Sharing company review sites

When someone asks WYR Enterprises, LLC to share a WYR LOOP company review site with teammates, we collect the sender's name and email address and each recipient's email address and optional name. We ask the sender to confirm permission to provide these details and request the invitations, and verify the sender's email before sending each recipient a separate review-link email through our email delivery provider.

This feature does not enroll recipients in a benefit, subscribe them to marketing, or send automated follow-ups. The invitation identifies the sender. Review sites contain demonstration content and can be viewed by anyone with the link; recipients should not treat a review link as private or as confirmation that a company has launched a program.

Authorized WYR staff can view the sender, recipients, request time, confirmation and delivery status to operate sharing and handle support or abuse. We do not use sharing records for marketing. Identifiable sharing records and associated sending jobs are scheduled for deletion after 90 days. Hashed recipient identifiers and delivery events may be retained to prevent repeated sends to suppressed addresses and support security investigations.

To delete your sharing details or stop further review invitations automatically, use the secure privacy link in your invitation. You can also reply with DELETE or STOP as the first line while retaining the original message and its secure link. If you email support@thewyrloop.com with a sharing-privacy request that cannot be verified from the reply, we may send a secure link to that address so you can confirm the action. Verification prevents someone else from deleting your details merely by claiming your email address. Stopping invitations does not cancel a membership or prevent service emails you request. Privacy-recovery link records are removed after completion or scheduled expiry within one day; minimal hashed suppression identifiers may remain. Choosing Copy review link instead lets a person share a link without supplying teammates' contact details to this feature.

For this website-sharing feature, contact WYR Enterprises, LLC, 760 Old Roswell Road, Roswell, GA 30076. This section supplements the service and membership privacy information below.

WYR Detail, LLC

Privacy at THE WYR LOOP

We keep a record of your vehicle so the person caring for it next never has to start from zero. This page explains what that record contains, who can see it, and what you can do about it.

Effective September 1, 2026 Last updated September 1, 2026 Applies to THE WYR LOOP, ITLOS, WYR Detail, WYR LOOP Fleet Care

The short version.

• We photograph your vehicle, not you. Faces and license plates are automatically obscured in every image shown anywhere in the product.
• We do not sell your personal information, and we do not use your vehicle's location to build any product. We do not build a map of where our members park.
• Our brand partners receive aggregate numbers only — never your identity, your vehicle, your photographs, or anything we observed.
• You can view your record, download it, correct it, and ask us to delete it. Section 9 explains exactly what deletion does, including the part most policies leave out.

This summary isn't the policy. The sections below are.

Who we are, and what this covers

WYR Detail, LLC is a Georgia limited liability company based in Roswell, Georgia. We operate THE WYR LOOP and the WYR family of mobile vehicle care services. In this policy, "we," "us," and "our" mean WYR Detail, LLC.

A few names you'll see

THE WYR LOOP is the service you subscribe to and the portal you sign in to. ITLOS — the In The Loop Operating System — is the software underneath it: the part that remembers your vehicle, decides which chemicals are safe on it, and briefs the next operator. WYR LOOP Fleet Care is the same platform for companies that run vehicles. The Vehicle Knowledge Record is your individual vehicle's history inside ITLOS.

This policy covers the WYR LOOP member portal and app, WYR Detail and all WYR-branded services, WYR LOOP Fleet Care and the corporate portal, the operator application, the Vehicle Knowledge Record, and our websites and messages.

It does not cover employment information about our own crew, which is handled under a separate notice, or third-party sites we link to.

Who it applies to

Most privacy policies address one person: the customer. Because a vehicle record follows a vehicle rather than a person, this one addresses several.

Photographs of your vehicle

This is the part that matters most, so it comes first.

What we capture, and why

Every service visit includes a required set of photographs, taken through the operator app at the start of the visit and again at the end. Our operators cannot skip it. It exists for four reasons:

• Safety. Knowing what coating, film, or sealant is on your paint determines which chemicals are safe on it. Getting that wrong damages vehicles.
• Honesty about condition. A documented before-and-after protects you if something happens during a service, and protects our operators from being blamed for damage that was already there.
• Continuity. The next operator sees what the last one learned instead of starting from nothing.
• Your own record. You can view it, export it, and use it — for an insurance claim, or when you sell the vehicle.

