Privacy Policy

1. Introduction

SceneSmith ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our AI video generation platform ("Platform" or "Service").

This policy applies to all users worldwide and is designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other regional privacy regulations.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name
• Email address
• Password (encrypted)
• Profile image (optional)
• OAuth provider information (if signing in with Google or other providers)

2.2 Content You Provide

When you use the Platform, we process:

• Text prompts and descriptions you submit for content generation
• Reference images you upload
• Audio files you upload (for voice and lip-sync features)
• Scripts and project metadata
• Character, location, and scene descriptions

2.3 Generated Content

We store AI-generated content including:

• Generated images
• Generated videos
• Synthesized audio and voice content
• Associated metadata (prompts used, quality settings, timestamps)

2.4 Payment Information

When you purchase credits, we collect:

• Billing name and address
• Payment method details (processed securely by Stripe; we do not store full card numbers)
• Transaction history and credit balance

2.5 Usage Data

We automatically collect:

• IP address and approximate location
• Browser type and version
• Device information and operating system
• Pages visited and features used
• Generation requests and timing
• Error logs and performance data

2.6 Cookies and Tracking

We use cookies and similar technologies. See our Cookie Policy for details.

2.7 Biometric Data

Certain features of the Platform involve the collection and processing of biometric data as defined under applicable privacy laws, including the Illinois Biometric Information Privacy Act (BIPA), GDPR Article 9, and CCPA § 1798.140(b). We collect biometric data only with your explicit, informed consent, and only for the specific purposes described below:

• Voice Biometric Data: If you use our Voice Clone feature, we collect voice recordings and process them to create a digital voiceprint model that replicates your vocal characteristics. Voice data is processed by our third-party provider ElevenLabs, Inc. and stored on our servers. You must provide explicit consent before any voice data is collected.
• Facial Geometry Data: If you upload facial reference images for character consistency, we may process facial geometry and features to maintain visual consistency across AI-generated scenes. This data is processed by our image generation provider Fal.ai.
• Device Fingerprinting: We collect device and browser characteristics (screen resolution, GPU renderer, timezone, language) and hash them into a non-reversible fingerprint for fraud prevention and account security purposes. This fingerprint cannot be used to identify you personally.

Retention and Destruction: Voice biometric data and facial geometry data are retained for the duration of your account. Upon account deletion or consent withdrawal, all biometric data is permanently deleted within 30 days. You may withdraw consent at any time by deleting your voice clones through the Platform or by contacting privacy@scenesmith.ai.

Your Rights: You have the right to (a) be informed about the collection and purpose of biometric data before it is collected, (b) provide written consent, (c) withdraw consent at any time, (d) request deletion of your biometric data, and (e) request a copy of your biometric data.

3. How We Use Your Information

We use your information to:

3.1 Provide the Service

• Create and manage your account
• Process your content generation requests
• Store and deliver generated content
• Process payments and manage credits
• Provide customer support

3.2 Improve the Platform

• Analyze usage patterns and optimize performance
• Debug errors and fix technical issues
• Develop new features and capabilities
• Conduct research to improve AI generation quality

3.3 Communicate With You

• Send service-related notifications
• Respond to support requests
• Notify you of changes to our Terms or policies (with your consent where required)
• Send marketing communications (with your consent)

3.4 Ensure Safety and Security

• Detect and prevent fraud, abuse, and policy violations
• Enforce our Terms of Service and Acceptable Use Policy
• Comply with legal obligations
• Protect our users and the public

4. Third-Party Services

We share data with the following categories of third-party service providers:

4.1 AI Generation Providers

• Fal.ai: Processes your prompts and reference images to generate images and videos. Subject to Fal.ai's Privacy Policy.
• ElevenLabs: Processes text to generate synthetic voice audio. Subject to ElevenLabs' Privacy Policy.
• Google (Gemini): Processes prompts for AI assistance features. Subject to Google's Privacy Policy.

4.2 Infrastructure Providers

• Cloud hosting: For storing your data and generated content
• Database providers: For secure data storage
• CDN providers: For delivering content efficiently

4.3 Payment Processing

• Stripe: Processes all payment transactions. We do not store full payment card details. Subject to Stripe's Privacy Policy.

4.4 Analytics

• We may use analytics services to understand how users interact with the Platform

5. Data Retention

We retain your information for the following periods:

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

6.1 Access

You can request a copy of the personal data we hold about you.

6.2 Correction

You can request correction of inaccurate or incomplete personal data.

6.3 Deletion

You can request deletion of your personal data. Note that some data may be retained for legal compliance.

6.4 Portability

You can request your data in a structured, commonly used, machine-readable format.

6.5 Restriction

You can request that we restrict processing of your data in certain circumstances.

6.6 Objection

You can object to processing of your data for direct marketing or based on legitimate interests.

6.7 Withdraw Consent

Where processing is based on consent, you can withdraw consent at any time.

To exercise these rights, contact us at privacy@scenesmith.ai. We will respond within 30 days (or as required by applicable law).

7. GDPR Compliance (European Users)

For users in the European Economic Area (EEA), UK, and Switzerland:

7.1 Legal Basis for Processing

• Contract: Processing necessary to provide the Service you requested
• Consent: For marketing communications and optional cookies
• Legitimate Interest: For security, fraud prevention, and service improvement
• Legal Obligation: For tax records and legal compliance

7.2 International Transfers

Your data may be transferred to and processed in the United States and other countries. We ensure appropriate safeguards through Standard Contractual Clauses or other approved mechanisms.

7.3 Supervisory Authority

You have the right to lodge a complaint with your local data protection authority.

8. CCPA Compliance (California Residents)

California residents have additional rights under the CCPA:

8.1 Right to Know

You can request information about categories and specific pieces of personal information collected.

8.2 Right to Delete

You can request deletion of personal information collected from you.

8.3 Right to Opt-Out

You can opt out of the "sale" of personal information. Note: We do not sell personal information in the traditional sense.

8.4 Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

8.5 Categories of Information

In the past 12 months, we have collected:

• Identifiers (name, email, IP address)
• Commercial information (purchase history)
• Internet activity (usage data, browsing history on our Platform)
• Inferences (preferences derived from your use of the Platform)

9. Children's Privacy

SceneSmith is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn we have collected such information, we will delete it promptly.

If you believe a child under 18 has provided us with personal information, please contact us at privacy@scenesmith.ai.

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Access controls and authentication requirements
• Regular security assessments
• Employee training on data protection

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

11. AI Training and Your Data

Important: We do not use your personal prompts, uploaded content, or generated content to train our own AI models without your explicit consent.

Third-party AI providers (Fal.ai, ElevenLabs, Google) may have their own data usage policies. We recommend reviewing their privacy policies for details on how they handle data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will:

• Provide at least 30 days' notice before changes take effect
• Notify you via email and/or prominent notice on the Platform
• Update the "Effective Date" at the top of this policy

Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

• Privacy Inquiries: privacy@scenesmith.ai
• Data Protection Officer: dpo@scenesmith.ai
• General Support: support@scenesmith.ai

We will respond to all legitimate requests within 30 days (or as required by applicable law).