1. Controller
The data controller for the SceneHold service is Ravenna OÜ, Estonian private limited company, registry code 14943751, Tedre tn 16, Kose alevik, Kose vald, Harju maakond 75101, Estonia. Privacy contact: [email protected].
2. What We Process
Account and session data. Sign-in state lives only in transient browser memory and ends on reload; a reusable server-side session record persists until expiry or revocation by your workspace administrator.
Workspace submissions. Sources, intake answers, locked briefs, generated candidates, review records, provenance and gate records persist server-side for the workspace lifetime. these are the substance of the service.
Operational records. Audit events, feature-flag state, retention/deletion records, and cost-ledger entries are kept for security, billing, and evidence purposes.
Do not submit personal data or third-party sensitive material unless your workspace has authorized it.
3. Analytics and Tracking
No analytics, tracking pixels, advertising identifiers, or third-party telemetry run in this build. Any future analytics posture would require separate consent, minimization review, and implementation before activation.
4. Cookies and Browser Storage
This build sets no cookies and stores no authentication tokens in the browser. Browser sessionStorage holds two non-credential records: the dismissal of the informational notice, and resumable upload-operation metadata (upload filename, logical name, project identifier, source kind, declared MIME type, content digest, byte size, operation identifier, and last-updated time. At most 24 entries, keyed to the signed-in workspace/actor). Operation records are removed when the session ends or a different workspace/actor signs in, and always expire with the tab session. See the Cookie Policy for the full verified posture.
5. Third-Party Processing
Payment processing runs through the designated payment control plane; generation may route through external providers under their own terms. The verified subprocessor register is an annex to the Data Processing Addendum, available inside the workspace legal surface and on request at [email protected].
6. Retention and Deletion
Workspace data is retained for the workspace lifetime; deletion requests follow the retention lifecycle. Records are tombstoned and removed per the deletion workflow, with audit evidence preserved. Retained-storage charges may apply to preserved material beyond plan limits as disclosed.
7. Your Rights (GDPR)
As an EU-based controller, Ravenna OÜ honors GDPR rights: access, rectification, erasure, restriction, portability, objection, and complaint to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). Requests: [email protected]. Access and deletion request intake is implemented in the service records system.
8. Contact
Privacy and data-subject requests: [email protected]. Postal: Ravenna OÜ, Tedre tn 16, Kose alevik, Kose vald, Harju maakond 75101, Estonia.