Privacy policy

The controller of the data described in this policy is Cubotic, LLC, with registered address at 3940 NW 79th Ave, Apt 744, Doral, FL 33166, USA, owner of the Wriggs brand and website (https://wriggs.com). You can contact us about any privacy matter at hi@wriggs.com.

We process only the data necessary to provide the service. We distinguish three situations:

• Businesses to which we propose a video. Public information from the business listing (trade name, category, public address, phone number and website, opening hours, average rating, excerpts from public reviews and the public profile photos). We obtain it from public sources accessible to any user (Google Maps) and use it exclusively to prepare the proposal addressed to that business. We do not process the names of the people who write the reviews; at most, a first name may appear in the excerpts.
• Visitors to the private proposal pages. When the personalised link of a teaser is opened we record the date, the browser type and a code derived from the IP address (a salted hash, from which the IP cannot be recovered) to count opens and prevent abuse. We do not use tracking or advertising cookies on those pages.
• Customers who buy a video. Name, email address and purchase amount, which Stripe sends us when confirming the payment. Card details are processed exclusively by Stripe; they never reach our systems. If the Customer decides to enhance their video, we also process the photos and logo they voluntarily provide.

Our own team accesses an administration panel through an account with a password or an email access link; that session uses a strictly necessary technical cookie. The language preference of the public website is stored in a technical cookie (NEXT_LOCALE).

• Preparing and showing the commercial proposal (brief, script and teaser) to a specific business: legitimate interest in business-to-business prospecting (art. 6.1.f GDPR and art. 21 of the Spanish LSSI), limited to public professional data and with a simple, free means of objection in every communication.
• Processing the purchase and delivering the video: performance of the contract (art. 6.1.b GDPR) and compliance with tax and accounting obligations (art. 6.1.c).
• Measuring opens and preventing abuse on the proposal pages: legitimate interest in security and in understanding how the service performs.
• Handling your requests (questions, refunds, exercise of rights): performance of the contract or legal obligation, as applicable.

We do not make automated decisions with legal effects on individuals, nor do we profile private individuals.

Texts (brief, script, proposal email) are generated with generative text, image and video models from the public information of the business. The images in the video start from the public photos on the business’s Google profile, which are enhanced and animated with these models without inventing elements or text; no third-party photos are used and no identifiable real people are generated. Generated content may contain inaccuracies and is identified as a proposal.

To provide the service we rely on providers that act on our behalf and only under our instructions:

• Stripe (payment processing, issuing receipts). Stripe is an independent controller of payment data under its own policy.
• Vercel (website hosting and application execution).
• Supabase (database and team authentication).
• Cloudflare (storage of generated images and videos).
• Apify (retrieval of the public information of the business listing).
• Anthropic and Higgsfield (generative models for text, image and video) and ElevenLabs (voice-over for the Premium plan).
• Resend (transactional emails after purchase).

Some of these providers are established in the United States or other countries outside the European Economic Area. Transfers are covered by the EU-US Data Privacy Framework or by the European Commission’s standard contractual clauses, depending on the provider. We do not sell personal data or share it with third parties for advertising purposes.

• Prospecting data (listing, brief, teaser): while the proposal is active and, at most, 12 months from its creation if there is no purchase.
• Opt-out requests (“do not contact”): indefinitely, for the sole purpose of honouring them in the future.
• Customer and purchase data: for the duration of the relationship and the applicable statutory tax and accounting retention periods.
• Open records: 12 months.

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw any consent you may have given, by writing to hi@wriggs.com and indicating the business or the email your request refers to. We will reply within one month at most. If you believe we have not handled your request correctly, you can lodge a complaint with the supervisory authority of your country; in Spain, the Spanish Data Protection Agency (www.aepd.es).

To stop receiving commercial proposals you do not need to write to us: every teaser page includes an immediate opt-out link. You can also reply “UNSUBSCRIBE” to the email you received.

We apply reasonable technical and organisational measures: encryption in transit (HTTPS), panel access restricted to authorised accounts, expiring download links, storage with providers holding recognised security certifications and recording of payment transactions exclusively through Stripe.

We will publish any relevant change on this page, with its update date. Please also see our terms of service and the refund policy.