1. Introduction
SceneFlow AI Inc. ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service at sceneflowai.studio.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, password (hashed)
- Profile Data: Avatar, display name, preferences
- Payment Information: Processed securely by our payment partner; we do not store credit card numbers
- Content: Scripts, prompts, uploaded images, and project data you create
- BYOK API Keys: Encrypted and stored securely if you choose to use your own keys
2.2 Voice Cloning & Biometric Data
If you use our Voice Cloning feature, we collect:
- Voice Samples: Audio recordings uploaded for voice cloning
- Voice Captcha Recordings: Live consent verification recordings where you speak a randomized phrase
- Voice Biometric Data: Voice fingerprints used to verify identity and consent matching
Important: Voice biometric data is classified as sensitive personal information in certain jurisdictions. By using Voice Cloning, you explicitly consent to the collection and processing of this biometric data for identity verification and consent matching purposes. You may withdraw consent by discontinuing use of Voice Cloning features.
2.3 Automatically Collected Information
- Usage Data: Features used, credits consumed, generation history
- Device Information: Browser type, operating system, device identifiers
- Log Data: IP address, access times, pages viewed, referring URLs
- Cookies: Session cookies for authentication, preference cookies
2.4 Generation Audit Logs
For trust, safety, and legal compliance purposes, we maintain detailed logs of all AI-generated content:
- User ID: Account identifier associated with each generation
- Prompts/Scripts: Text input submitted for audio/video generation
- Audio Fingerprints: Unique identifiers for generated audio content
- Timestamps: Exact date and time of each generation
- Voice Identifiers: Record of which voice (stock or cloned) was used
- Watermark Data: Forensic watermark identifiers embedded in generated content
3. How We Use Your Information
- Provide, maintain, and improve the Service
- Process transactions and manage your account
- Generate AI content based on your inputs
- Send transactional emails (receipts, account notifications)
- Send marketing communications (with your consent)
- Analyze usage patterns to improve user experience
- Detect, prevent, and address fraud or abuse
- Comply with legal obligations
4. Data Sharing and Disclosure
We share your data with:
- AI Service Providers: Google (Vertex AI), ElevenLabs, Shotstack — to generate content (prompts and outputs only)
- Payment Processor: Our authorized Merchant of Record — to process payments securely
- Authentication Provider: Clerk — for secure user authentication
- Infrastructure Providers: Vercel, Supabase — for hosting and database services
- Legal Requirements: When required by law or to protect our rights
We do NOT sell your personal information to third parties.
4.1 Law Enforcement & Content Attribution
We may disclose generation audit logs (User ID, prompts, audio fingerprints, timestamps) to law enforcement agencies upon valid legal request. All generated audio and video content includes forensic watermarks that enable content attribution. This watermarking allows us to trace generated content back to specific user accounts if the content is used for malicious purposes or reported for abuse.
5. Data Retention
- Account Data: Retained while your account is active, deleted within 30 days of account deletion request
- Project Content: Retained until you delete it or close your account
- Transaction Records: Retained for 7 years for legal/tax compliance
- Usage Logs: Retained for 90 days, then anonymized
- Voice Biometric Data: Retained while cloned voices are active; deleted upon voice deletion or account closure
- Generation Audit Logs: Retained for 3 years for legal compliance and abuse investigation purposes
- Voice Captcha Recordings: Retained for 1 year as consent verification records
6. Data Security
We implement industry-standard security measures including:
- TLS/SSL encryption for all data in transit
- AES-256 encryption for BYOK API keys at rest
- Row-Level Security (RLS) in our database
- Regular security audits and penetration testing
- SOC 2 compliant infrastructure providers
7. Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Portability: Request your data in a portable format
- Objection: Object to processing for marketing purposes
- Restriction: Request restriction of processing
To exercise these rights, email privacy@sceneflowai.com.
8. International Data Transfers
Your data may be transferred to and processed in the United States. We use Standard Contractual Clauses and other safeguards to ensure adequate protection for EU/UK residents.
9. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.
10. Cookies
We use the following types of cookies:
- Essential: Required for authentication and security
- Functional: Remember your preferences
- Analytics: Understand how you use the Service (anonymized)
You can manage cookies through your browser settings.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification. The "Last updated" date at the top reflects the most recent revision.
12. Contact Us
Data Protection Inquiries: privacy@sceneflowai.com
General Support: support@sceneflowai.com
Website: https://sceneflowai.studio