Privacy Policy

Last updated: March 25, 2026

1. Who We Are

SceneForge (“we,” “us,” “our”) operates the website at sceneforge.studio and provides an AI-powered product scene generation service. For questions about this policy, contact us at hello@sceneforge.studio.

2. Data We Collect

Account Data

When you create an account via Clerk (our authentication provider), we collect your email address and, if you use Google Sign-In, your name and profile picture. We store your Clerk user ID to identify your account.

Payment Data

When you subscribe to a paid plan, Stripe (our payment processor) collects your payment method details (card number, expiration, CVC), billing address, and billing email. We store only your Stripe customer ID and subscription ID — we never see or store your full card number.

Usage Data

We track the number of image generations and refinements per account to enforce plan limits. For anonymous (non-signed-in) users, we track usage by hashing your IP address (SHA-256). We store your plan tier, generation count, and last reset date.

User Content

When you use SceneForge, you upload product images and enter text prompts. These are sent to Google’s Vertex AI (Gemini model) for processing. For paid plan users with session history enabled, generated images and conversation history are stored in Google Cloud Storage so you can revisit and continue refining sessions.

Technical Data

We automatically collect standard technical data including your browser type, operating system, device type, IP address, and referring URL. This data is collected through server logs and is used for security, debugging, and service improvement.

3. How We Use Your Data

• Provide the service — process your image generation requests, manage your account, and maintain session history
• Process payments — manage subscriptions, billing, and plan enforcement
• Enforce usage limits — track generations per account/IP to enforce plan limits
• Improve the service — analyze usage patterns (in aggregate) to improve features and performance
• Communicate — send transactional emails related to your account or billing
• Prevent abuse — detect and prevent fraudulent or abusive use of the service

4. Third-Party Service Providers

We use the following third-party services to operate SceneForge:

• Google Vertex AI (Gemini / Nano Banana 2) — processes your uploaded images and text prompts to generate scene images. Your content is processed by Google’s AI model but is not used to train Google’s models under our enterprise terms.
• Clerk — provides authentication (email verification, Google Sign-In). Clerk stores your email, profile data, and session tokens.
• Stripe — processes payments and manages subscriptions. Stripe.js collects device and behavioral data (IP address, browser fingerprint, mouse movements) for fraud prevention. See Stripe’s Privacy Policy.
• Firebase / Firestore — stores account data, usage tracking, and session metadata on Google Cloud (project: sceneforge-app, region: us-central1).
• Google Cloud Storage — stores generated images and session history for paid plan users (bucket: sceneforge-sessions, region: us-central1).
• Google Cloud Run — hosts the SceneForge application (region: us-central1).

5. Cookies and Local Storage

SceneForge uses only essential cookies and local storage required for the service to function:

• Clerk session cookie — maintains your authenticated session
• Stripe fraud prevention — Stripe.js sets cookies for payment security
• Generation counter — localStorage tracks anonymous trial usage
• Consent acknowledgment — localStorage records that you acknowledged this policy

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies. If this changes in the future, we will update this policy and request your consent.

6. Data Retention

• Account data — retained while your account is active, deleted within 30 days of account deletion
• Session images and history — retained while your account is active; deleted when you delete a session or your account
• Anonymous trial data — IP hash and usage count retained for up to 1 year
• Payment records — retained as required by applicable tax and financial regulations
• Server logs — retained for up to 30 days for debugging and security

7. Your Rights (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data
• Portability — request your data in a machine-readable format
• Restriction — request that we limit processing of your data
• Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us at hello@sceneforge.studio. We will respond within 30 days.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know — request what personal information we collect and how it is used
• Delete — request deletion of your personal information
• Opt-out of sale — we do not sell your personal information to third parties
• Non-discrimination — we will not discriminate against you for exercising your rights

9. International Data Transfers

Your data is processed and stored in the United States (Google Cloud region: us-central1). By using SceneForge, you consent to the transfer of your data to the United States. We rely on standard contractual clauses and our processors’ certifications for lawful data transfers.

10. Children’s Privacy

SceneForge is not intended for users under the age of 16. We do not knowingly collect personal data from children. If you believe a child under 16 has provided us with personal data, please contact us and we will delete it promptly.

11. AI-Specific Disclosures

• Uploaded images and text prompts are sent to Google’s Gemini AI model (Nano Banana 2) on Vertex AI for image generation.
• We do not use your uploaded images or generated outputs to train any AI models.
• Under our enterprise agreement with Google, your data processed through Vertex AI is not used by Google to improve their models.
• Generated images are watermarked using Google’s SynthID technology, which embeds an imperceptible digital watermark to identify AI-generated content.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (if you have an account) or by posting a prominent notice on our website. Your continued use of SceneForge after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us at: hello@sceneforge.studio