Privacy
Policy.

Wrayven is an AI cinematic production agency operated by McKinnon Marketing LLC, a Texas limited liability company. For purposes of applicable privacy law, McKinnon Marketing LLC doing business as Wrayven is the data controller for personal information collected through this website and through our client and partner engagement process.

Data controller contact:
McKinnon Marketing LLC doing business as Wrayven
Email: pitch@wrayven.com
Website: wrayven.com

For privacy-specific inquiries including data access requests, deletion requests, and complaints, contact us at pitch@wrayven.com with the subject line "Privacy Request." We will respond within the timeframes required by applicable law and no later than 30 days from receipt.

We collect only the personal information necessary to operate our business and deliver our services. We do not collect sensitive personal information such as health data, financial account credentials, government identification numbers, or biometric data.

We do not use cookies, tracking pixels, session recording tools, or behavioral advertising on this website. We do not collect analytics data beyond what may be provided by our website host. If this changes, this policy will be updated before any new data collection begins.

We process personal information for the following purposes and on the following legal bases:

We do not use personal information for automated decision-making or profiling. We do not use personal information for marketing purposes beyond direct project and partnership communications initiated by the individual.

Personal information is stored within the Zoho One platform, which provides encrypted storage and access controls. Email correspondence is stored within Wrayven's Zoho Mail account. Project files and brief documents are stored within Zoho's cloud infrastructure. Payment records are maintained within Zoho Invoice.

Access to personal information is limited to Wrayven personnel directly involved in the relevant client engagement. We do not grant broad internal access to client data beyond what is operationally necessary.

Zoho's data centers are located in the United States. If you are located in the United Kingdom, your personal information is transferred to the United States for processing and storage. This transfer is made on the basis of standard contractual clauses and Zoho's compliance with applicable international data transfer frameworks. Details of Zoho's data transfer mechanisms are available in Zoho's privacy policy at zoho.com/privacy.html.

We implement reasonable technical and organizational measures to protect personal information against unauthorized access, loss, or disclosure. No data transmission or storage system is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

We retain personal information only for as long as necessary to fulfill the purposes described in this policy and to comply with applicable legal obligations.

When the retention period expires, personal information is deleted or anonymized. Legal hold obligations may extend retention periods where data is relevant to pending or reasonably anticipated legal proceedings.

We do not sell personal information. We do not share personal information with advertisers, data brokers, or marketing platforms.

We share personal information only in the following limited circumstances:

• Service providers. Zoho Corporation provides our business platform including email, CRM, invoicing, and file storage. Zoho processes personal information on our behalf as a data processor under Zoho's data processing agreement. Zoho is subject to its own privacy policy and applicable data protection law.
• AI production tools. Project brief data and reference images may be processed by Higgsfield, Adobe Firefly, and Claude as part of the production process. Clients are informed of this and provide written acknowledgment before any brief data is submitted to these tools. Each tool is subject to its own terms and privacy policy. Wrayven does not share client contact information with AI tool providers.
• Legal and regulatory requirements. We may disclose personal information where required by law, regulation, court order, or governmental authority. Where legally permitted, we will notify the affected individual before complying with such a request.
• Protection of rights. We may disclose personal information where necessary to protect the rights, property, or safety of Wrayven, our clients, or the public, including in connection with fraud prevention or enforcement of our Terms of Service.
• Business transfers. If Wrayven or McKinnon Marketing LLC is involved in a merger, acquisition, or sale of all or substantially all of its assets, personal information may be transferred as part of that transaction. We will notify affected individuals before personal information becomes subject to a materially different privacy policy.

US privacy law varies by state. As a Texas-based company primarily serving business clients rather than consumers, many US consumer privacy statutes do not directly apply to Wrayven's core operations. However, Wrayven respects the following rights for all individuals whose personal information we hold:

• Right to know. You may request a description of the categories and specific pieces of personal information we hold about you.
• Right to correct. You may request correction of inaccurate personal information.
• Right to delete. You may request deletion of personal information we hold about you, subject to our legal retention obligations and legitimate business interests such as active contract performance and legal claims.
• Right to opt out of sale. We do not sell personal information. This right is satisfied by default.