How many images, and of what, depends on the service tier you bought and the access you granted for that visit. An exterior-only membership with no key handoff produces exterior images only. Interior images are captured only when interior access is authorized for that specific visit — not merely because your plan allows interior service.

What's actually in the images

An honest photograph of a vehicle in the world contains more than the vehicle. Ours typically include your license plate. Depending on where the vehicle is parked, they may include part of your home or workplace, other vehicles, and people who happen to be nearby. Interior images may include personal items left in the car.

We don't treat that as incidental. We handle it with two copies of every image.

We don't identify people in images

We don't run facial recognition, we don't keep a database of faces, and we don't try to match a person in one image to a person in another. Face detection is used only to find a region to obscure.

If you appear in one of our images and you're not our member, you can ask us to obscure you further or remove it. Because we don't identify people in images, we'll need your help finding the right one — an approximate date, location, and vehicle.

Location and time

When an image is captured we record the time and, where available, the approximate location. We use this for one purpose: confirming the images attached to a visit were actually taken at that visit. We don't display capture location anywhere in the product, don't sell or share it, and don't use it to build any product describing where vehicles are kept.

On the operator's device

Images stay on the operator's device for up to 72 hours as a buffer, so a connectivity failure doesn't lose your record. They're encrypted there, expire automatically, and can be wiped remotely if a device is lost.

What we don't capture

• No audio recording during a service visit.
• No dash cameras, in-cabin cameras, or always-on recording of any kind.
• No connection to your vehicle's onboard diagnostics or telematics.
• No searching or cataloguing of personal items. If an operator has to move something to do the work, that's recorded as a service action — not as an observation about you.

What we collect

What you give us

• Name, email, phone, service address, and account details
• Vehicle details — make, model, year, color, and the VIN or plate if you choose to give them
• Access instructions, gate codes, parking notes, and care preferences
• Treatments and prior work you tell us about, including work done by others
• Payment information, handled by our payment processor. We don't store full card numbers.
• Anything you send us in a message, review, or support request

What gets created when we service your vehicle

This is the Vehicle Knowledge Record. Each entry records what was seen or done, by whom, and how confident we are.

• Condition observations — what an operator saw, where on the vehicle, how serious, with supporting images
• Soil level — how dirty the vehicle was on arrival. This matters more than it sounds: heavy soil hides defects, and recording it is what lets us be honest about what could and couldn't be seen at the start.
• Treatments and protection — coatings, films, sealants, their state, and the chemical restrictions they impose
• Services performed — what was done, by which operator, with which products
• Odometer — where the service tier requires it and it's visible
• Operator continuity — which named operator serviced your vehicle, and how many times

A limit worth knowing about

Our detail operators record observations and actions. They do not record diagnoses. An operator may note that a warning light was on. An operator may not record what's wrong with your engine, because a detailer isn't qualified to make that call. This is enforced in the software, not just in training.

Collected automatically

• Device type, operating system, browser, and app version
• IP address and the approximate location derived from it
• Pages and screens viewed, features used, session timing

Sensitive information

We don't intentionally collect sensitive personal information as state privacy laws define it — health information, biometric identifiers, precise location used to track a person, or information about race, religion, sexual orientation, or immigration status.

Two categories deserve a direct answer, because a photograph is an indiscriminate instrument. Faces are obscured in every image anyone can see, and we don't derive identity from them. Capture location is kept to verify capture integrity, and isn't surfaced, sold, or used to profile you. If sensitive information reaches us by accident, we use it only for the visit it came from, and you can ask us to remove it.

Interior condition notes — soil, staining, moisture, odor — describe the state of the vehicle. They are not health assessments, and we make no claim about contamination, sanitization, or disinfection anywhere in the product.

How we use it

We don't use your information to build advertising profiles, and we don't make automated decisions about you that produce legal or similarly significant effects.

