Privacy Policy

Bay Media AI is a trading name of Bay Radio SL (the "Company", "we", "us", "our"), a company incorporated in Spain. We are the data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law on Personal Data Protection (LOPDGDD).

For any privacy enquiry contact us at hello@baymedia.ai.

• Contact data you provide via forms (name, email, company, phone, project brief).
• Project content you share with us (briefs, scripts, images, voice samples, video footage, brand assets).
• Account data if you sign in (email, hashed password, role).
• Usage data collected automatically (IP address, device, browser, pages visited, referrers).
• Cookies and similar technologies — see our cookie banner for granular control.

• To respond to enquiries and deliver the services you request.
• To produce, render, edit, and deliver AI-generated and AI-assisted video, audio, and image content.
• To manage contracts, invoicing, and statutory accounting.
• To improve our website, services, and AI production pipeline.
• To comply with legal obligations.

We use third-party and proprietary AI models to produce your content. Material you submit (including likenesses, voices, and brand assets) may be processed by these models solely to deliver your project. We do not authorise sub-processors to use your content to train their public foundation models, and we only work with providers that offer a no-training, zero-retention configuration where available.

• Contract — to provide services you have requested.
• Consent — for non-essential cookies and marketing.
• Legitimate interests — to secure and improve our services.
• Legal obligation — for tax, accounting, and compliance.

We share data only with vetted sub-processors required to run our business: cloud hosting, AI model providers, email delivery, analytics, payments, and professional advisors. All processors are bound by written data-processing agreements.

Some processors are located outside the EEA. Where they are, we rely on EU Standard Contractual Clauses and supplementary technical measures to safeguard your data.

We keep personal data only as long as needed for the purposes above. Contractual records are kept for the statutory retention period under Spanish law (typically 6 years for accounting). Project files are retained for up to 24 months after delivery unless you ask us to delete them sooner.

Under GDPR you have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. You also have the right to lodge a complaint with the Spanish supervisory authority (Agencia Española de Protección de Datos, www.aepd.es).

To exercise any right, email hello@baymedia.ai.

We apply appropriate technical and organisational measures including encryption in transit, access controls, and least- privilege admin access. No system is perfectly secure; we disclose qualifying breaches within 72 hours as required by law.

We may update this policy from time to time. Material changes will be flagged on this page with a new "last updated" date.