Personal Data Processing Consent

1. Personal Data We May Process

Depending on how you use Scenly, we may process the following categories of personal data:

• Account data, such as email address, authentication data, account identifiers, selected language, and profile settings.
• Technical data, such as IP address, device and browser information, logs, cookie identifiers, session data, security events, and approximate region derived from technical information.
• Service usage data, such as pages viewed, feature usage, subscription status, limits, and interactions with service controls.
• User-provided content, such as character settings, prompts, messages, uploaded files, images, feedback, and support requests.
• Payment-related data, such as payment status, plan type, transaction identifiers, and billing metadata. Full payment card details are normally processed by payment providers and are not stored by Scenly unless explicitly stated otherwise.
• Communication data, such as messages submitted through the website feedback form and our replies.

2. Purposes of Processing

We process personal data only for defined purposes, including:

• Creating, maintaining, and protecting your account.
• Providing access to AI character, chat, personalization, memory, subscription, and other platform features.
• Generating, storing, moderating, and displaying content requested or submitted by you.
• Preventing fraud, spam, abuse, unauthorized access, and violations of our terms.
• Providing support, processing feedback, and responding to user requests.
• Processing payments, subscriptions, refunds, limits, and service entitlements.
• Improving service reliability, safety, usability, and performance.
• Complying with applicable legal obligations and protecting our legal rights.

3. Legal Bases for Processing

Depending on the context, personal data may be processed on the basis of your consent, the need to perform a contract with you, compliance with legal obligations, or our legitimate interests in operating and protecting the service.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that occurred before withdrawal and may not affect processing that is necessary for contract performance, legal compliance, security, or legitimate interests recognized by applicable law.

4. Data Sharing and Processors

We may share limited personal data with service providers acting on our behalf where this is necessary for hosting, storage, analytics, payments, authentication, security, email delivery, AI infrastructure, moderation, or support.

We do not sell users personal data. Third parties may process data only for the purposes described in this document, our Privacy Policy, applicable agreements, or as required by law.

5. Storage and Retention

Personal data is stored only for as long as reasonably necessary for the purposes described above, unless a longer retention period is required by law, accounting rules, dispute resolution, fraud prevention, or security needs.

Some data may be deleted or anonymized after account deletion, while certain records may be retained where required to comply with legal obligations, prevent abuse, resolve disputes, or protect legal rights.

6. Your Rights

Subject to applicable law, you may have the right to:

• Request access to the personal data processed about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data where legally available.
• Request restriction of processing or object to certain processing activities.
• Withdraw consent where processing is based on consent.
• Request a copy of certain data in a portable format, where applicable.

7. User Responsibility

Please do not submit unnecessary sensitive personal data in prompts, character descriptions, messages, uploaded files, or feedback forms. If you provide personal data of another person, you are responsible for ensuring that you have a lawful basis to do so.

8. Marketing Communications

Consent for marketing communications is optional. If marketing messages are enabled, you can withdraw consent or change notification preferences through account settings or the unsubscribe mechanism provided in the message.

9. Changes to This Document

We may update this document when the service, processing practices, or legal requirements change. The effective date above shows when this document was last updated.