Privacy Policy
Last updated: February 17, 2026
1. Overview
SceneSteller ("we," "us," or "our") operates the SceneSteller platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using the Service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
Key Principle: We collect only the minimum data necessary to provide our services. We never sell your personal data to third parties.
2. Information We Collect
2.1 Information You Provide
Account Information
Email address, name, profile picture when you create an account via our authentication provider
Payment Information
Payment details processed securely through our payment provider (Polar.sh). We do not store credit card numbers.
User Content
Images you upload for AI processing, prompts, and generated images
Communications
Feedback, support requests, and other communications you send to us
2.2 Information Collected Automatically
Device Information
Browser type, operating system, device identifiers, IP address
Usage Data
Pages visited, features used, time spent, generation history, error logs
3. How We Use Your Information
3.1 Legal Bases for Processing (GDPR)
We process your personal data under the following legal bases:
- •Contract Performance
To provide and maintain our Service, process transactions, and manage your account
- •Legitimate Interests
To improve our Service, prevent fraud, ensure security, and send service-related communications
- •Legal Obligation
To comply with applicable laws, regulations, and legal processes
- •Consent
For marketing communications and optional features (you may withdraw consent at any time)
3.2 Specific Uses
- • Provide, operate, and maintain the Service
- • Process AI image generation requests
- • Process payments and manage credits
- • Send transactional emails and service updates
- • Respond to support requests and inquiries
- • Analyze usage to improve our Service
- • Detect and prevent fraud or abuse
- • Comply with legal obligations
4. Third-Party Services
We use the following third-party services to operate SceneSteller. Each service has its own privacy policy governing the use of your information:
Clerk (Authentication)
Handles user authentication, account management, and session security.
View Clerk Privacy Policy →Convex (Database)
Stores user data, generation history, and credits in a real-time database.
View Convex Privacy Policy →Polar.sh (Payments)
Processes credit purchases and manages payment transactions securely.
View Polar Privacy Policy →Google Gemini (AI Processing)
Processes images and generates AI content. Uploaded images are sent to Google's API for processing.
View Google Privacy Policy →5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate and improve our Service.
Types of Cookies We Use
Essential Cookies (Required)
Necessary for authentication, security, and basic site functionality. Cannot be disabled.
Functional Cookies
Remember your preferences and settings to enhance your experience.
Analytics Cookies
Help us understand how visitors use our Service to improve it.
Managing Cookies: You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy:
Account Data
Retained while your account is active, and for up to 30 days after account deletion
Generated Images
Retained while your account is active. Deleted upon account deletion.
Transaction Records
Retained for 7 years as required by applicable tax and financial regulations
Usage Logs
Retained for up to 90 days for security and debugging purposes
7. Your Privacy Rights
7.1 Rights Under GDPR (European Users)
If you are located in the European Economic Area (EEA), you have the following rights:
Access - Request a copy of your personal data
Rectification - Correct inaccurate or incomplete data
Erasure - Request deletion of your data ("right to be forgotten")
Portability - Receive your data in a portable format
Restriction - Limit how we process your data
Objection - Object to certain processing activities
7.2 Rights Under CCPA (California Users)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- • Right to Know: Request information about data collection and sharing practices
- • Right to Delete: Request deletion of your personal information
- • Right to Opt-Out: Opt out of the "sale" of personal information (we do not sell your data)
- • Right to Non-Discrimination: Equal service regardless of privacy choices
How to Exercise Your Rights: Contact us at privacy@scenesteller.com. We will respond within 30 days (or 45 days for CCPA requests).
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers are located.
When we transfer data internationally, we implement appropriate safeguards including:
- • Standard Contractual Clauses (SCCs) approved by the European Commission
- • Data Processing Agreements with all service providers
- • Technical and organizational security measures
9. Children's Privacy
Age Requirement: SceneSteller is not intended for use by children under the age of 13 (or 16 in the EEA).
We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@scenesteller.com. We will promptly delete such information.
10. Data Security
We implement industry-standard security measures to protect your personal data:
Encryption: All data transmitted via HTTPS/TLS. Sensitive data encrypted at rest.
Access Control: Strict access controls and authentication for all systems.
Monitoring: Continuous monitoring for security threats and vulnerabilities.
Important: No method of transmission or storage is 100% secure. We cannot guarantee absolute security.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- • Posting the updated policy on this page with a new "Last updated" date
- • Sending an email notification for significant changes
- • Displaying a notice within the Service
12. Contact Us
For questions, concerns, or to exercise your privacy rights:
Privacy Inquiries: privacy@scenesteller.com
General Support: support@scenesteller.com
Response time: We aim to respond to all privacy-related inquiries within 30 days.