Legal
Privacy policy.
Last updated 27 October 2026
“Scenyn”, “we” and “us” mean the service at scenyn.com and the people who run it. Questions about this policy go to [email protected].
What we collect
- Your account. Your email address, your name if you give one, and your password, stored only as a one-way scrambled hash (scrypt) that can’t be turned back into the password. We also note when the account was made and last signed in, and whether it’s an owner or member account.
- Signing in. A session cookie holds a random token. We keep a fingerprint (hash) of that token, when it was made and last used, and your browser’s description of itself (its user agent).
- Protecting sign-in. To stop password guessing, we count failed sign-in and sign-up attempts by email address and network (IP) address. These records are deleted after 24 hours.
- Keeping the site safe. To spot stolen accounts and abuse (for example many accounts made to collect free credits, or topics our rules don’t allow), we log when your account signs up, signs in or fails to, makes or starts a video, or has a topic or a run refused, with the network (IP) address and browser description it came from. These records are deleted after 90 days.
- What you make. Your topics and scripts and everything made from them: research notes, narration audio, shot plans, the pictures found or made, renders, captions and licence reports. Also the files you upload (pictures, clips, music, a logo) and your brand kit.
- Email preference. Whether you want emails when a video is ready or has stopped.
- Error reports. When something breaks, we record what went wrong, the part and path of the page where it happened, and which account it was. We keep the latest 2,000 reports.
- Payments. When you buy a plan, the payment is handled by our payment provider (Stripe). We keep its customer and subscription references, your plan and the amounts paid, and never see your full card details.
What we don’t do
No advertising. No selling or renting personal data. No analytics or tracking scripts on our pages. The one thing our pages load from elsewhere is the home page’s background video (from 21st.dev), and it carries no tracking.
Why we use it
- To run your account and make, store and show your videos (the agreement between you and us).
- To keep the service safe: stopping password guessing, finding and fixing errors (our legitimate interest in a secure service).
- To email you about your videos, unless you turn those emails off.
Services that help make your videos
Making a video means sending parts of your topic or script to outside services. Each gets only what its step needs.
| Service | What it receives | Why |
|---|---|---|
| Anthropic (Claude) | Your topic or script, research notes, candidate pictures | Research, writing, the shot plan, the topic safety check, checking pictures against the words |
| ElevenLabs | The narration text | Recording the voice |
| WaveSpeed or fal | Descriptions of the pictures to make | AI pictures and animation |
| Wikimedia Commons, Openverse, NASA, Internet Archive, Europeana, Pexels, Pixabay, Poly Haven, Google image search (through Serper) | Search words drawn from your topic or script | Finding real footage and photos |
| OpenStreetMap (Nominatim) | Place names | Drawing maps |
| YouTube | A clip’s link, only if you add one | Fetching that clip |
| 21st.dev | Your browser’s request for the home page’s background video (like any website, it sees your network address) | Serving that video |
| Railway, Cloudflare, Amazon Web Services | What the site stores and sends | Servers, network and security, file storage |
| Our email provider | Your email address, name and the video’s title | Video ready and stopped emails |
| Stripe (when you buy a plan) | Your email address, account reference and plan | Payments |
Some of these services are based in, or store data in, other countries, including the United States.
Cookies and browser storage
- One cookie: the session cookie that keeps you signed in. It’s strictly necessary, can’t be read by scripts on the page, lasts 30 days from your last visit, and is removed when you sign out.
- Your theme: whether you chose the light or dark look, kept in your browser’s local storage.
- Cloudflare, which protects the site, may set its own strictly necessary security cookies to tell people from bots.
Because there are no advertising or analytics cookies, there’s nothing to opt in to.
How long we keep it
- Your account: for as long as it exists.
- Sessions: 30 days after you last used them.
- Failed sign-in records: 24 hours.
- Error reports: the latest 2,000.
- Videos: until you delete them. Deleting a video removes it from your account; its files can stay in our storage for a while before they’re erased. Ask us and we’ll erase them sooner.
Who can see your videos
You, and the site’s owner, who runs Scenyn and can see every video to keep the service working. Members can’t see each other’s videos.
Your choices and rights
- To see, correct, export or delete your personal data, or to close your account, write to [email protected] from the email address on the account. There’s no button for deleting an account yet; we do it on request.
- You can turn video emails off in the app.
- Under India’s Digital Personal Data Protection Act, 2023 you can also withdraw consent, have a grievance about your data heard, and name someone to act for you if you die or can’t act yourself. If our Grievance Officer (see the terms) doesn’t resolve your complaint, you can take it to the Data Protection Board of India.
- Depending on where you live, you may also have the right to object, to restrict how we use your data, and to complain to your data protection authority.
Security
Passwords are hashed, the site runs over HTTPS, the session cookie is locked to the app’s address and hidden from page scripts, and the keys for outside services stay on our servers. No system is perfectly safe, so please use a password you don’t use anywhere else.
Children
Scenyn is for adults: you must be 18 or older to make an account, and we don’t knowingly collect data about anyone younger. If you think a child has made an account, write to us and we’ll delete it.
Changes
When this policy changes, the date at the top changes too. If a change matters, we’ll tell account holders by email or in the app first.