sceneorbit

Privacy Policy

Last updated August 3, 2026

1. What this covers

This policy explains how Sceneorbit handles personal data when you use sceneorbit.ai and connected surfaces (API, CLI, MCP connectors, plugins). The data controller is MW Birkelund (org. no. 935 165 253), Tollbugata 6, 6002 Ålesund, Norway — contact privacy@sceneorbit.ai.

2. Data we process

  • Account data — email, name and authentication data, handled by our auth provider (Supabase).
  • Content— prompts, uploads (which may include images or voices of people) and generated outputs, stored so your library works across devices. Media files are served from unguessable but unauthenticated URLs (anyone who has a file’s exact link can open it) — don’t upload material that can’t tolerate that, and delete generations to remove them.
  • Usage and billing — credit consumption, plan, generation events and API-key activity. Payment card details go directly to Stripe; we never see them.

3. How generation works

When you generate, your prompt and any reference media are sent to the third-party model that powers the chosen tool — for example fal.ai (hosting models from ByteDance, Google, Kling, Black Forest Labs and others), ElevenLabs for voice, and Anthropic for planning and script assistance. Each provider processes the data to produce your output under their own terms. We name the provider next to every model in the product.

4. Legal bases

We process data to perform our contract with you (running the service), for legitimate interests (security, abuse prevention, improving the product), and to meet legal obligations (bookkeeping). Where consent is required, we ask for it.

5. Retention and deletion

Content stays until you delete it or your account. Deleting your account removes your library, projects and keys; billing records are kept as long as bookkeeping law requires. You can delete individual generations at any time.

6. Your rights

Under GDPR you can access, correct, export and delete your data, object to processing and complain to a supervisory authority (in Norway: Datatilsynet). Write to privacy@sceneorbit.ai and we will respond within a month.

7. Transfers

Our processors may run infrastructure outside the EEA (for example in the United States). Transfers rely on the EU–US Data Privacy Framework or standard contractual clauses.

8. Cookies

We use only cookies necessary to keep you signed in and the service secure — no third-party advertising trackers.

9. Changes

We announce material changes in the product or by email before they take effect.