Last updated
Tesla × Wrap is operated under the name teslaxwrap. This policy describes data used for our digital Tesla wrap editor, accounts, AI generation and payments. Privacy requests: support@teslaxwrap.com.
Google sign-in and account information
We use Google sign-in to identify your account. We request the basic openid, profile and email permissions and receive your Google account identifier, verified email address, name and profile picture. We use them to create and recognize your account, associate projects and credit balances, and handle account and payment support. We do not request access to Gmail, Drive, contacts or calendars.
Google account information is not sold, used for advertising profiles or sent as input to the AI image-generation model. Authentication uses an application session; our application does not persist Google access or refresh tokens in its account database.
Artwork, local storage and AI requests
Editing and exporting take place in your browser. Drafts, favorites and the last homepage selection use local storage or session storage. Saving or submitting a project sends the relevant artwork and project information to our server. Submissions intended for publication include the title, vehicle and image; do not submit private information you do not want displayed.
When you choose AI generation, your prompt and any selected reference image are sent to SenseTime SenseNova (U1.5 image models), the configured AI service. Provider information is available at https://platform.sensenova.cn/docs. Provider availability and data-handling terms depend on the service enabled at that time. We do not claim that every third-party provider has the same retention or training policy. Do not include sensitive personal information in prompts or reference images.
Storage, hosting and payment providers
Supabase stores account records, project data, order records and the credit ledger. Private Cloudflare R2 storage holds uploaded images, generated files and saved thumbnails. Vercel hosts the website and server routes. Access to private account data is checked by our server.
Waffo processes hosted checkout. We provide the order details, amount, currency, account identifier and email needed for the purchase, and receive payment identifiers and status for fulfillment and support. Payment credentials are entered in the payment provider’s checkout; this application does not store full card numbers or card security codes.
Public artwork covers and web fonts may be loaded from third-party hosts. Those hosts receive ordinary network information such as IP address and browser request headers. Hosting and service providers may process data in countries other than yours; exact locations depend on the configured services.
Cookies and security
Authentication uses cookies required for sign-in and session security. We use server access controls and private storage for account content. You can sign out, clear site storage or disable cookies in your browser; doing so can remove local drafts or prevent sign-in. We do not promise that any internet service can eliminate every security risk.
Feedback and service administration
When you submit feedback, we store its content, category, account identifier and handling status. Authorized administrators can manage accounts, view saved projects, handle feedback and configure credit packages. Administrative changes are logged. Handling notes are visible to the user who submitted the feedback.
Retention, requests and revoking Google access
Account and project information is retained while needed to provide the service. Payment, credit and support records may be retained for reconciliation, disputes or applicable legal obligations. Request access, correction or deletion through support@teslaxwrap.com, using your account email where possible. We may verify your identity and explain records that cannot immediately be removed. This is a support-request process, not a claim of an automated account-deletion feature.
You can revoke this application’s Google authorization from your Google Account’s third-party connections settings. Revoking Google access or deleting a browser cookie does not automatically remove records already stored by this service; contact us for an account-data request.
Changes and contact
We update this page when our data practices change and show the revised date. Questions about this policy or available privacy rights can be sent to support@teslaxwrap.com.