Privacy Policy

1. Introduction

Sceneo (“we”, “us”, “our”), based in Turkey, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the Sceneo platform (“the Platform”) available at sceneo.io. By using our services, you consent to the practices described in this policy.

2. Information We Collect

2.1 Account Information

When you create an account via Google OAuth, we collect your name, email address, and profile picture as provided by Google. We do not store your Google account password.

2.2 User-Uploaded Content

When you use our services, you upload product images for AI processing. These images are stored securely and used solely for the purpose of generating your requested content.

2.3 Generated Content

We store images and videos generated through the Platform so you can access them from your dashboard and library. Generated content is associated with your account.

2.4 Usage Data

We automatically collect usage information including features used, credits consumed, generation history, session duration, browser type, device information, and IP address. This data helps us improve the Platform and ensure security.

2.5 Payment Information

Payment processing is handled entirely by Lemon Squeezy, our merchant of record. We do not store credit card numbers, bank account details, or other sensitive financial information on our servers. Lemon Squeezy's handling of payment data is subject to their own privacy policy.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Platform and its features
• Process your image and video generation requests
• Manage your account, subscription, and credit balance
• Communicate service updates, billing notifications, and support responses
• Monitor and improve Platform performance, reliability, and security
• Detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations and enforce our Terms of Service

4. How We Protect Your Uploaded Content

We take special care with your product images and generated content:

• Your uploaded images are used only to generate the content you request
• Your images and generated content are never shared with other users
• Your content is never sold to third parties
• Your content is never used to train our AI models or any third-party models
• You can delete all your uploaded content and generated assets from your dashboard at any time

5. Data Storage & Security

Your data is stored on cloud infrastructure provided by Supabase with servers located in the European Union. All data is encrypted in transit using TLS/HTTPS and at rest using AES-256 encryption. We implement industry-standard security measures including:

• Row-level security (RLS) to ensure users can only access their own data
• OAuth 2.0 authentication with no password storage
• Regular security audits and vulnerability assessments
• Secure API endpoints with rate limiting and input validation

6. Third-Party Services

We share limited data with the following third-party services to deliver our product:

• Google OAuth: Authentication only — we receive your name, email, and profile picture
• Google Veo 3.1: Product images are sent to Google's AI for video generation. Google's data processing terms apply.
• Lemon Squeezy: Handles all payment processing, invoicing, and tax compliance as our merchant of record
• Supabase: Cloud database and file storage infrastructure (EU-hosted)
• Google Analytics: Anonymous usage analytics to improve the Platform (can be blocked via browser settings)

We do not sell, rent, or trade your personal information with any other third parties.

7. Cookies

We use the following types of cookies:

• Essential cookies: Required for authentication and session management. These cannot be disabled as the Platform will not function without them.
• Analytics cookies: Google Analytics cookies that collect anonymous usage data. You can opt out by using browser extensions or cookie settings.

We do not use advertising cookies or third-party tracking cookies.

8. Data Retention

We retain your data as follows:

• Account data: Retained as long as your account is active
• Uploaded images: Retained until you delete them or close your account
• Generated content: Retained until you delete them or close your account
• Usage logs: Retained for up to 12 months for security and analytics
• Billing records: Retained as required by applicable tax and accounting laws

Upon account deletion, all personal data, uploaded content, and generated content is permanently removed within 30 days, except where retention is required by law.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data and account
• Portability: Request your data in a machine-readable format
• Objection: Object to the processing of your data for specific purposes

You can exercise most of these rights directly from your account dashboard. For additional requests, contact us at info@sceneo.io. We respond to all data rights requests within 30 days.

For users in the European Union, these rights are provided under the General Data Protection Regulation (GDPR). For users in Turkey, these rights are provided under the Personal Data Protection Law (KVKK, Law No. 6698).

10. Children's Privacy

Sceneo is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 18, we will delete that data promptly.

11. International Data Transfers

Your data may be processed in locations outside your country of residence, including within the European Union (Supabase infrastructure) and the United States (Google services). We ensure appropriate safeguards are in place for any international data transfers in compliance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify active subscribers of significant changes via email at least 14 days before they take effect. The latest version is always available at this page.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at info@sceneo.io.