Privacy Policy

Data controller

• Identity: WE CREATE OPPORTUNITY & SOLUTIONS LLC
• Email: wecreative.site@gmail.com
• Website: wecreative.site

Data we collect and why

Through the contact form we collect the personal data set out below.

• Name
• Company (optional)
• Email address
• Estimated budget (optional)
• Project description

This data is used solely to respond to your enquiry, prepare a commercial proposal and manage the pre-contractual or contractual relationship with the user.

Legal basis for processing

Processing is based on the consent of the data subject, given when submitting the contact form (art. 6.1.a GDPR). In the case of an ongoing contractual relationship, the legal basis is the performance of the contract (art. 6.1.b GDPR).

Retention period

Data will be kept for as long as a legitimate commercial interest exists or until the data subject requests its deletion. Once the relationship has ended, it will be blocked for the applicable legal periods and deleted once those have elapsed.

Recipients

We do not transfer your data to third parties except where legally required. Form data is handled through WPForms and stored on the Site server (Hostinger). Contact form data is not transferred outside the European Economic Area. The WeAudit and Review Agent services use the providers listed in their own sections.

Rights of the data subject

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by sending an email to wecreative.site@gmail.com with the subject "Derechos RGPD". You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).

Security

We apply appropriate technical and organisational measures to protect your data, including SSL/TLS encryption on all communications with the Site.

WeAudit and Google user data

When you connect a Google Business Profile listing to WeAudit, our audit and publishing platform for agencies, Google grants us access with the business.manage scope, and we receive:

• an access token for your Google account;
• the list of accounts and locations it manages;
• the email address of the account you connect with.

How we use it: only to list your locations when you connect them and to publish, on the location you choose, the posts your agency has approved in WeAudit. The email is used to show in WeAudit which account the listing was connected with.

How we store it: the token is stored encrypted (AES-256-GCM), bound to that client's website, on servers in the European Union. We never store your Google password: we never see it.

Who we share it with: no one. We do not sell Google user data, we do not use it for advertising or to train artificial intelligence models, and it is only accessed by We Creative staff when needed to support you or when required by law.

How to revoke it: from https://myaccount.google.com/permissions or by asking wecreative.site@gmail.com. Once revoked, WeAudit can no longer publish on your listing. If you ask us to delete it, we delete the stored token.

Limited Use: WeAudit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Google API Services User Data Policy
• Revoke access in your Google account

Review Agent: reviews, Google and WhatsApp

Review Agent is our review response service for businesses. When a business signs up and connects its Google Business Profile listing, we process:

• the public reviews of that listing: the author’s display name, rating, text and date;
• a Google access token used to read those reviews and publish the replies, stored encrypted (AES-256-GCM);
• the WhatsApp number and email address the business gives us to receive notifications;
• the messages that person sends to our WhatsApp number to approve, change or discard a reply.

What we use them for: only to prepare a suggested reply to each review, notify the business and publish the reply the business approves. We do not send advertising over WhatsApp or use the number for any other purpose.

Who is involved: notifications are sent through Meta’s WhatsApp Business API, and suggested replies are drafted with the Anthropic API, to which the text of the review is sent. Both providers may process data in the United States.

How to opt out: by writing to wecreative.site@gmail.com. When a business opts out we stop reading the listing and delete the token and the contact number.