Privacy Policy
Last updated: October 4, 2026
Introduction
Welcome to FrunkLab ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our website at frunklab.com (the "Service").
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Tesla wrap design service. Please read this policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.
FrunkLab is not affiliated with Tesla, Inc. "Tesla," "Model 3," "Model Y," "Model S," "Model X," and "Cybertruck" are trademarks of Tesla, Inc.
Information We Collect
We collect information in the following ways:
Account Information
When you create an account, we collect your email address and display name. You may optionally provide information about which Tesla vehicle you own.
Designs & Content
We store the wrap designs you create, including canvas data, images you upload, titles, descriptions, and tags. Thumbnail images are generated automatically for gallery display.
Usage Data
We record how the Service is used, such as pages viewed, features used, and which vehicle models are popular. Events are stored under a pseudonymous ID, not your name or email address. When you are signed in, that ID is linked to your account, so we can see your own activity to provide support, prevent abuse, and understand how FrunkLab is used. With each event we also store broad categories worked out from your browser's request: device type, operating system, which app's built-in browser you are using, and your browser's language and region setting. We do not store your IP address or your full browser identifier with these events. When you sign up, we also record how you first found us: the referring site, any campaign tags, the page you landed on, and the type of browser you used.
We may publish anonymous statistics built from this data, such as which cars and styles are most popular and the share of AI requests by broad theme. These never include your prompts, designs, or anything that identifies you.
Payment Information
Payment processing is handled entirely by Stripe. We do not store your credit card numbers, bank account details, or other sensitive financial information on our servers. We only store a reference to your Stripe customer ID to manage your subscription.
How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process your transactions and manage your subscription
- Store and display your wrap designs in the community gallery (when published)
- Review designs submitted to the community gallery, including an automated first check
- Generate AI-powered wrap designs based on your prompts
- Improve and personalize your experience
- Analyze usage patterns to improve our features
- Communicate with you about updates, security alerts, and support
- Enforce our terms of service and prevent abuse
Third-Party Services
We use the following third-party services to operate FrunkLab:
Supabase
Authentication and database. Your account information and design data are stored securely on Supabase infrastructure.
Supabase Privacy PolicyStripe
Payment processing. When you subscribe, Stripe handles all payment data in compliance with PCI-DSS standards. We never see or store your full card details.
Stripe Privacy PolicyGoogle Gemini
AI features. When you use the AI wrap or lock chime generators, your text prompt, any reference images you attach, and the vehicle template are sent to Google's Gemini API. Gemini is also used automatically in two places: to suggest a title, description, and tags for a new design from its preview image, and to check designs you submit to the community gallery (the wrap images, title, description, tags, and any text in the design). Google may retain this data per their policies.
Google Privacy PolicyUpstash Redis
Rate limiting and abuse prevention. We use Upstash to count requests and block abuse of our API. These short-lived records are keyed by IP address, account, or email address and expire automatically.
Upstash Privacy PolicyAmazon Web Services
Hosting, file storage, and email. The site runs on AWS. Images you upload, generated wraps, thumbnails, and lock chimes are stored in Amazon S3, and account emails are sent through Amazon SES.
AWS Privacy NoticeElevenLabs
Sound-effect lock chimes. When you generate a sound-effect chime, a written description of the sound is sent to ElevenLabs to produce the audio.
ElevenLabs Privacy PolicySentry
Error monitoring. When something breaks, a technical crash report is sent to Sentry so we can fix it. Email addresses, IP addresses, and login cookies are removed before a report is sent.
Sentry Privacy PolicyCloudflare Turnstile
Bot protection. The sign-up, log-in, and password pages run a Cloudflare Turnstile check to block automated accounts. Cloudflare receives your IP address and basic browser and device signals to decide whether you are a person.
Cloudflare Privacy PolicyData Retention
- Account data: Retained until you delete your account or request deletion
- Designs: Retained until you delete them or delete your account
- Analytics data: Usage events are kept while we operate the Service and used for reporting. When you delete your account, your events remain but can no longer be tied to your account. Daily totals that identify no one may be kept longer
- Access logs: Retained for 90 days for security purposes
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate personal data
- Deletion: Request deletion of your account and associated data
- Export: Download your designs from the "My Designs" page
- Opt-out: Decline optional cookies in the cookie banner to opt out of advertising measurement and on-site experiments. Basic usage events are part of running the Service
To exercise these rights, please contact us at hello@frunklab.com. We will respond within 30 days.
For California Residents (CCPA)
California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete, and the right to opt-out of the sale of personal information. We do not sell personal information.
For EU/UK Residents (GDPR)
If you are in the European Union or United Kingdom, you have rights under GDPR including the right to access, rectify, erase, restrict processing, data portability, and to lodge a complaint with a supervisory authority.
Security
We take the security of your data seriously and implement appropriate technical and organizational measures:
- All data transmitted over HTTPS/TLS encryption
- Passwords hashed using industry-standard algorithms (handled by Supabase)
- Rate limiting to prevent abuse and brute-force attacks
- Regular security reviews of our codebase
- Access controls limiting who can access user data
However, no method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
Children's Privacy
FrunkLab is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@frunklab.com, and we will delete such information.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also send an email notification to registered users.
Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: