Privacy notice

[to be filled in] ([to be filled in]), [to be filled in], [to be filled in], [to be filled in]

Email: [to be filled in]

Account: email address, name if given, language, sign-in times. Basis: contract (Art. 6(1)(b) GDPR).

Company profile and projects: what you write about your business, scripts, prompts, generated images, clips, videos, subtitles, campaign copy and comments.

Billing: invoice address, VAT id, payment data at Stripe, credit movements. Basis: contract and legal retention (Art. 6(1)(c)).

Technical: server logs, error reports, usage counters without content. Basis: legitimate interest in a working service (Art. 6(1)(f)).

When you upload photos with recognisable people, you confirm at upload time that you have their consent. That responsibility is yours; we store the confirmation next to the image.

During setup we ask for your company profile (industry, offer, target customer, tone, languages, website) and, optionally, what you want to create, which channels your company uses, how many of you there are, your role and how you heard about us. We use the profile, what you want to create and the channels to tailor your creations and your dashboard (Art. 6(1)(b) GDPR). Your role, team size and how you found us are only analysed in aggregate for our own marketing, based on your voluntary answer (Art. 6(1)(a) GDPR); we do not pass them on. You can change or delete all of it under Settings → Company at any time; it is deleted with your account.

When you write to us through "Book a conversation", we store your name, email, company, phone number (if given) and your request, and send them to our team by email to answer you. Basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR). We delete the request with your account, and after 12 months at the latest.

If you book a time directly on our "Book a conversation" page, our booking page on Calendly opens in a new tab. Our own pages load nothing from Calendly; your browser only connects to Calendly when you click.

There you enter what the booking needs, such as your name, email address, the time you pick and your answers to the booking questions. Calendly stores this and passes it on to us so we can hold the video call with you. The purpose is arranging the appointment. Basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR).

The provider is Calendly LLC in the USA. It is certified under the EU-US Data Privacy Framework, and we have concluded a data processing agreement with it. What Calendly collects on its own page beyond that, for example through cookies, is explained in Calendly's privacy notice.

If a call does not lead to an order, we delete the booking after 12 months at the latest.

To improve Raíces we analyse how the product is used - in the browser as well as through the API, connected AI programs (MCP), the agent and the Blender add-on: which pages are viewed, which page or campaign someone comes from (source, type and name of the campaign from the link; for ads only that it was an ad click), device type, browser, operating system, language, the country (from the browser's time zone, otherwise from the language setting, never from the IP address), how long a page is visible and in use, and which features are used - for example "clip created", never the content of your prompts or files. When you are signed in we link this to your account and workspace. Per workspace we also analyse what was generated, used and bought (from our order and billing data) and how it found us.

We set no cookie of our own for this and store nothing on your device; when you are signed in we recognise you by your sign-in cookie. The script reads the time zone and the referring page (only its address, not the page) for this. We do not store your IP address: from it, the browser identifier and a random value that changes daily we form a checksum that is valid for that day only; the random value is deleted after two days. When you request a sign-in link for a new account we keep a keyed hash (HMAC) of your email address for seven days, to link the sign-up to the visit. If your browser sends the "Global Privacy Control" signal, we record nothing.

The basis is our legitimate interest in understanding and improving our service (Art. 6(1)(f) GDPR). Only we see the analysis. Weekly and on demand we have Claude (Anthropic) analyse the figures; no names of people are sent, workspaces only under a pseudonym with their figures. Where visitors came from is sent as the referring site's domain, which can be a company's website.

We delete raw data after 14 months; after that, daily totals remain with no link to any person. Where a workspace came from stays with it; the link to the person, the visit and the exact time goes after 14 months. Analyses are kept as long, the record of who viewed the analytics for two years. You can object at any time (Art. 21 GDPR) - under Settings → Privacy with one click, or by email to [to be filled in]. We then record nothing more about you; what was already recorded is separated from your account (no person, workspace or exact time), and your workspace no longer appears on its own in the analysis.

Your prompts and reference images go to the model provider running that job. Before every generation you see which model it is and what it costs.

Railway Corporation — Servers, database and media storage (the media storage runs on Tigris Data, Inc.) — USA; servers in the EU region Amsterdam (Netherlands) — All content and accounts

Stripe Payments Europe, Ltd. — Payments, invoices, tax calculation — Ireland (EU), group in the USA — Name, address, VAT id, payment data

Resend — Sign-in links and system messages — EU region — Email address

Anthropic Ireland, Limited (Claude) — Text models for the AI director (script, look, campaign and shot planning), the agent and the content check; analysis of our usage figures (weekly and on demand) — Ireland (EU), processing in the USA — Company profile, scripts, prompts and pictures the model is to look at (such as stills for the director); for the analysis, usage figures, workspaces only under a pseudonym

Google Cloud (Vertex AI, EU-Region) — Standard voice and a video model — EU (europe-west4) — The text to be spoken; for the video model, prompts and reference images

fal.ai (Features & Labels, Inc.) — Image, video and 3D models, lip sync, music, upscaling — USA — Prompts and reference images; for lip sync, the clip and the voice

Higgsfield Inc. — Image and video models — USA — Prompts and reference images

ElevenLabs Inc. — Text to speech — USA — The text to be spoken

OpenAI Ireland Ltd. — Image model — Ireland (EU), group in the USA — Prompts and reference images

Sentry (EU) — Error reports — EU — Technical error data, no content

For providers in the USA the EU-US Data Privacy Framework applies where the provider is certified under it (Railway, for one); in addition, and otherwise, we rely on the European Commission's standard contractual clauses.

Projects and media stay until you delete them. If you delete your account we mark everything deleted at once; after 30 days the rows and files are removed for good.

Invoices are kept for ten years. Tax law requires it and it overrides a deletion request.

Access, rectification, erasure, restriction, portability and objection. Two of them you exercise yourself, immediately: under Settings → Privacy you download all your data as a file and delete your account.

For anything else an email to [to be filled in] is enough. You may also complain to a data protection authority.

One cookie for your session, one for the workspace you last picked. No ad networks and no cookie banner, because there is nothing to consent to; our own usage analytics (above) work without cookies.