Privacy policy

1. Controller

2. What data we process and why

• Account data (name, email, hashed password, language): to give you access, verify your email and notify you. Basis: performance of the contract.
• Billing data (tax ID, company or full name and address): to issue invoices. Basis: legal obligation.
• Your material and projects (photos, videos, music, documents, ideas, scripts and conversations with the AI): to create your spots. Basis: performance of the contract.
• Technical data (IP, access and AI usage logs): for security, abuse prevention and credit accounting. Basis: legitimate interest.

3. Artificial intelligence

Your material and brief are sent to the Anthropic API (Claude), acting as processor. Anthropic does not use API data to train its models. The transfer to the United States relies on the EU-US Data Privacy Framework and/or the European Commission's standard contractual clauses.

4. Recipients

• Anthropic PBC (artificial intelligence).
• MKFactory.Manager and Stripe Payments Europe (billing and card payments: card data never goes through SpotMotional).
• Our email and hosting providers.
• Public authorities when required by law.

5. Retention

Account and project data are kept while the account is active; you can delete your projects and material at any time. Invoices are kept for the periods required by tax law. Technical logs, up to 12 months.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to info@mkfactory.com. You may also complain to the Spanish Data Protection Agency (www.aepd.es).

Last updated: 11/10/2026