When we find something on your vehicle

Sometimes a condition shows up in the end-of-service record that wasn't visible at the start. That doesn't automatically mean it happened during our service, and we don't treat it that way.

Dirt hides defects. A scratch invisible under road film before a wash is often obvious on clean paint afterward. Lighting, water, and camera angle all reveal things differently. So we keep two things separate: the observation — what was seen, when, and by whom, which never changes — and the assessment — our conclusion about how it got there, which can be revised as we learn more.

Our system can propose an assessment, but it isn't permitted to conclude on its own that we caused something. The strongest conclusion software can reach is that a condition is potentially service-related, and a human supervisor reviews it.

If we conclude that something may be or is our doing, we'll tell you before you find it yourself. We'll show you the evidence from both ends of the visit, and we'll say plainly how certain we are. If we're not sure, we'll say we're not sure rather than rounding it in either direction. You can dispute any assessment.

How we share it

With the operators who service your vehicle

Operators get a briefing scoped to the job — chemical restrictions, conditions being watched, prior evidence, and your care notes.

With companies that work for us

We use vendors for hosting, storage, image processing, payments, messaging, scheduling, analytics, and support. They act on our instructions under contract, can only use information to provide services to us, and are prohibited from selling it or using it for their own purposes.

With brand partners — aggregate only

Brand partners never receive individual records, member identities, vehicle identities, condition observations, or condition images. They receive aggregate numbers. This isn't a commercial term open to negotiation; it's enforced in the software, so a brand partner's access is structurally incapable of returning an individual observation or image.

With other service providers, in the future

We're building THE WYR LOOP so that one day other authorized providers — a glass shop, a tire provider, a mechanic — could contribute to and read from your vehicle's record with your permission. Two commitments about that, stated now: providers would contribute to the record, not own it; and a provider would receive a briefing scoped to their service, not the whole record. A tire provider would not receive your interior images.

No outside provider has access today. WYR is the only provider on the platform. We won't enable outside access without telling you first and getting the consent required at that time.

Legal and business

• When required by law, subpoena, or valid legal process
• To establish, exercise, or defend legal claims, including damage and warranty disputes
• To protect the rights, property, or safety of any person
• In a merger, acquisition, financing, or sale of assets — in which case we'll notify you, and the acquirer stays bound by this policy until it gives notice of a change

What we don't do

• We don't sell your personal information.
• We don't share it for cross-context behavioral advertising.
• We don't give your images or your vehicle's location to data brokers or insurers, or to law enforcement without valid legal process.
• We don't use your vehicle's record to market third-party products to you based on what we observed.

Fleet and company vehicles

If you drive a vehicle enrolled by your employer or a fleet operator, some things work differently and it's worth knowing which.

• The client who enrolled the vehicle — not you — decides that it's serviced and at what tier.
• That client receives condition history, service verification, and images for the vehicles it enrolled. Faces are obscured in the images they receive.
• Interior condition notes are visible to that client where interior service is contracted.
• Your employer may draw its own conclusions about vehicle use from that record. We don't assess driver conduct and don't make employment recommendations, but we can't control how a client uses information about its own assets.

Requests about information we hold for a fleet client are best directed to that client, since they decide how it's used. If you contact us directly, we'll pass your request along and tell you we did.

Cookies

Our sites and portals use cookies and similar technologies for signing you in, keeping your account secure, remembering your preferences, and understanding how the product is used.

Where required, we recognize the Global Privacy Control and equivalent universal opt-out signals as a valid opt-out for the browser sending them. You can also control cookies through your browser settings, though some features won't work without the ones needed to sign you in.

Your rights and choices

Submit a request through your portal, or by email or mail using section 16. We'll confirm your identity first, in proportion to what's being asked — releasing images takes stronger verification than sending your account details. An authorized agent can act for you with proof. We respond within 45 days, and can extend once by another 45 days for complex requests, in which case we'll tell you.

What deletion actually does

The honest answer is more complicated than "we delete everything," and a policy that overpromises is worse than one that explains.

