Privacy Policy
Last updated: September 8, 2026
1. Introduction
Tesla Wrap Studio is a platform for sharing digital templates that change the car visualization in Tesla Paint Shop on the vehicle's touchscreen. This policy explains how we collect, use, store and protect your personal information. By using the platform, you agree to this Privacy Policy.
2. Information We Collect
We may collect the following types of information:
- Account information: username, email address, and the salted one-way bcrypt hash created from the password provided during registration
- Profile information: avatar, username, or other information you choose to provide
- Transaction information: top-up records, point usage, and withdrawal details such as Alipay or WeChat account information
- Uploaded content: template images and related descriptions you upload
- Usage data: browsing, downloads, favorites, and other platform activity
- Device information: IP address, browser type, operating system, and similar technical data
3. How We Use Information
We use collected information to:
- Provide, maintain, and improve the platform
- Process transactions and manage points
- Verify identity and protect account security
- Send service-related notifications
- Respond to questions and feedback
- Prevent fraud and abuse
- Comply with legal requirements
4. Information Sharing
We do not sell personal information. We may share information only in these situations:
- Payment services: we share the transaction information needed to process your payment with the provider used at checkout, such as Stripe or XunhuPay (Hupijiao).
- Legal requirements: disclosure required by law, legal process, or government request
- Rights protection: protecting the rights, property, or safety of the platform, users, or the public
- Business transfer: information may be transferred as a business asset in a merger, acquisition, or asset sale
5. Information Security
We use reasonable technical and administrative safeguards, including HTTPS transmission, salted one-way password hashing with bcrypt, and access controls. No internet service is completely secure, so we cannot guarantee absolute security.
6. Cookies
The platform uses an essential cookie to maintain sign-in and stores your theme preference locally in your browser. We do not currently use cookies for targeted advertising or behavioral analytics. You can manage cookies in your browser settings, but blocking the essential cookie will affect sign-in and related features.
7. Your Rights
You may have the following rights over your personal information:
- Access: view your account information and usage records
- Correction: update or correct your profile
- Deletion: request deletion of your account and related data
- Withdrawal of consent: withdraw consent for specific data processing
To exercise these rights, contact us through the Contact page.
8. Data Requests and Necessary Record Retention
- You may request access to, correction of, or deletion of account and profile data through the Contact page; we verify the request before taking action
- We may retain transaction, points, withdrawal, and security records when necessary for reconciliation, disputes, fraud prevention, account security, or applicable legal obligations
- Uploaded content may remain available until you remove it, action is taken on the account, or we remove it under platform rules; use the Contact page if the relevant removal option is not available in the product
- A deletion request does not recall files already lawfully downloaded by other users, and we may retain records needed for the purposes above or required by applicable law
9. Minors
The platform is not intended for users under 18. If we find that a minor's personal information was collected without consent from a parent or guardian, we will take steps to delete it.
10. Policy Updates
We may update this Privacy Policy from time to time. Updates will be posted on this page, and material changes may be communicated through platform notifications or email. Continued use of the platform means you accept the updated Privacy Policy.
11. Contact Us
If you have questions or suggestions about this Privacy Policy, contact us through the Contact page.
12. Sign-in and payment service data
- Google sign-in processes the account identifier, verified email, and basic profile information Google makes available. Email-code sign-in processes the email address, delivery status, and necessary IP, device, and security records.
- Stripe processes USD card payments, XunhuPay processes CNY WeChat Pay or Alipay payments, and Resend delivers sign-in emails. We share only the data needed for authentication, delivery, payment, refunds, disputes, and reconciliation with the relevant provider.
- We do not store full card details or plaintext email codes. Necessary payment, membership, credit-ledger, delivery, and event records are retained for service delivery, reconciliation, refunds, disputes, fraud prevention, and security auditing.
- Stripe card checkout may collect and update the billing address needed to calculate tax. We retain provider identifiers and verified amount, currency, tax, refund, and dispute records, but not full card details.