To exercise any of these rights, contact us at pitch@wrayven.com with the subject line "Privacy Request." We will respond within 30 days.

Under PIPEDA and applicable provincial law, Canadian residents have the following rights with respect to personal information Wrayven holds about them:

• Right of access. You may request access to the personal information we hold about you and information about how it has been used and disclosed.
• Right to correction. You may challenge the accuracy or completeness of personal information and request that it be corrected, amended, or deleted as appropriate.
• Right to withdraw consent. Where our processing is based on consent, you may withdraw consent at any time, subject to legal and contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide services to you.
• Right to complain. You have the right to complain to the Office of the Privacy Commissioner of Canada if you believe we have not handled your personal information in compliance with PIPEDA. Contact information for the OPC is available at priv.gc.ca.

Wrayven's designated privacy contact for PIPEDA purposes is reachable at pitch@wrayven.com with the subject line "Privacy Request — Canada." We will respond within 30 days of receipt.

Under UK GDPR, UK residents have the following rights:

• Right of access (Article 15). You may request confirmation of whether we process your personal data and a copy of that data along with supplementary information about how it is processed.
• Right to rectification (Article 16). You may request correction of inaccurate personal data and completion of incomplete personal data.
• Right to erasure (Article 17). You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and there is no other legal basis for processing, or where the data has been unlawfully processed. This right is subject to our legal retention obligations.
• Right to restrict processing (Article 18). You may request that we restrict processing of your personal data in certain circumstances, including while the accuracy of the data is contested.
• Right to data portability (Article 20). Where processing is based on consent or contract and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object (Article 21). You may object to processing of your personal data where that processing is based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Rights related to automated decision-making. We do not carry out automated decision-making or profiling that produces legal or similarly significant effects. This right is satisfied by default.

To exercise any UK GDPR right, contact us at pitch@wrayven.com with the subject line "Privacy Request — UK." We will respond within one calendar month of receipt as required by UK GDPR Article 12.

If you are dissatisfied with our response or believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

International data transfers. Your personal data is transferred to and stored in the United States. This transfer is carried out on the basis of the UK's adequacy framework and standard contractual clauses where applicable. You may request further information about the specific transfer mechanisms used by contacting us at the address above.

Wrayven's services are directed exclusively to businesses and business professionals. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected personal information from a minor, we will delete it promptly.

If you believe we have collected personal information from a minor, contact us immediately at pitch@wrayven.com.

This website may contain links to third-party websites or reference third-party services including Zoho, Higgsfield, Adobe, and Anthropic (Claude). Wrayven is not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party service before providing personal information to them.

Links to third-party websites do not constitute endorsement of those websites or their privacy practices.

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the services we provide. When we make material changes, we will update the "Last Updated" date at the top of this page and provide written notice to active clients and partners using the notice mechanisms described in our Terms of Service.

For UK residents, where changes to this policy require fresh consent or materially affect your rights under UK GDPR, we will provide direct notice and, where required, seek fresh consent before the changes take effect.

Continued engagement with Wrayven after the effective date of any updated policy constitutes acceptance of the revised policy for purposes of US and Canadian law. UK residents' rights under UK GDPR are not diminished by continued engagement where fresh consent is required.

For any privacy-related questions, requests, or complaints, contact Wrayven's privacy contact at:

McKinnon Marketing LLC doing business as Wrayven
Email: pitch@wrayven.com
Subject line: "Privacy Request"

We will acknowledge receipt of your request within 5 business days and respond fully within the timeframes required by applicable law — 30 days for US and Canadian requests, and one calendar month for UK requests under UK GDPR.

If you are a UK resident and are not satisfied with our response, you may escalate your complaint to the Information Commissioner's Office at ico.org.uk.

If you are a Canadian resident and are not satisfied with our response, you may escalate your complaint to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

McKinnon Marketing LLC doing business as Wrayven. All rights reserved. This policy was last updated March 30, 2026.