The record underneath THE WYR LOOP is append-only. Entries aren't edited or removed, because a record that can be quietly rewritten is worthless as evidence — including as evidence in your favor. So when you ask us to delete your information, here's what happens:

• We sever the link between you and the record. The connection between your identity and the vehicle history is destroyed.
• We destroy the encryption keys for your images. The encrypted data remains in storage but can no longer be decrypted by anyone, including us.
• We delete your notes, preferences, and account information, subject to the legal minimums in section 10.
• What remains is technical history about a vehicle with your identity stripped out — for example, that a vehicle of a certain class in a certain climate had a certain coating that lasted a certain length of time.
• The deletion itself is recorded, so we can prove it happened.

We commit not to try to re-identify information once it's been through this process, we contractually prohibit our vendors from trying, and we maintain technical controls meant to prevent it.

We may decline or limit a deletion request where we're required to keep information to complete a transaction, defend a legal claim, comply with law, or where there's an open dispute about your vehicle. If we decline, we'll tell you why.

How long we keep things

We keep information for as long as it's needed for the purpose it was collected, and then for the additional period needed to defend claims and comply with law.

Security

We use administrative, technical, and physical safeguards suited to what we hold: encryption in transit and at rest, role-based access, logged access to protected originals, restricted storage kept separate from anything served to portals, device encryption and remote wipe for operator devices, and an append-only record enforced at the database so entries can't be quietly altered.

No system is perfectly secure, and we won't claim otherwise. If a breach affecting your personal information happens, we'll notify you and the relevant authorities as Georgia law and the law of your state require.

Children

THE WYR LOOP is for adults. We don't knowingly collect personal information from anyone under 18 through our accounts or portals, and we don't knowingly sell or share the personal information of anyone under 16. If we learn we've collected account information from a minor, we'll delete it.

A minor might appear in vehicle imagery in passing. Faces are obscured everywhere images are shown, and we don't identify anyone in an image. If you believe a minor appears in ours and you want it removed, contact us and we'll act promptly.

If your vehicle changes hands

You can export your vehicle's record at any time, including as a packet to hand a buyer. That packet contains your service history — worth a thought before you send it.

We don't currently transfer records between owners. If we build that, the intent is that technical history about the vehicle survives while your notes, your images, and the link to your identity do not, that the new owner starts a fresh baseline, and that both parties are notified. We'll update this policy before enabling anything like it.

State privacy rights

If you live in a state with a comprehensive consumer privacy law — including California, Colorado, Connecticut, Georgia, Texas, Virginia, and a growing number of others — you have the rights described in section 9, and you can exercise them regardless of which state you're in. We extend them to everyone.

California

In the last twelve months we've collected these categories of personal information, as the California Consumer Privacy Act defines them: identifiers; customer records; commercial information; internet and network activity; geolocation limited to capture location; audio, visual and similar information in the form of vehicle imagery; and inferences about vehicle condition and care. We disclose these to our service providers, and to a fleet client where a vehicle is enrolled by one, for the business purposes described in section 4.

We have not sold or shared personal information as the CCPA defines those terms, and we have no actual knowledge of selling or sharing the personal information of anyone under 16. California residents may also request information about disclosures for third-party direct marketing; we don't make any.

Appeals

If we deny a request, you can appeal by writing to us at the address in section 16. We'll respond within 60 days with our decision and our reasoning.

Outside the United States

THE WYR LOOP is operated in and intended for the United States.

Changes to this policy

We'll update this policy as the platform changes. When a change is significant — especially anything affecting how imagery is handled, who can see your record, how long we keep information, or whether outside providers participate — we'll tell you before it takes effect, through the portal and by email, with time to read it. The date at the top always reflects the current version, and we'll provide earlier versions on request.

Contact us

Questions, requests, complaints, and appeals all go to the same place, and a person reads them.

Privacy team

privacy@thewyrloop.com
(678) 890-5971

By mail

WYR Detail, LLC
Attn: Privacy
675 Mansell Road
Roswell, GA 30076

If you're unhappy with how we respond, you can contact the Georgia Attorney General's Consumer Protection Division or the Attorney General in your state. California residents may also contact the California Privacy Protection Agency.

THE WYR LOOP is operated by WYR Detail, LLC, Roswell, Georgia.