Privacy policy

Last updated: 30 October 2026

Spotflow Studio is a tool for planning marketing campaigns and producing their videos with the help of AI. This policy explains which personal data we process when you use spotflowstudio.com and the app at app.spotflowstudio.com, why, who we share it with and what your rights are.

1. Data controller

• Controller: Tripticode SL
• Address: Calle Júcar, 36 - B, 41012 Seville (Spain)
• Privacy contact: support@spotflowstudio.com

2. What data we process

• Your account: email address and name. If you sign in with Google, also the name and profile picture Google shares with us. If you sign in with an email link, only your email.
• Sessions: the IP address and browser (user agent) you sign in from, and when the session expires.
• Teams (organizations): each organization's name, who belongs to it, with which role, and the invitations sent (invitee email and role).
• Marketing content you save: brands, products, analyses, strategies, campaigns, pieces, scripts, videos in code, comments, reviews, publications and metrics. It is written by you, your team or the AI assistant you connect. We do not need it to contain personal data; if it does, we only process it to provide the service.
• Voice-overs: when you generate a voice-over, we send the script text to ElevenLabs and store the resulting audio.
• Cookies: only those needed to keep you signed in. See the cookie policy.

Videos: videos are assembled and exported in your browser. The final MP4 file is not uploaded to our servers.

3. Purposes and legal basis

• Creating your account, signing you in and providing the service (saving your work, sharing it with your team, generating voices): performance of the contract you accept with the terms of use.
• Sending account emails (sign-in links and team invitations): performance of the contract. We do not send you advertising.
• Keeping the service secure and preventing abuse: legitimate interest.
• Recording your cookie choice: legal obligation.
• Complying with legal obligations (for example tax rules or requests from authorities): legal obligation.

4. Where it is stored

The database (accounts, teams and content) is in Cloudflare D1 and voice audio in Cloudflare R2, both with data located in the European Union.

5. Who we share it with

Only with the providers we need to run the service, who process the data on our behalf under contract:

• Cloudflare: hosting of the website and app, database and storage.
• Google: sign-in with your Google account, if you choose it.
• Resend: delivery of account emails.
• ElevenLabs: generating voice-overs from the script text.
• Croombit: recording your cookie choice.

If you connect an AI assistant to Spotflow Studio (for example Claude through the MCP connector), that assistant reads and writes your organization's data on your behalf. What that provider does with it is governed by your own agreement with them. You can remove the connection at any time.

We do not sell your data or share it with third parties for their advertising. We only disclose it to authorities when the law requires us to.

6. International transfers

Some of these providers are based outside the European Economic Area or may process data from there (for example in the United States). In those cases the transfer relies on the EU-US Data Privacy Framework, where the provider has joined it, or on the standard contractual clauses approved by the European Commission.

7. How long we keep it

For as long as you have an account. Sessions expire after 30 days, sign-in links after 15 minutes and invitations after 7 days. If you ask to close your account, we will delete it and, if you are the only member of an organization, its content too, except what we must keep by law for the period the law sets.

8. Your rights

You can ask to access, rectify or erase your data, restrict or object to its processing, and for portability, by writing to support@spotflowstudio.com. You can change your cookie choice at any time from the «Cookies» link in the footer. If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or your local authority.

9. Children

Spotflow Studio is a professional tool and is not aimed at anyone under 18.

10. Changes

If we change this policy we will update the date above and, if the change is significant, let you know by email or in the app.