Privacy Policy
Cryptographic Isolation
Each tenant operates in an isolated data sphere with zero leakage across enterprise boundaries.
Encrypted OAuth Secrets
Third-party connector tokens (Amazon, Shopify, Meta, GitLab) are AES-256-GCM encrypted at rest.
1. Introduction & Corporate Information
This Privacy Policy explains how Edgewrapper Technologies Private Limited (“Edgewrapper”, “we”, “us”, or “our”), operating the orchestration SaaS platform at wrapup.live (“WrapUp” or “Platform”), collects, stores, uses, and protects your data when you visit our website, register a tenant workspace, or activate connectors and automated workflows.
By accessing or using WrapUp, you acknowledge that you have read, understood, and agree to the data practices described in this policy.
2. Information We Collect
To provide high-throughput automation and multi-channel synchronization, we collect the following categories of data:
- Account & Workspace Identification: Name, work email address, company name, workspace subdomain, and authentication credentials.
- Connector & Integration Credentials: API keys, OAuth refresh tokens, webhook signing secrets, and endpoint configurations for connected platforms (such as Amazon SP-API, Flipkart, Shopify, Magento, Meta Graph API, Delhivery, GitLab, Google Analytics, and DocuSign).
- Operational Execution Payloads: Order IDs, inventory synchronization logs, catalog schemas, and workflow triggers required to execute automated tasks on your behalf.
- Telemetry & Audit Logs: IP addresses, browser agents, workflow run durations, error codes, and operator access logs for compliance and diagnostic tracking.
3. How We Use Your Information
We process your data strictly to deliver contracted capabilities and maintain platform security:
- Executing scheduled and event-driven automation workflows across your connected systems.
- Provisioning tenant databases, RBAC rules, and layout builder configurations.
- Measuring platform throughput, detecting connector API rate limit exceptions, and preventing security breaches.
- Transmitting critical transactional notices (e.g. connector authorization expiration, billing statements, security advisories).
- We never sell, rent, or monetize your business data or connector payloads to third parties or advertising brokers.
4. Multi-Tenant Architecture & Security Measures
WrapUp is architected from the ground up for strict enterprise isolation:
All customer workflows operate in partitioned scopes with discrete database instances or cryptographically signed tenant context tags (`x-tenant-id`). No tenant can inspect, access, or modify another organization's data or execution pipeline.
All data in transit is encrypted using TLS 1.3. All database volumes, backups, and connector credentials are encrypted at rest using AES-256 keys managed via dedicated hardware security modules (HSMs).
5. Third-Party Connectors & Sub-Processors
When you activate a connector in our Catalog (e.g., Amazon, Shopify, Meta), you grant WrapUp permission to invoke external APIs on your behalf. WrapUp interacts with the following verified infrastructure sub-processors:
- Amazon Web Services (AWS): Cloud compute, serverless execution nodes, and secure object storage.
- MongoDB Atlas: Encrypted multi-region document storage.
- Payment Gateways (Razorpay / PayPal / Stripe): Secure payment tokenization and subscription billing processing.
6. Your Rights & Data Sovereignty (GDPR, CCPA & DPDP)
Regardless of your jurisdiction, we uphold the highest international privacy standards. You possess the following rights:
- Right to Access & Portability: Request a complete JSON export of all your tenant metadata, connector configurations, and execution histories.
- Right to Erasure (“Right to be Forgotten”): Request immediate and permanent purging of all your tenant databases, connector secrets, and audit records.
- Right to Revoke Connectors: Instantly disconnect any third-party app with 1 click in your Operator or Tenant settings, which immediately zeroes out stored OAuth tokens.
7. Contacting Our Data Protection Officer (DPO)
If you have questions regarding this Privacy Policy, wish to exercise your data sovereignty rights, or require security documentation for enterprise vendor review, please contact: