Effective date: 29 July 2026
1. What Data We Collect
When you create an account or use SceneForge AI, we may collect:
- Account data: name, email address, and hashed password.
- Usage data: number of AI calls made, tools used, and timestamps of activity.
- Payment data: plan purchased and proof-of-payment images you upload. We do not store card numbers.
- Technical data: IP address, browser type, and operating system (for security and abuse prevention).
Why this matters: Required by Google, Facebook, Stripe and most ad platforms to operate legally in their ecosystems.
2. How We Use Your Data
- To provide, operate, and maintain the SceneForge AI platform.
- To process license purchases and manage your account.
- To send transactional emails (account confirmation, payment approval).
- To prevent fraud, abuse, and unauthorised access.
- To improve the service based on aggregate, anonymised usage patterns.
We do not sell, rent, or trade your personal data to third parties. Your prompts are not used to train AI models.
3. Cookies
SceneForge AI uses the following cookies:
- Session cookie: keeps you logged in during your visit (expires when you close the browser).
- Theme preference: stores your light/dark mode choice in
localStorage (not transmitted to our server).
We do not currently use advertising or third-party tracking cookies. If this changes, this policy will be updated and you will be notified.
4. Third-Party Services
We use the following third-party services to operate the platform:
- Groq / OpenRouter: AI inference providers that process your text prompts. Their APIs are called server-side; your prompts may be processed on their infrastructure subject to their privacy policies.
- Google Fonts: loaded on public pages; Google may log your IP as part of font delivery.
5. Data Retention
We retain your account data for as long as your account is active. If you request deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or accounting purposes.
6. Your Rights
You have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us via the Contact page.
7. Security
Passwords are stored as bcrypt hashes. All AI API keys are held server-side and never transmitted to the browser. We use CSRF tokens on all state-changing requests.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced on the platform. Continued use after changes constitutes acceptance.
9. Contact
Questions about this policy? Reach us through the Contact page.