Privacy Policy

Wrangler OS is operated by Grid Theory (wrangleros.com). Throughout this policy, “we,” “us,” and “Wrangler” refer to Grid Theory. “You” refers to the producer or agency that holds the Wrangler account.

This document is a plain-language summary and does not replace a full legal review. We are publishing it so you can decide whether Wrangler is a fit before you upload data.

• Account data — your name, email, and the organization you belong to. Used to authenticate you.
• NPN— your National Producer Number, captured at signup. Used to confirm you’re a licensed producer.
• Lead data — the prospect names, phone numbers, email addresses, and any notes you import or enter. This is your data. We store it on your behalf.
• Usage data— pages you visit, actions you take (a lead moved to “won,” a coaching note sent), timestamps. Used to power the dashboard, leaderboard, and reward system you see in the product.
• Voice + chat content — messages and recordings in Campfire are stored encrypted at rest, scoped to your team only.
• Billing data — handled by Stripe; we receive a token, never your card number.

We use your data to run the product: showing you your pipeline, computing your rank, sending coaching notifications, processing payments. We do not sell your data, and we do not share it with third parties for advertising.

We use a small number of vendors who process data on our behalf (Supabase for the database, Vercel for hosting, Resend for email, Stripe for payments). Each is bound by contract to use your data only to provide their service.

You are responsible for ensuring every lead you upload has provided lawful consent to be contacted under the Telephone Consumer Protection Act, the Florida Telephone Solicitation Act, and any other applicable jurisdictional rules. Wrangler records an opt-in flag against each lead and exposes it in the API so you can audit your file.

Wrangler does not initiate calls or texts on its own. All outbound contact is initiated by you using your own dialer / phone / messaging tools.

We keep your data for as long as your account is active. If you cancel, we hold a copy for 30 days so you can re-activate, then permanently delete it. You can request earlier deletion at any time by emailing privacy@wrangleros.com.

You can export every lead, note, and message you have in Wrangler as CSV at any time from the relevant page. You can request a copy of all data we hold about you (account + usage) by emailing privacy@wrangleros.com. We will respond within 30 days.

If you are in California, the EU, UK, or another jurisdiction with specific data subject rights, those rights apply to your data in Wrangler. Email privacy@wrangleros.com to exercise them.

All connections are encrypted in transit (TLS 1.2+). Data is encrypted at rest by our infrastructure providers (Supabase, Vercel). Row-level security policies enforce that one organization cannot read another’s data. We use the principle of least privilege for all internal access.

We have not had a security incident to date. If we did, we would notify affected customers within 72 hours, per our standard DPA.

Wrangler uses two kinds of cookies: a session cookie that keeps you logged in, and a CSRF cookie that protects form submissions. We do not use third-party advertising or analytics cookies.

We will email account owners at least 30 days before any material change. The current version always lives at this URL.

Questions, requests, complaints — privacy@wrangleros.com.