Privacy

Wrapline is run by HitScore Labs LLC. This page says what the service collects and what it does with it. Questions: support@wrapline.app.

What we collect

• Your account: your email address, the agency name, logo address and colour you choose, and the plan you are on.
• Your clients' details: the client name, website, and the email addresses you want reports sent to. You are responsible for having the right to share them with us.
• Marketing numbers: if you connect Google, Wrapline reads aggregate monthly figures from Google Analytics, Search Console and, if you choose to allow it, Google Ads (sessions, clicks, positions, ad spend, conversions, page, query and campaign names). It does not read individual visitors. The report built from those numbers is stored so it can be shared.
• Whether a report was read: when someone opens a shared report link or downloads its PDF, Wrapline records that it happened, when, and a salted hash of the connection (so a reload isn't counted twice) so the agency can see whether the report was read. The hash can't be turned back into an address, and the agency never sees it.
• Local listing figures: if you connect a Google Business Profile, Wrapline reads its aggregate views, calls, direction requests and website clicks.
• Meta ad results: if you connect Meta, Wrapline reads aggregate spend, clicks, conversions and campaign names from the ad accounts you choose, using a read-only permission. The access token is stored encrypted, and you can remove it by disconnecting here or in your Facebook settings.
• Your logo file: if you upload one, it is stored so it can show on your reports.
• Google access: a refresh token that lets Wrapline keep reading those figures. It is stored encrypted and can be removed by disconnecting the account here or at myaccount.google.com/permissions.

Google user data

Wrapline's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to build the reports you ask for. We don't sell it, don't use it for advertising, and don't let people read it except as needed to run the service, for security, or to follow the law.

Who else sees it

• Stripe takes card payments for Solo, Agency, a single report, and the pitch add-on. Wrapline stores Stripe's customer id, not the card number.
• Cloudflare hosts Wrapline, stores its database, and sends its email.
• Anthropic receives the monthly numbers and page and query names for a client so its model can write the report summary. By default Anthropic does not use data sent through its API to train its models.
• Your clients see a report only if you send them its link. Anyone with the link can open it, so share it as you would any private document.

Keeping and deleting

Reports and client details are kept until you delete the client or your account. Deleting a client deletes its reports and connections. You can delete your whole account yourself from the Branding page, which deletes everything above and revokes Wrapline's access at Google. Backups kept by our hosting provider age out on its normal schedule. For help, write to support@wrapline.app.

Cookies

One cookie keeps you signed in. If you arrive through a link that names where it came from (for example a post on another site), a second cookie remembers that name for 30 days, and it is stored on your account if you sign up, so we can tell which of our own links work. A report footer can also set a cookie with a referral code for 30 days, so the agency who shared it can be credited if you later pay. Those cookies hold only that name or code, nothing else about you. We use no advertising cookies and no third-party trackers.