Privacy Policy

Last updated: October 5, 2026

1. Who We Are

SceneForge (“we,” “us,” “our”) operates the website at sceneforge.studio and provides an AI-powered product scene generation service. For questions about this policy, contact us at hello@sceneforge.studio.

2. Data We Collect

Account Data

When you create an account via Clerk (our authentication provider), we collect your email address and, if you use Google Sign-In, your name and profile picture. We store your Clerk user ID to identify your account.

Payment Data

When you subscribe to a paid plan, Stripe (our payment processor) collects your payment method details (card number, expiration, CVC), billing address, and billing email. We store only your Stripe customer ID and subscription ID — we never see or store your full card number.

Usage Data

We track the number of image generations and refinements per account to enforce plan limits. For anonymous (non-signed-in) users, we track usage by hashing your IP address (SHA-256). We store your plan tier, generation count, and last reset date.

User Content

When you use SceneForge, you upload product images and enter text prompts. These are sent to Google’s Vertex AI (Gemini model) for processing. For paid plan users with session history enabled, generated images and conversation history are stored in Google Cloud Storage so you can revisit and continue refining sessions.

Technical Data

We automatically collect standard technical data including your browser type, operating system, device type, IP address, and referring URL. This data is collected through server logs and is used for security, debugging, and service improvement.

3. How We Use Your Data

Provide the service — process your image generation requests, manage your account, and maintain session history
Process payments — manage subscriptions, billing, and plan enforcement
Enforce usage limits — track generations per account/IP to enforce plan limits
Improve the service — analyze usage patterns (in aggregate) to improve features and performance
Communicate — send transactional emails related to your account or billing, and occasional product updates or offers; you can opt out of non-essential email anytime by replying to any such email or writing to hello@sceneforge.studio
Prevent abuse — detect and prevent fraudulent or abusive use of the service

4. Third-Party Service Providers

We use the following third-party services to operate SceneForge:

Google Vertex AI (Gemini / Nano Banana 2) — processes your uploaded images and text prompts to generate scene images. Your content is processed by Google’s AI model but is not used to train Google’s models under our enterprise terms.
Clerk — provides authentication (email verification, Google Sign-In). Clerk stores your email, profile data, and session tokens.
Stripe — processes payments and manages subscriptions. Stripe.js collects device and behavioral data (IP address, browser fingerprint, mouse movements) for fraud prevention. See Stripe’s Privacy Policy.
Firebase / Firestore — stores account data, usage tracking, and session metadata on Google Cloud (project: sceneforge-app, region: us-central1).
Google Cloud Storage — stores generated images and session history for paid plan users (bucket: sceneforge-sessions, region: us-central1).
Google Cloud Run — hosts the SceneForge application (region: us-central1).

5. Cookies and Local Storage

SceneForge uses only essential cookies and local storage required for the service to function:

Clerk session cookie — maintains your authenticated session
Stripe fraud prevention — Stripe.js sets cookies for payment security
Generation counter — localStorage tracks anonymous trial usage
Consent acknowledgment — localStorage records that you acknowledged this policy

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies. If this changes in the future, we will update this policy and request your consent.

6. Data Retention

Account data — retained while your account is active, deleted within 30 days of account deletion
Session images and history — retained while your account is active; deleted when you delete a session or your account
Anonymous trial data — IP hash and usage count retained for up to 1 year
Payment records — retained as required by applicable tax and financial regulations
Server logs — retained for up to 30 days for debugging and security

7. Your Rights (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — request correction of inaccurate data
Erasure — request deletion of your personal data
Portability — request your data in a machine-readable format
Restriction — request that we limit processing of your data
Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us at hello@sceneforge.studio. We will respond within 30 days.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

Know — request what personal information we collect and how it is used
Delete — request deletion of your personal information
Opt-out of sale — we do not sell your personal information to third parties
Non-discrimination — we will not discriminate against you for exercising your rights

9. International Data Transfers

Your data is processed and stored in the United States (Google Cloud region: us-central1). By using SceneForge, you consent to the transfer of your data to the United States. We rely on standard contractual clauses and our processors’ certifications for lawful data transfers.

10. Children’s Privacy

SceneForge is not intended for users under the age of 16. We do not knowingly collect personal data from children. If you believe a child under 16 has provided us with personal data, please contact us and we will delete it promptly.

11. AI-Specific Disclosures

Uploaded images and text prompts are sent to Google’s Gemini AI model (Nano Banana 2) on Vertex AI for image generation.
We do not use your uploaded images or generated outputs to train any AI models.
Under our enterprise agreement with Google, your data processed through Vertex AI is not used by Google to improve their models.
Generated images are watermarked using Google’s SynthID technology, which embeds an imperceptible digital watermark to identify AI-generated content.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (if you have an account) or by posting a prominent notice on our website. Your continued use of SceneForge after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us at: hello@sceneforge.studio

Video credits and saved videos

Video drafts are saved locally in your browser so you can return after signing in or paying. Clear site data on shared devices to remove those drafts. For video generation, we store your opening image, motion prompt, generation settings and resulting video in your account, and send the opening image and prompt to our AI provider (Google Cloud). Saved media is served through authenticated account access. We retain saved videos while your account remains active; contact support to delete video media or your account. Billing records may be retained as required for accounting and fraud prevention.

We store optional video quality ratings and the first time you request each MP4 download to understand product usefulness. A download request does not tell us whether you published a video. This measurement uses your existing account records, without adding analytics cookies.