{"id":6056,"date":"2022-03-06T19:30:51","date_gmt":"2022-03-06T18:30:51","guid":{"rendered":"https:\/\/www.tribalbi.com\/?page_id=6056"},"modified":"2026-10-02T16:30:00","modified_gmt":"2026-10-02T14:30:00","slug":"politica-de-privacidad","status":"publish","type":"page","link":"https:\/\/www.tribalbi.com\/en\/politica-de-privacidad\/","title":{"rendered":"Pol\u00edtica de privacidad"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

TRIBALBI PLATFORM<\/strong><\/h3>

Last updated: 02\/10\/2026<\/p>

\u00a0<\/p>

QUOTE<\/h4>

This is a translation of the Spanish original. If the two versions differ, the Spanish version prevails, since the data controller is established in Spain and the competent supervisory authority is the Spanish Data Protection Agency (AEPD).<\/p>


Who we are<\/h4>

For anything concerning your data, write to tribalbi@tribalbi.com.<\/p>


First, the thing people usually worry about<\/h4>

We do not hold your photographs, your voice, or any audiovisual material of you.<\/p>

TRIBALBI handles contracts: who authorises what, to whom, for how long and for which uses. The images and the AI-generated material live in the brand’s systems, not in ours. What we hold is the contract setting out what the brand may do with them, and the proof that the contract has not been altered.<\/p>

Put plainly: we do not process biometric data. The brand does, in its own systems
and under its own responsibility.<\/p>


What we process<\/h4>

From everyone using the platform<\/strong><\/h6>

Name, email address, phone number, country and role: agency, talent or brand.<\/p>

Depending on your role in the contract<\/strong><\/h6>

For an image rights agreement to identify the parties, we need, as applicable:<\/p>

  • Talent: national ID or passport number, date of birth, nationality and home
    address.<\/li>
  • Agency: company tax ID and registered address.<\/li>
  • Brand: company tax ID, legal representative and registered address.

    <\/li><\/ul>

    We ask for a full address because without complete identification of the parties a contract loses much of its value and makes any later claim harder to bring. It is not an optional extra: it is what makes the document work.<\/p>

    From the contract<\/strong><\/h6>

    The terms you agree: fees, authorised AI uses, territory, duration, channels and restrictions.<\/p>

    From the signature<\/strong><\/h6>

    The image of your handwritten signature, the IP address you signed from, your browser, the exact date and time, and the method you authenticated with.<\/p>

    That last part is what makes a signature hard to deny later. It protects the person signing more than anyone else.<\/p>

    From the payment<\/strong><\/h6>

    You enter your card details directly into Stripe. We never see or store them. We only receive confirmation that the payment went through.<\/p>


    Why we are allowed to<\/h4>
    • To run your account and the contracts: performance of a contract (Art. 6(1)(b) GDPR).<\/li>
    • To keep proof of signature and an audit trail: legitimate interest in a valid signature and a secure service (Art. 6(1)(f) GDPR).<\/li>
    • To keep contracts after an account is closed: establishment and defence of legal claims (Art. 17(3)(e) GDPR).<\/li>
    • To meet tax and accounting obligations: legal obligation (Art. 6(1)(c) GDPR).

      <\/li><\/ul>

      Consent to the AI use of your image is not given to us: you give it to the brand, inside the contract. We record it and evidence the date.<\/p>


      Who else sees your data<\/h4>

      The other parties to the contract, but only what concerns them<\/strong><\/h6>

      Not everyone sees the same thing:<\/p>

      • The brand does not see your ID number, date of birth, nationality, phone number or home address.<\/li>
      • The talent does not see the brand’s tax ID, legal representative or registered address.<\/li>
      • Nobody sees the agency’s commercial margin.

        <\/li><\/ul>

        This filtering happens on our servers, not in your browser, so it cannot be bypassed by tampering with the page.

        <\/p>

        Providers that serve us<\/h4>
        • Supabase \u2014 database and file storage.<\/li>
        • Resend \u2014 sending emails.<\/li>
        • Stripe \u2014 collecting the platform fee.<\/li>
        • Alchemy \u2014 access to the Polygon network.<\/li>
        • Vercel \u2014 website hosting.

          <\/li><\/ul>

          We have the Article 28 processor agreement in place with all of them.

          <\/p>

          Your data is stored in the European Union<\/h4>

          Our database is hosted on European territory, so your account, your contracts, your signature and the PDFs do not leave the European Economic Area.<\/p>

          Some specific, limited data does leave the EU: the name and email needed to send you notifications (Resend), payment data (Stripe) and web hosting connection data (Vercel). Those transfers are covered by the Standard Contractual Clauses approved by the European Commission and, where applicable, by the EU-US Data Privacy Framework.<\/p>

          Our blockchain access provider, Alchemy, receives no personal data of yours at all: only digital fingerprints.

          <\/p>

          One point about Stripe<\/h4>

          Stripe does not process payment data solely on our instructions: it also decides for itself how to process it in order to meet its own fraud-prevention and anti-money-laundering obligations. In that respect it acts as an independent controller and is governed by its own privacy policy.<\/p>


          The blockchain: read this before you sign<\/h4>

          Once all three parties have signed, we publish a digital fingerprint of the contract on the Polygon network: a value called a hash, a string of characters calculated from the document.<\/p>

          No personal data is published on the blockchain. No names, no amounts, no terms. Only that fingerprint, from which the document cannot be reconstructed. It serves one purpose: comparison. If anyone alters so much as a comma, the fingerprint stops matching and the tampering becomes visible.<\/p>

          What you need to know is that this is permanent. Once written, nobody can erase it: not you, not us, not a court. That is how the technology works. It is precisely why we made sure that the only thing reaching it is the fingerprint, never your data.<\/p>

          The same applies to withdrawal of consent: we record the fingerprint of an entry containing the date, but the reason you write is never published. Only the parties to the contract see it.<\/p>


          How long we keep it<\/h4>

          Your account, for as long as you want it. You can delete it whenever you like.<\/p>

          Signed contracts, six years from the end of the contract. This part deserves a proper explanation:<\/p>

          Deleting your account does not delete your contracts, and that is deliberate. A contract signed by three people cannot vanish because one of them closes their account: it would leave the other two without proof of an agreement that is still in force. But above all, it would leave you without proof if<\/em>
          someone one day uses your image beyond what you authorised. The contract is your defence, which is why we keep it even after you leave. Article 17(3)(e) GDPR expressly provides for this exception, covering data needed to defend legal claims.<\/em><\/pre>
          What we do delete when you close your account is the profile data that is not part of any contract.<\/p>

          Your rights<\/h4>
          You may exercise your rights of access, rectification, erasure, objection, restriction and portability at any time by writing to tribalbi@tribalbi.com.<\/p>
          You can also withdraw your consent to the AI use of your image, from your dashboard, at any time. Before you do, we explain what it means:<\/p>
          • It is not retroactive. What was published before was published lawfully.<\/li>
          • What you are owed is still owed. Withdrawing does not waive compensation for work already done.<\/li>
          • It may give rise to liability if you withdraw outside an agreed penalty-free window, under Article 2.3 of Spanish Organic Law 1\/1982.

            <\/li><\/ul>
            The date of withdrawal is anchored on the blockchain, so you can prove it without depending on us.<\/p>
            If you believe we have not handled your rights properly, you may complain to the Spanish Data Protection Agency at www.aepd.es.<\/p>

            What our role is<\/h4>
            It is worth being clear: TRIBALBI is not a party to the contract. We do not licence your image, we do not use it, and we take no part in what you agree.<\/p>
            What we do is provide the tool to sign, and certify that the signed document is the original and that nobody has altered it since. If a dispute arises between the parties, they must resolve it between themselves or before the courts; we can supply technical proof of what was signed and when, but we do not decide who is right.<\/p>

            Changes<\/h4>
            If we change this policy we will tell you by email, with reasonable notice.<\/p>
            \u00a0<\/p>
            EN:<\/strong> The Spanish version of this policy prevails in case of discrepancy.<\/em><\/h6>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"
            TRIBALBI PLATFORM Last updated: 02\/10\/2026 \u00a0 QUOTE This is a translation of the Spanish original. If the two versions differ, the Spanish version prevails, since the data controller is established in Spain and the competent supervisory authority is the Spanish Data Protection Agency (AEPD). Who we are For anything concerning your data, write to tribalbi@tribalbi.com. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-6056","page","type-page","status-publish","hentry"],"yoast_head":"\nPol\u00edtica de privacidad - TRIBALBI<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.tribalbi.com\/en\/politica-de-privacidad\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Pol\u00edtica de privacidad - TRIBALBI\" \/>\n<meta property=\"og:description\" content=\"TRIBALBI PLATFORM Last updated: 02\/10\/2026 \u00a0 QUOTE This is a translation of the Spanish original. If the two versions differ, the Spanish version prevails, since the data controller is established in Spain and the competent supervisory authority is the Spanish Data Protection Agency (AEPD). Who we are For anything concerning your data, write to tribalbi@tribalbi.com. […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.tribalbi.com\/en\/politica-de-privacidad\/\" \/>\n<meta property=\"og:site_name\" content=\"TRIBALBI\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-02T14:30:00+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.tribalbi.com\\\/en\\\/politica-de-privacidad\\\/\",\"url\":\"https:\\\/\\\/www.tribalbi.com\\\/en\\\/politica-de-privacidad\\\/\",\"name\":\"Pol\u00edtica de privacidad - TRIBALBI\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.tribalbi.com\\\/en\\\/#website\"},\"datePublished\":\"2022-03-06T18:30:51+00:00\",\"dateModified\":\"2026-10-02T14:30:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.tribalbi.com\\\/en\\\/politica-de-privacidad\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.tribalbi.com\\\/en\\\/politica-de-privacidad\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.tribalbi.com\\\/en\\\/politica-de-privacidad\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.tribalbi.com\\\/en\\\/home-2\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Pol\u00edtica de privacidad\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.tribalbi.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.tribalbi.com\\\/en\\\/\",\"name\":\"TRIBALBI\",\"description\":\"Digital licenses for real models and influencers\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.tribalbi.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.tribalbi.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.tribalbi.com\\\/en\\\/#organization\",\"name\":\"TRIBALBI\",\"url\":\"https:\\\/\\\/www.tribalbi.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.tribalbi.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.tribalbi.com\\\/wp-content\\\/uploads\\\/2022\\\/03\\\/Logo_Tribalbi_fonstransparent_2.png\",\"contentUrl\":\"https:\\\/\\\/www.tribalbi.com\\\/wp-content\\\/uploads\\\/2022\\\/03\\\/Logo_Tribalbi_fonstransparent_2.png\",\"width\":300,\"height\":100,\"caption\":\"TRIBALBI\"},\"image\":{\"@id\":\"https:\\\/\\\/www.tribalbi.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Pol\u00edtica de privacidad - TRIBALBI","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.tribalbi.com\/en\/politica-de-privacidad\/","og_locale":"en_US","og_type":"article","og_title":"Pol\u00edtica de privacidad - TRIBALBI","og_description":"TRIBALBI PLATFORM Last updated: 02\/10\/2026 \u00a0 QUOTE This is a translation of the Spanish original. If the two versions differ, the Spanish version prevails, since the data controller is established in Spain and the competent supervisory authority is the Spanish Data Protection Agency (AEPD). Who we are For anything concerning your data, write to tribalbi@tribalbi.com. […]","og_url":"https:\/\/www.tribalbi.com\/en\/politica-de-privacidad\/","og_site_name":"TRIBALBI","article_modified_time":"2026-10-02T14:30:00+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.tribalbi.com\/en\/politica-de-privacidad\/","url":"https:\/\/www.tribalbi.com\/en\/politica-de-privacidad\/","name":"Pol\u00edtica de privacidad - TRIBALBI","isPartOf":{"@id":"https:\/\/www.tribalbi.com\/en\/#website"},"datePublished":"2022-03-06T18:30:51+00:00","dateModified":"2026-10-02T14:30:00+00:00","breadcrumb":{"@id":"https:\/\/www.tribalbi.com\/en\/politica-de-privacidad\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.tribalbi.com\/en\/politica-de-privacidad\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.tribalbi.com\/en\/politica-de-privacidad\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.tribalbi.com\/en\/home-2\/"},{"@type":"ListItem","position":2,"name":"Pol\u00edtica de privacidad"}]},{"@type":"WebSite","@id":"https:\/\/www.tribalbi.com\/en\/#website","url":"https:\/\/www.tribalbi.com\/en\/","name":"TRIBALBI","description":"Digital licenses for real models and influencers","publisher":{"@id":"https:\/\/www.tribalbi.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.tribalbi.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.tribalbi.com\/en\/#organization","name":"TRIBALBI","url":"https:\/\/www.tribalbi.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.tribalbi.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.tribalbi.com\/wp-content\/uploads\/2022\/03\/Logo_Tribalbi_fonstransparent_2.png","contentUrl":"https:\/\/www.tribalbi.com\/wp-content\/uploads\/2022\/03\/Logo_Tribalbi_fonstransparent_2.png","width":300,"height":100,"caption":"TRIBALBI"},"image":{"@id":"https:\/\/www.tribalbi.com\/en\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.tribalbi.com\/en\/wp-json\/wp\/v2\/pages\/6056","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tribalbi.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.tribalbi.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.tribalbi.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tribalbi.com\/en\/wp-json\/wp\/v2\/comments?post=6056"}],"version-history":[{"count":29,"href":"https:\/\/www.tribalbi.com\/en\/wp-json\/wp\/v2\/pages\/6056\/revisions"}],"predecessor-version":[{"id":14341,"href":"https:\/\/www.tribalbi.com\/en\/wp-json\/wp\/v2\/pages\/6056\/revisions\/14341"}],"wp:attachment":[{"href":"https:\/\/www.tribalbi.com\/en\/wp-json\/wp\/v2\/media?parent=6056"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}