Privacy Policy

The program records your terms acceptance, links, referrals, commissions and payout references. Partners see pseudonymous referral identifiers, without customer email addresses or payment details. Stripe Connect collects the identity and bank information needed for payouts directly. Commissions are kept in a financial ledger; deleting an account closes partner access while retaining records needed for accounting and refunds. Referral tokens expire after 60 days; unclaimed expired tokens are removed after another 30 days. Aggregate statistics contain no visitor token. Browser tracking requires separate consent, which can be withdrawn from the cookie policy.

The data controller is IADEM, a French sole proprietorship, 11B avenue de l’Harmonie, 59650 Villeneuve-d’Ascq, France.

Contact for any question about your data (data protection contact): contact@scenby.com.

• Account: e-mail address, name (optional), password (hashed), Google identifier if you choose that sign-in method, language and preferences.
• Content you provide: briefs, product descriptions and photos, product page URLs, voice samples, photos or videos of people.
• Generated ads: videos, scripts, voice-overs, captions and generation metadata (engine used, duration, format).
• Billing: subscribed plan, history of ads used, invoices. Card data is processed exclusively by Stripe.
• Technical data: IP address, browser, device, operating system, pages visited, timestamps of sign-ins and sensitive actions.
• Approximate location (audience measurement, subject to your consent): country, city and coordinates rounded to the nearest hundredth of a degree (~1 km). It is derived from your IP address by our host Vercel as the request passes through — no IP address is sent to any third-party geolocation service, and your IP address is never stored in clear text: we keep only a salted fingerprint of it. This location tells us where our audience comes from; it cannot locate an individual.
• Communications: e-mails to support, ratings and feedback left on your ads.

No training data. Your content (briefs, photos, voices, ads) is never used to train artificial intelligence models — neither by IADEM nor by its processors (API access with training contractually excluded).

Photos and voices of people. Processing the image or voice of an identifiable person relies on that person's explicit consent, which you confirm at upload time and for which you keep proof (see the Acceptable Use Policy).

IADEM relies on the following processors (Article 28 GDPR), each bound by a data processing agreement. The list reflects the services Scenby actually uses.

Your account data and ads are stored in the European Union (Paris). Some processors handle data in the United States or Australia for the duration of processing. These transfers are governed by the Standard Contractual Clauses adopted by the European Commission (Decision 2021/914) and, where applicable, by an adequacy decision. You may obtain a copy on request at contact@scenby.com.

Under Articles 15 to 22 GDPR, you have the following rights:

• Access and portability: export your data from your account Settings.
• Rectification: update your information at any time in Settings.
• Erasure: delete your account from Settings → Security; your ads and source files are purged, only invoices are kept for the legal period.
• Objection and restriction: object to processing based on legitimate interest, or withdraw your consent to audience measurement (see the Cookie Policy).

For any other request: contact@scenby.com. We respond within one month (extendable by two months for complex requests). Proof of identity may be requested in case of reasonable doubt.

If you believe your rights are not respected, you may lodge a complaint with the French supervisory authority, the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — cnil.fr — or with the supervisory authority of your EU country of residence.

• Encryption in transit (TLS) and at rest with our hosting providers.
• Per-account data isolation (database-level access rules).
• Hashed passwords, never stored in plain text; bot protection on sign-up and sign-in.
• Third-party service keys kept server-side only.
• In the event of a data breach posing a risk to your rights, you are informed within 72 hours of its discovery, and the CNIL notified.

Scenby is reserved for adults acting in a professional capacity. No data is knowingly collected from minors; any account identified as such is deleted.

This policy may change. The version date appears at the top of the page; any substantial change is notified to you by e-mail or in the application before it takes effect.

IADEM — 11B avenue de l’Harmonie, 59650 Villeneuve-d’Ascq, France — contact@scenby.com.