Privacy Policy

1. Controller

The controller responsible for processing personal data on Scenily is:

Email: support@scenily.com

This policy applies under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Data we process

• Account data: name, email address, profile image, organization, role and sign-in information provided through Emorise Login.
• Project data: product URLs, brand profiles, briefs, scripts, prompts, uploaded files and comments you or your team create.
• Generated media: images, videos, audio and exports generated in your projects.
• Billing data: plan, credit balance and transaction history. Card and payment details are processed by Stripe; we receive only references and the payment status.
• Connected AI accounts: API keys or sign-in tokens you connect on Pro and higher plans, stored encrypted and used only for your workspace.
• Technical data: IP address, browser information and logs needed to operate, secure and rate-limit the service.

3. Purposes and legal bases

We process this data to provide Scenily under our contract with you (GDPR Art. 6(1)(b)), to meet legal obligations such as accounting (Art. 6(1)(c)) and, for security, abuse prevention and service improvement, on the basis of our legitimate interests (Art. 6(1)(f)). We do not sell personal data and do not use it for third-party advertising.

4. Service providers

We use the following processors. When you run an AI step, the prompts, images or audio needed for it are sent to the provider that performs it. If you connect your own AI account, that step is processed under your own agreement with that provider.

• Hetzner Online GmbH (Germany): hosting of our servers, database and file storage in Germany
• Cloudflare, Inc.: DNS for our domain
• Stripe: subscriptions and payments
• Resend: transactional emails such as invitations and notifications
• Emorise Login (operated by our group): sign-in; Google or Microsoft if you choose to sign in with them
• Google (Gemini): text generation, image generation and content screening
• OpenAI: text and image generation
• Anthropic: text generation
• fal.ai: image and video generation, upscaling
• Modal: draft video generation on GPU servers
• ElevenLabs: voice-over and voice transformation

Some of these providers process data outside Switzerland and the EEA, in particular in the United States. In those cases we rely on adequacy decisions (such as the Swiss-US and EU-US Data Privacy Frameworks) or the standard contractual clauses.

5. Retention

• Account, project and media data are kept while your account exists.
• Exports of organizations without an active subscription expire after 30 days and are then deleted from storage.
• When you delete your account, your personal data is deleted. Work shared with your organization stays with that organization; if you are its last member, the organization and its projects are deleted too.
• Billing records are kept for as long as Swiss accounting law requires (generally ten years).

6. Your rights

Under the FADP and the GDPR you can request access to your personal data, its correction or deletion, the restriction of processing, data portability, and object to processing based on legitimate interests. You can withdraw consent at any time where processing relies on it. Write to support@scenily.com. You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or a data protection authority in the EU/EEA.

7. Cookies

We use only cookies that are necessary to sign you in and keep your session secure. We do not use analytics or advertising cookies.

8. Changes

We may update this policy. The date at the top shows the latest version.