Privacy Policy

Last Updated: November 3, 2025

1. Introduction

SceneFlow (“we”, “us”, or “our”) operates a desktop application for creating educational videos. This Privacy Policy applies to information we collect when you:

• Create an account and use the SceneFlow application
• Visit our website at sceneflow.online
• Communicate with us via email or other channels

By using SceneFlow, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

We collect different types of information to provide and improve our Service.

2.1 Information You Provide Directly

When you create an account or use SceneFlow, you provide us with:

Data Type	Purpose	Required
Email Address	Account creation, authentication, service updates, support	Yes
Username	Account identification, personalization	Yes
Phone Number	Account security, two-factor authentication (optional), support	Yes
Payment Information	Processing subscription payments (handled by Paddle)	For paid plans
Subscription Details	Managing your plan, credits, and billing	For paid plans

2.2 Information Collected Automatically

When you use SceneFlow, we automatically collect certain information:

• Usage Data: Features you use, videos created, credit consumption, session duration
• Device Information: Operating system, application version, device type
• Analytics Data: Through Google Analytics (see Section 4)
• Authentication Logs: Login timestamps, authentication attempts, IP addresses (for security purposes only)

2.3 Information We Do NOT Collect

SceneFlow respects your privacy. We do NOT collect:

• Video Content: Videos, images, audio files, or scripts you create are stored locally on YOUR computer, not on our servers
• Personal Communications: We do not read or monitor your content
• Browsing History: We do not track websites you visit outside SceneFlow
• Sensitive Personal Data: We do not collect racial/ethnic origin, political opinions, religious beliefs, health data, or biometric data

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Delivery

• Create and manage your account
• Authenticate your identity and secure your account
• Process and track your subscription and payments
• Manage your AI credit allocation and usage
• Provide customer support and respond to inquiries
• Send service-related notifications (account updates, security alerts, billing reminders)

3.2 Service Improvement

• Analyze usage patterns to improve features
• Debug technical issues and optimize performance
• Develop new features based on user needs
• Conduct internal research and analytics

3.3 Legal and Security

• Prevent fraud, abuse, and unauthorized access
• Enforce our Terms of Service
• Comply with legal obligations and respond to legal requests
• Protect our rights, property, and safety, and that of our users

4. Third-Party Services

SceneFlow integrates with third-party services to provide functionality. Your information may be shared with:

4.1 Paddle (Payment Processor)

What they receive: Name, email, payment details, billing address, purchase history

Purpose: Processing subscription payments, managing billing, issuing invoices

Privacy Policy: https://www.paddle.com/legal/privacy

Note: SceneFlow does NOT store your credit card information. Paddle handles all payment data securely.

4.2 Google Analytics

What they collect: Anonymized usage statistics, device information, session data

Purpose: Understanding how users interact with SceneFlow to improve user experience

Privacy Policy: https://policies.google.com/privacy

Opt-out: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on

4.3 AI Service Providers

Pollinations AI: Used for AI image generation. Only the text prompts you generate are sent to Pollinations AI, not your account information.

EdgeTTS: Used for text-to-speech audio generation. Only the text you input for pronunciation is processed.

Google Gemini: Used for generating image prompts and bilingual scripts. Only the text you input is sent for processing.

4.4 Stock Image Providers

When you search for stock images, your search queries are sent to:

• Pexels (Privacy Policy)
• Pixabay (Privacy Policy)
• Unsplash (Privacy Policy)

5. Data Storage and Security

5.1 Where Your Data is Stored

• Account Data: Stored on secure servers (email, username, phone, subscription info, credit balance)
• Content Data: Videos, images, audio, and scripts are stored LOCALLY on your computer, not on our servers
• Geographical Location: Our servers are located in various locations. Data controller is based in Cairo, Egypt.

5.2 Security Measures

We implement industry-standard security measures to protect your data:

• Encrypted data transmission (HTTPS/TLS)
• Secure password hashing
• Access controls and authentication mechanisms
• Regular security audits
• Limited employee access to personal data

Important: No method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

5.3 Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Specifically:

• Active Accounts: Data retained indefinitely while account is active
• Deleted Accounts: Account data deleted within 30 days of deletion request (except as required by law)
• Billing Records: Retained for 7 years for tax and legal compliance
• Analytics Data: Anonymized analytics may be retained longer for statistical purposes

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

6.1 General Rights (Applicable to All Users)

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Update or correct inaccurate information
• Right to Deletion: Request deletion of your account and associated data
• Right to Export: Receive your data in a portable format
• Right to Withdraw Consent: Withdraw consent for data processing where consent was given

6.2 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to Restriction: Request limitation of processing of your personal data
• Right to Object: Object to processing based on legitimate interests
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Lodge a Complaint: File a complaint with your local data protection authority

6.3 CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect, use, disclose, and sell
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of the sale of personal information (Note: We do NOT sell your data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

6.4 How to Exercise Your Rights

To exercise any of these rights, please contact us at sceneflow9@gmail.com. We will respond to your request within 30 days.

7. Children’s Privacy

SceneFlow is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use SceneFlow or provide any personal information.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at sceneflow9@gmail.com and we will delete such information promptly.

For users aged 13-17: Parental consent is required. By using SceneFlow, you represent that you have obtained necessary parental or guardian consent.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your home country.

We take appropriate safeguards to ensure your personal data remains protected in accordance with this Privacy Policy, including using standard contractual clauses approved by the European Commission for transfers from the EEA.

9. Cookies and Tracking Technologies

9.1 Website Cookies

Our website (sceneflow.online) uses cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for website functionality (e.g., session management)
• Analytics Cookies: Google Analytics cookies to understand website usage
• Preference Cookies: Remember your settings and preferences

9.2 Desktop Application

The SceneFlow desktop application stores local settings on your computer but does not use traditional web cookies.

9.3 Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling cookies may affect website functionality.

10. Do Not Track Signals

Some browsers support “Do Not Track” (DNT) signals. We currently do not respond to DNT signals, but we do not track users across third-party websites.

11. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by law, typically within 72 hours of discovering the breach.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes:

• We will update the “Last Updated” date at the top of this policy
• For material changes, we will notify you via email or through the application
• Your continued use of SceneFlow after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically.

13. California “Shine the Light” Law

California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. However, SceneFlow does NOT share your personal information with third parties for their direct marketing purposes.

14. Your California Privacy Rights (Additional)

We do not sell, rent, or share personal information with third parties for monetary or other valuable consideration. We have not sold personal information in the past 12 months.

15. Contact Information and Data Controller

For privacy-related inquiries, data access requests, or to exercise your privacy rights, please contact us at the email address above. We will respond within 30 days.

16. Additional Information for EU Users

16.1 Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contractual Necessity: To provide the Service you’ve subscribed to
• Legitimate Interest: To improve our Service, prevent fraud, and ensure security
• Consent: For marketing communications (you can withdraw anytime)
• Legal Obligation: To comply with laws and regulations

16.2 EU Representative

If required by GDPR, we will appoint an EU representative. Currently, users may contact us directly at the email address provided.