Privacy policy

Scena Studio LLC, registered in the United States, is the Data Controller responsible for the personal data described in this policy under the EU/UK General Data Protection Regulation (GDPR).

For any privacy inquiry, data access/export request, account deletion or compliance question, contact our Data Protection & Privacy team directly at privacy@scenastudio.app or support@scenastudio.app. Every message is read by a human and answered within two working days.

If account registration is enabled and you register, we may process your email address, your display name and authentication information needed for the sign-in method, including an emailed verification code where applicable. To help prevent abuse, we may also process the registration timestamp and signup IP address.

If a product-updates option is available and you select it at signup, we may record when you gave consent. It is unchecked by default, and you can unsubscribe with one click in any email.

If online licence activation is enabled, the Windows app may contact our authentication service over HTTPS to verify your licence seat. The data below may be processed when the corresponding activation or shared API service is in use:

• Machine Activation Fingerprint: A one-way cryptographic SHA-256 hash derived from your PC’s hardware UUID and Windows installation ID. This hash cannot be reversed to identify hardware serials and is used solely to enforce plan seat limits (1 PC on Free/Creator; 3 PCs on Studio) and enable self-service PC transfers.
• Aggregate Monthly Service Counters: Per-service totals of queued jobs, render seconds, and estimated spend. These counters contain numeric totals only (never prompts, file names, or images). If shared API access is enabled and these counters are collected, we use them to track usage and help enforce the shared-key anti-abuse rules. Scena Studio applies no per-user usage quota or credit cap to shared credits during the Open Test. Separate post-test software plan limits apply as described in the End-User Licence Agreement.

During the Open Test, Scena Studio is 100% free and never asks for a payment card. When paid plans launch with the signed release, all checkout and subscription transactions are processed by Stripe, Inc., a PCI-DSS Level 1 certified payment processor.

Scena Studio LLC never receives, views, or stores your full credit card number, CVV security code, or banking credentials. From Stripe we receive only your billing email, billing country/postal code, selected plan, amount paid, applicable VAT/GST/sales tax, card brand/last 4 digits, and a Stripe transaction reference ID, which we retain to issue tax-compliant invoices, process refunds, and satisfy statutory tax audits.

Scena Studio is engineered as a local-first desktop production tool. The following creative and technical assets stay 100% on your local storage drive and are never uploaded to, synced with, or accessible by Scena Studio LLC:

• Script sheets (.xlsx, .csv), storyboards, text prompts, negative prompts, seed numbers, and scene notes.
• Character reference sheets, outfit locks, prop references, and room/background plates.
• Dialogue audio files, voice recordings, lip-sync timing tracks, and all generated still images and video clips.
• Your Personal API Keys (BYOK): Every API key you enter into Scena Studio (Kling, Google Veo, Gemini, Runway, Luma, MiniMax, fal.ai, Replicate, OpenRouter, etc.) is encrypted locally on your PC using the Windows Data Protection API (DPAPI / CryptProtectData) bound to your Windows user account inside %APPDATA%\ScenaStudio. Because we hold no cloud copy of your projects or keys, there is nothing of your creative work on our servers to lose, leak, sell, or hand over.

Scena Studio features Reference Locks, a GPU-accelerated Consistency Check ("Face Match"), and Dialogue Lip-Sync staging. To comply with global biometric privacy laws (including GDPR Article 9, Illinois BIPA principles, and platform safety policies):

• 100% Local GPU Execution: Visual similarity scoring for face, outfit, and color palette runs entirely on your own computer’s GPU/CPU using open-source ONNX vision models bundled with the desktop app.
• Zero Cloud Biometric Collection or Storage: Scena Studio LLC never collects, transmits, stores, or indexes facial geometry, biometric templates, or voiceprints on our servers. Local reference embeddings exist solely inside your local project folder to compare synthetic character shots against your character sheet and are permanently removed when you delete that project folder.
• Strict Zero-AI-Training Guarantee: Neither Scena Studio LLC nor any service operated by us ever trains, fine-tunes, or improves any machine-learning or AI model on your prompts, scripts, reference images, voice tracks, or rendered videos.

When you run a render job in the batch queue, your PC sends that specific shot’s prompt and attached reference images directly over HTTPS (TLS 1.3) to the API endpoint of the AI service or gateway you selected for that shot (such as Google Veo/Gemini/Imagen, Kling, Runway, Luma, MiniMax, Seedance, Wan, Flux, Grok, fal.ai, Replicate, or OpenRouter), authenticated with your own API key or, if shared access is available for that service, a shared Open Test key.

That third-party AI service processes the request under its own API terms, privacy policy, and data retention schedule. We encourage you to review the API privacy documentation of each model provider you choose to enable in Tools → API Services.

We process personal data strictly under the following legal bases:

• Performance of a Contract (GDPR Art. 6(1)(b)): To create and authenticate your account, verify software licence activations, and deliver customer support.
• Legal Obligation (GDPR Art. 6(1)(c)): To maintain accurate tax, VAT/GST, and accounting records and comply with financial regulations.
• Legitimate Interests (GDPR Art. 6(1)(f)): To secure our authentication infrastructure, prevent credential stuffing, and protect the shared Open Test API key pool against automated abuse.
• Explicit Consent (GDPR Art. 6(1)(a) & Google Consent Mode v2): To send optional product release emails or to load optional analytics and advertising conversion tags on this website. You may withdraw consent at any time without affecting your use of Scena Studio.

