Legal

Privacy Policy

Last updated: May 2026

1. Data controller

ControllerIker Arnaiz Gallego
CountrySpain

2. Data we collect

Depending on the services you use, we may process the following categories of personal data:

Registration data
First name, last name, email address and encrypted password when creating an account.
Professional profile data
City, specialty, languages, photographs, showreel and autotape videos, credits and professional experience.
Subscription and payment data
Subscribed plan, invoice history. Card details are handled entirely by Stripe and are never stored by Arga Studios.
Usage data
Profile visits, interactions with the directory, castings applied to and showreel viewing statistics.
Technical data
IP address, browser type, operating system and pages visited, collected automatically while browsing.

3. Purposes and legal basis

Purpose Legal basis
Account management and service provision Performance of the contract (Art. 6.1.b GDPR)
Displaying the public profile in the directory Performance of the contract / consent
AI bio generation (Claude API) Performance of the contract / legitimate interest
Sending service alerts and communications Legitimate interest / consent
Usage statistics and platform improvement Legitimate interest (Art. 6.1.f GDPR)
Compliance with legal obligations Legal obligation (Art. 6.1.c GDPR)

4. Retention period

We keep your data for as long as you maintain an active account on Arga Studios. After cancellation, the data is blocked and retained for the legally required periods (generally 5 years for billing data) and is permanently deleted once that period has elapsed.

5. Recipients and international transfers

Arga Studios may share your data with the following processors, always under appropriate safeguard agreements:

  • Stripe Inc. — payment processing (USA, standard contractual clauses).
  • Supabase Inc. — data storage and authentication (USA, standard contractual clauses).
  • Anthropic PBC — AI bio generation via API (USA, standard contractual clauses).

We do not sell or share your personal data with third parties for advertising purposes.

6. Your rights

You may exercise the following rights at any time by writing to [email protected]:

Access
Find out what data we process about you.
Rectification
Correct inaccurate or incomplete data.
Erasure
Request the deletion of your data.
Portability
Receive your data in a structured format.
Objection
Object to certain processing activities.
Restriction
Restrict processing in certain cases.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe that the processing of your data does not comply with the regulations.

7. Security

Arga Studios applies appropriate technical and organizational measures to protect your data against unauthorized access, accidental loss or destruction, including encrypted connections (HTTPS/TLS), passwords encrypted with bcrypt and restricted staff access to the data.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on the platform. The current version will always be available on this page.

Legal Notice Cookie Policy ← Back to home