.us, a job's service address goes to OpenStreetMap Nominatim to place it on the map, route start and end points go to the OSRM routing service, and map tiles load from CARTO. These requests carry the address or coordinates involved and your IP address, not your name or email.

4. Data Retention

We retain account and transaction data for as long as your account is active and as needed to provide the Service, comply with legal and tax obligations, resolve disputes, and enforce agreements. Cyber Service booking records and completion photos are retained to document work performed and support any warranty or dispute; you may request deletion of your service photos at any time using the contact details below. When you delete your account, we remove or anonymize your personal data as described in Section 6, subject to records we are required to keep.

5. Cookies & Local Storage

We use browser local/session storage to keep you signed in and to maintain session state. For product analytics we record basic, first-party usage events (see Section 1) without using cookies or any third-party advertising or cross-site tracking technologies.

6. Your Rights & Account Deletion

Depending on your location, you may have rights to access, correct, export, or delete your personal data (for example under the GDPR or CCPA). You can update your profile and notification preferences in your account settings, and you can permanently delete your account from Settings → Delete Account. When you delete your account we cancel your subscription, remove your fleet and profile data, and anonymize any retained records associated with completed advertiser bookings. To make any other privacy request, contact us using the details below.

7. Security

We use industry-standard measures including encrypted transport (HTTPS), row-level security on our database, and scoped access tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children’s Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect their information.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

10. Contact

Questions about this policy or your data? Email info@cyberwrapstudio.com.