← Back to Wrap-Lite
Privacy Policy — Wrap-Lite
1. Introduction
Wrap-Lite is a financial control platform for audiovisual projects (cash advances, expenses, expense reports and approvals). This Privacy Policy explains what data we collect, why, how we protect it and what rights you have over it.
Contact: dudas@wrap-os.com
Main jurisdiction: Chile (Law 19.628 on Personal Data Protection)
2. What data we collect
2.1 Data you provide explicitly
- Identity: Name, email, phone
- Account and project: Production company, projects, advances, amounts, expense categories
- Receipts: Receipts and invoices you upload to report an expense
2.2 Data we collect automatically
- Receipt OCR: When you upload a receipt, we extract the amount, date and vendor from the image
- App activity: Approvals, rejections and status changes, with timestamp and responsible user
- Device: Browser type and version (for technical support)
- Analytics and advertising: We use Google Analytics 4 and Google Ads, which are activated after your first interaction with the site. They record pages visited, device and browser type, approximate location and a cookie identifier; and, once you confirm your email after signing up, a “sign-up” event to measure our campaigns. We do not send Google your name, email, advances or receipts. You can block these cookies in your browser or with Google’s Analytics opt-out add-on.
3. Why we collect this data
| Data | Purpose | Legal basis |
|---|
| Identity | Account creation, authentication | Necessary for the contractual relationship |
| Advances and expenses | Providing the financial control service | Necessary for the contractual relationship |
| Receipts + OCR | Expense reporting and auditing | Necessary if you upload a receipt (explicit consent) |
| App activity | Approval traceability, fraud prevention | Legitimate interest |
| Analytics and advertising | Measuring site usage and campaign performance | Legitimate interest |
4. Who can access your data
4.1 Within Wrap-Lite
- You and your project team: according to the assigned role (production, field, accounting)
- Technical support: only if you report a problem (temporary access)
4.2 External third parties
- Payment gateway: Transbank (Webpay) and/or dLocal, to process the subscription charge — they do not receive advance or receipt data, only what is needed for billing
- AI for OCR: processing of receipt images, with no retention after reading
- Google (Analytics and Ads): measuring site usage and our campaigns, as described in section 2.2
- Set-OS (a Unit OS SpA product): when you assign seats to your crew, we share each person’s name, tax ID (RUT) and contact details to give them access to Set-OS
5. How long we keep your data
| Data | Retention period |
|---|
| Active account | While you keep your subscription |
| Advances, expenses and receipts | 2 years (accounting/audit backup) |
| Trial or lapsed-plan account | Kept in read-only mode until you ask for deletion (section 8) |
6. Security
- Encryption in transit: HTTPS/TLS enforced across the whole site
- Passwords: bcrypt hash, never stored in plain text
- Sessions: cookies with SameSite protection and CSRF validation on forms
7. Security breach notification
If we detect an incident that compromises your personal data, we will notify you by email within a reasonable time, together with the measures taken to contain it.
8. Your rights (ARCO: Access, Rectification, Cancellation, Objection)
- Access: request a copy of your data
- Rectification: correct your data at any time
- Cancellation: delete your account and associated data
- Objection: object to non-essential uses of your data
Response time: 30 days from the request.
9. Changes to this Policy
We will email you if we make material changes. If you disagree, you can cancel your account without penalty.
10. Contact
Email: dudas@wrap-os.com
Last reviewed: October 2026