Privacy Policy

Minors

Only persons over the age of 18 may contract services through this website.

User Registration

When the User contracts a service, an associated User account is registered. The information we collect includes:

PLAY YOUR BRAND SL will block a User account where the User engages in deceptive conduct in breach of the applicable rules. User accounts are deleted where the client terminates the service, after 30 days. To delete an account, the User must request it from their User panel or by contacting us.

Data disclosed

For the connector, the only data disclosed to Anthropic PBC is what the invoked tool returns in response to a request made by the User. Depending on the tool, this may comprise data about projects, briefings, accounts, contacts, quotes, invoices, tasks, expenses and media library metadata. For Kami, the data disclosed is that of the workspace which is needed to answer the User's request, and may comprise the same categories.

This information may include personal data of third parties other than the User, in particular the name and email address of contacts belonging to client accounts, as well as the names of team members assigned to a project.

The disclosure is neither continuous nor automatic: it occurs only when the User makes a request, and is limited to the data needed to answer it. The Play Platform access token is held on PLAY YOUR BRAND SL's servers, hosted in the European Union, and is never disclosed to Anthropic PBC or exposed to the model. PLAY YOUR BRAND SL does not collect the content of the User's conversations with Claude, their chat history or their files, beyond the arguments each tool needs in order to run.

Purpose and legal basis

The data is processed for the sole purpose of carrying out the query or action requested by the User. It is not used for profiling, for advertising purposes, or for disclosure to third parties for such purposes.

In respect of the data held in the workspace, the Client is the controller and PLAY YOUR BRAND SL is the processor, under the agreement entered into pursuant to Article 28 GDPR, and it is for the Client to determine the legal basis for that processing. The User's activation of the connector constitutes a documented instruction of the controller. In respect of the User's own account data, the legal basis is the performance of the contract, under Article 6(1)(b) GDPR.

Under Anthropic PBC's commercial terms, data from its commercial products is not used by default to train its models. For the connector, that guarantee depends on the type of Claude account the User holds: consumer accounts allow their holder to authorise such use, in which case the data may be retained for up to five years in training pipelines. PLAY YOUR BRAND SL has no control over that setting, so enabling the connector is conditional on the use of an account subject to commercial terms.

International data transfers

Anthropic PBC is based in the United States of America, a third country for which no adequacy decision applies to that entity. Both features therefore involve an international transfer, covered by the Standard Contractual Clauses adopted by the European Commission in Implementing Decision (EU) 2021/914, together with the corresponding UK and Swiss addenda.

Module Two, controller to processor, applies to the connector; it is incorporated into the agreement Anthropic PBC enters into with its commercial customers, and responsibility for that instrument existing and remaining in force lies with the Client. Module Three, processor to processor, applies to Kami; it is incorporated into the agreement entered into by PLAY YOUR BRAND SL, which is answerable for that transfer to the Client. Anthropic PBC maintains a public, up-to-date list of its own sub-processors at trust.anthropic.com/subprocessors.

Retention period

Data held in Play Platform is retained for the periods set out in the "Data Retention" section of this same policy. Data disclosed to Anthropic PBC through Kami is governed by the processing agreement entered into by PLAY YOUR BRAND SL, which requires Anthropic PBC to return or delete it within thirty days of termination of the agreement, save where retention is legally required.

Data disclosed through the connector is subject to the period resulting from the agreement between the User, or their organisation, and Anthropic PBC, and from the retention settings of the account used. By way of guidance, consumer accounts apply a thirty-day period where the holder does not allow their data to be used to improve the models, and up to five years where they do. PLAY YOUR BRAND SL neither sets nor controls those periods.

Withdrawing access

The User may withdraw access at any time, either by removing the connector from their Claude client or by revoking the session from Play Platform. Withdrawal takes effect immediately and prevents any further disclosure of data, without affecting the lawfulness of processing carried out beforehand.

No automated decision-making

Neither feature takes decisions based solely on automated processing which produce legal effects concerning the User or similarly significantly affect them, within the meaning of Article 22 GDPR. In the connector, tools that modify data require the User's express confirmation before each execution, so no modification occurs without prior human intervention.

Exercising your rights

Data subjects may exercise the rights of access, rectification, erasure, restriction, objection and portability set out in Articles 15 to 22 GDPR by writing to complianz@playyourbrand.es, and may also lodge a complaint with the Spanish Data Protection Agency.

Where the data subject is a third party whose data appears in a Client's workspace — a contact belonging to a client account, for instance — the request must be addressed to that Client, who is the controller in respect of that data. PLAY YOUR BRAND SL will provide the assistance needed to answer it.