Privacy Policy

1. Introduction

SceneSelf ("SceneSelf", "we", "our", or "us") is committed to protecting your privacy. SceneSelf lets you create imagined, creative AI photo sets from a selfie and a short scene description. This Privacy Policy explains how we collect, use, disclose, and safeguard your information — including your selfie and facial data — when you use our website and services at sceneself.com.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

Personal Information

We may collect personal information that you provide directly to us, such as:

• Name and contact information (email address, phone number)
• Account credentials (username, password)
• Payment information (processed through secure third-party providers)
• Profile information (avatar, preferences)
• Communications with us (support tickets, emails)

Automatically Collected Information

When you visit our Service, we automatically collect certain information, including:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, clicks)
• Cookies and similar tracking technologies
• Log data (access times, referring URLs)

Information from Third-Party Services

If you authenticate using OAuth providers (Google, etc.), we may receive:

• Basic profile information (name, email, profile picture)
• Authentication tokens
• Any additional information you authorize

Selfies, Face & Biometric Data

SceneSelf creates AI photo sets from a selfie you upload. We treat your selfie and any facial features derived from it as sensitive data:

• Purpose limitation. Your selfie is used only to generate the scene set you request and to verify that the results look like you (identity and quality checks) — not for any other purpose.
• No training, no retained face templates. We do not use your selfie to train AI models, and we do not keep reusable facial-recognition templates or biometric identifiers beyond what is needed to complete your generation.
• Automatic deletion. Your original selfie and any derived identity reference are deleted automatically once your scene set is delivered, and within 24 hours at the latest. You can also delete them at any time from your account.
• Processing partners. Generation and visual quality/identity checks run via OpenRouter (Google Gemini models); generated images are stored on Cloudflare R2. Your selfie is shared with these providers solely to perform these operations.
• BIPA & GDPR. Where applicable (e.g., Illinois BIPA, EU/UK GDPR), we obtain your consent before processing biometric or face data, limit retention as above, and honor your access and deletion rights. We never sell biometric data.

By uploading a selfie you consent to this processing. SceneSelf creates imagined, creative scenes — not proof of real events, ownership, or identity, and not impersonations of real people.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Service
• Process transactions and manage your account
• Send administrative information and updates
• Respond to your comments, questions, and support requests
• Improve and personalize your experience
• Monitor and analyze usage patterns and trends
• Develop new products, services, and features
• Prevent fraud and enhance security
• Comply with legal obligations
• Send marketing communications (with your consent)

4. How We Share Your Information

We may share your information in the following situations:

With Service Providers

We share information with third-party vendors who perform services on our behalf, such as:

• AI processing: OpenRouter (Google Gemini models) for scene generation and visual quality/identity checks
• Image storage & delivery: Cloudflare R2
• Payment processing: Creem
• Email delivery: Resend
• Cloud hosting and analytics providers

For Legal Purposes

We may disclose your information when required by law or to:

• Comply with legal obligations
• Respond to lawful requests from public authorities
• Protect our rights, privacy, safety, or property
• Enforce our terms and agreements

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.

With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (SSL/TLS)
• Encryption of sensitive data at rest
• Regular security audits and assessments
• Access controls and authentication requirements
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records

When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention policies.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

Access and Portability

You can request access to your personal information and receive a copy in a structured, machine-readable format.

Correction and Update

You can request that we correct or update inaccurate or incomplete personal information.

Deletion

You can request deletion of your personal information, subject to certain exceptions.

Objection and Restriction

You can object to or request that we restrict processing of your personal information.

Marketing Communications

You can opt-out of marketing emails by clicking the unsubscribe link or contacting us directly.

Cookies

You can manage cookie preferences through your browser settings. See our Cookie Policy for more information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

9. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

10. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to be informed about data processing
• The right to rectification of inaccurate data
• The right to erasure ("right to be forgotten")
• The right to data portability
• The right to object to processing
• Rights related to automated decision-making
• The right to lodge a complaint with supervisory authorities

11. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.

For significant changes, we will provide additional notice through email or a prominent notice on our Service.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

• Email: support@sceneself.com
• Support: support@sceneself.com
• Website: https://sceneself.com

SceneSelf is an independent service operated by a solo developer. For privacy, data-deletion, or any other requests, the fastest way to reach us is by email at support@sceneself.com. We typically respond within 24–48 hours.