Privacy Policy
Last updated: 17 August 2026
This policy explains what Sceina does with your personal data, why, for how long, and who else touches it. It covers the sceina.com website, the editor, and access through the MCP interface.
Data controller
The controller is Sceina, trading name of the sole proprietorship of Claude Prince-Emmanuel Miakouikila Molongandzeyi, Appartement 504, 15 avenue de Grammont, 76100 Rouen, France. Sceina is not required to appoint a data protection officer; requests are handled directly at [email protected].
What we collect
- Account — email address, name and profile picture, transmitted by our authentication provider. We never receive your password.
- Billing — customer identifier, subscribed plan, transaction history, credit and allowance balances. Card details are handled by Stripe and never reach our servers.
- Your content — projects and their timeline, imported media, generated images and videos, exports, voice samples used for cloning, and conversations held with the built-in assistant.
- Usage — monthly consumption counters (storage, renders, generations, searches) used to enforce the limits of your plan.
- Security records — refused accesses (expired session, project not owned, quota reached, rate limit) and, for administrative actions carried out on an account, the identity and IP address of the administrator who performed them.
- Support — the tickets and messages you send us, along with the address you sent them from.
We do not build a browsing profile. Successful navigation is not logged: only refusals are, and only to keep the service secure and to explain a blocked action to you.
Why, and on what legal basis
- Running the service, storing your projects, producing your renders — performance of the contract.
- Billing, collection, accounting records — legal obligation and performance of the contract.
- Preventing abuse, fraud and overload; keeping accounts secure — legitimate interest.
- Answering your support requests and improving the product — legitimate interest.
- Sending a voice sample to a cloning provider — your consent, given each time you create a voice.
Your content and AI models
We do not use your projects, your media or your voices to train any model, ours or anyone else's. When you trigger a generation, the strictly necessary content is sent to the provider concerned solely to return the requested result, under an API agreement that does not authorise training on that content.
Who processes data on our behalf
Sceina sells nothing to anyone and shares nothing for advertising purposes. The following providers process data on our instructions, for the sole purpose stated:
| Provider | Role | Processing location |
|---|---|---|
| Clerk | Accounts, sign-in, sessions, API keys | United States |
| Stripe | Subscriptions, top-ups, invoicing | Ireland / United States |
| Neon (Databricks) | Main database | European Union — Frankfurt |
| Cloudflare R2 | Storage of your media, proxies and exports | European Union — Western Europe |
| Railway | Hosting of the application and its services | European Union — Frankfurt |
| Amazon Web Services | Video rendering (Remotion Lambda) | European Union |
| Upstash | Cache and rate limiting | European Union |
| Sentry | Error monitoring | European Union / United States |
| Vercel Analytics | Cookieless audience measurement | United States |
| BytePlus | AI image and video generation | Singapore |
| fal.ai | AI video generation (secondary provider) | United States |
| Fish Audio | Voice synthesis and cloning | Outside the European Union |
| Mistral AI | Transcription and voice synthesis | France |
| Anthropic | Assistant and shot analysis | United States |
| OpenAI | Assistant (alternative model) | United States |
| DeepSeek | Assistant (alternative model) | China |
| Replicate | Temporary hosting of reference images | United States |
| Pexels, Pixabay | Stock footage search | Germany / United States |
A provider is only called when the corresponding feature is used: no generation means no data leaves for a generation provider.
Transfers outside the European Union
Your account, your database and your media stay in the European Union. Some providers listed above are established outside the EU: those transfers rest on the European Commission standard contractual clauses, supplemented where applicable by the provider's adherence to the EU-US Data Privacy Framework. You may obtain a copy of the safeguards in place by writing to us.
How long we keep it
- Account and content — for as long as your account is open. On deletion, erased within 30 days.
- Invoices and accounting records — 10 years, as required by the French Commercial Code. These records survive account deletion.
- Support exchanges — 3 years after the last contact.
- Security and technical logs — 90 days. This covers denied access attempts, the tool-call log and application errors, all of which may contain an account identifier or an email address.
- Read notifications — 90 days after you open them. Unread ones are kept until you do.
- Administrative audit trail — 3 years. It records which staff member accessed, exported or changed an account, and is deliberately the longest-lived record we keep: a short audit trail protects whoever abuses it, not whoever is affected.
- Technical caches — 24 hours or less.
Your rights
You have the right to access, rectify, erase, restrict, object, and port your data, and to give instructions on its fate after your death. Write to [email protected]. We reply within one month; we may ask for proof of identity where there is reasonable doubt.
If our answer does not satisfy you, you may lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr.
Cookies
Sceina only uses cookies that are strictly necessary to operate the service: the session cookie that keeps you signed in, and the security cookies of our authentication provider. They cannot be disabled without making sign-in impossible.
Audience measurement is cookieless and does not track you across sites. We use no advertising cookies, no social plugins and no third-party tracking — which is why the site does not display a consent banner. Should that ever change, your consent would be requested beforehand.
Changes
This policy may change as the service evolves. Any substantial change is announced by email or in the application before it takes effect. The date at the top of the page is the date of the version in force.