The Scena Studio desktop app contains no background telemetry and no automatic crash uploader. A diagnostic report is transmitted to reports.scenastudio.app only when you explicitly click Send inside Help → Report a problem or on the website’s bug-report page.

Before transmission, the reporting dialog displays the exact text and attachments included (log excerpt, app build number, Windows version, and failed job status) so you can edit or redact anything you prefer not to share. Bug reports are permanently deleted once the underlying issue is resolved and closed.

On launch, the desktop app makes a lightweight HTTPS request to updates.scenastudio.app sending only the current app version number and Windows build to check if a newer release is available. You can disable automatic update checks at any time in Settings → Updates.

In full compliance with Google’s Unwanted Software Policy, updates are offered with a changelog and installed only when you explicitly approve them. The installer never bundles third-party offers, never modifies browser or system settings, and leaves zero background processes running when the app is closed.

Without your explicit permission, this website stores only your chosen UI language (en/vi) and your consent preference in local storage. We implement Google Consent Mode v2 across all pages: by default, ad_storage, ad_user_data, ad_personalization, and analytics_storage are set to denied.

Optional cookieless pageview counting (Plausible Analytics) and advertising conversion tags (Google Ads, Meta Pixel, Microsoft Advertising UET, and TikTok Pixel) fire only if you grant permission via the Cookie Banner or Preferences dialog. Full technical details and opt-out links are set out in our Cookies & Advertising Policy.

We share the minimum necessary account or checkout metadata only with vetted infrastructure sub-processors bound by written Data Processing Agreements (DPAs) and industry security certifications (SOC 2 Type II, ISO 27001, PCI-DSS):

• Supabase, Inc. (US / EU): Planned authentication and licence seat hosting if the account service is enabled.
• Cloudflare, Inc. (Global Edge Network): Website hosting (Cloudflare Pages), TLS termination, DDoS protection, and signed installer distribution (Cloudflare R2).
• Stripe, Inc. (US / Global): Payment processing, tax calculation, invoicing, and refund execution.
• Postmark / ActiveCampaign, LLC (US): Transactional email delivery (6-digit sign-in codes, receipts, and licence notices).
• Plausible Insights OÜ (European Union — Estonia): Privacy-first, cookieless aggregate website traffic analytics (loaded only with consent).

We never sell, rent, or trade your personal data to data brokers, ad networks, or any third party.

Some sub-processors listed in Clause 12 process data outside your home jurisdiction, including in the United States, the European Union, and Singapore. Where personal data is transferred internationally (including from the EEA, UK, or Switzerland), we rely on the European Commission’s Standard Contractual Clauses (SCCs, Module 2) and the UK International Data Transfer Addendum (IDTA), as applicable, along with TLS 1.3 encryption in transit and AES-256 encryption at rest.

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Account Data: Retained while your account remains open, and permanently deleted from production databases within 30 days of account closure (and purged from encrypted rolling backups within 90 days).
• Billing & Tax Records: Unlinked from your personal account profile within 90 days of account closure; statutory invoice records are retained for the period mandated by tax and accounting law (typically 7–10 years).
• Monthly Usage Counters: Retained for the current and immediately preceding calendar month only (maximum 60 days).
• Bug Reports: Deleted upon issue resolution or within 30 days of ticket closure.

Regardless of where you live — whether in the European Economic Area, the United Kingdom, California (USA), or elsewhere — we extend the same high-standard privacy rights to every user:

• Access & Portability: Request a complete copy and machine-readable export (JSON/CSV) of all account and licence data we hold about you.
• Correction (Rectification): Update your email address, display name, or billing details at any time.
• Deletion ("Right to be Forgotten"): Request permanent erasure of your account, which also immediately releases all PC activations.
• Withdraw Consent & Object: Withdraw marketing or cookie consent at any time, or object to processing based on legitimate interests.
• CCPA/CPRA "Do Not Sell or Share" & Global Privacy Control (GPC): We do not sell personal information. For website ad measurement, our site automatically detects and honors browser Global Privacy Control (Sec-GPC: 1) headers as an immediate opt-out of advertising tags.

To exercise any of these rights, email privacy@scenastudio.app or support@scenastudio.app from your account email address. We confirm receipt within 2 working days and complete all verified requests within 10 to 30 days free of charge. You also have the right to lodge a complaint with your national data protection supervisory authority.

The desktop app uses HTTPS for provider API requests and Windows DPAPI to protect locally stored API keys.

If a security breach ever affects your personal data, we will notify the competent data protection authorities within 72 hours when required by GDPR and notify affected users directly by email without undue delay.

While creators frequently use Scena Studio to produce family-friendly or children’s educational animation series, Scena Studio itself is a professional desktop production application marketed and licensed exclusively to adults (18 years of age or older). We do not knowingly collect or hold personal data from anyone under 16. If you believe a minor has created an account, please contact privacy@scenastudio.app and we will delete the account and associated data immediately.

When we update this policy, we update the version number and effective date at the top of this page and keep all prior versions archived and available upon request. Any material change that introduces new data collection or alters how your data is handled will be announced in our community channels and emailed to registered users at least 14 days before taking effect.