Privacy Policy

Last updated: 10 April 2026

1. Introduction

SceneShot Ltd ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use SceneShot ("the Service").

2. Data Controller

SceneShot Ltd is the data controller for personal data processed through the Service. Contact: [email protected].

3. Data We Collect

Account Information

  • Name, email address, and profile picture (via Google OAuth or email signup)
  • Payment information (processed by Stripe — we do not store card details)

Usage Data

  • Product images and brand assets you upload
  • Generated images, videos, and text created through the Service
  • Shopify store data (product titles, prices, images) when you connect a store
  • Generation settings and preferences

Technical Data

  • IP address, browser type, device information
  • Session cookies for authentication

4. How We Use Your Data

  • To provide and improve the Service
  • To process payments and manage your account
  • To generate AI content based on your inputs
  • To send transactional emails (generation complete, low credits, etc.)
  • To detect and prevent abuse

5. Third-Party Services

We share data with the following third parties as necessary to provide the Service:

  • Google (Gemini API, Veo API): Product images and text prompts are sent to Google's AI models for generation. Google's data processing terms apply. On the paid tier, Google states that content is not used to improve their products.
  • Stripe: Payment processing for direct website signups. Stripe's privacy policy applies to payment data.
  • Shopify: When you install our Shopify app or connect a store, we access product data via Shopify's API. Subscription billing for Shopify merchants is handled through Shopify's Billing API.
  • DigitalOcean Spaces: Generated images and videos are stored on DigitalOcean's cloud infrastructure.
  • Resend: Transactional and marketing emails are sent via Resend.

6. Data Retention

We retain your account data for as long as your account is active. Generated content is stored until you delete it or your account is terminated. We may retain anonymised usage statistics indefinitely for service improvement.

7. Your Rights (GDPR)

If you are in the UK or EU, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict processing of your data
  • Data portability — receive your data in a structured format
  • Withdraw consent at any time

To exercise these rights, email [email protected]. We will respond within 30 days.

8. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), secure authentication, and access controls. However, no method of transmission over the internet is 100% secure.

9. Children

The Service is not intended for anyone under 18. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or through the Service.

11. Contact

For privacy-related enquiries, contact [email protected].