Privacy policy

Last updated: 7 October 2026

1. About this policy

This policy explains what personal data Scene Technologies Ltd ("Scene", "we", "us") collects when you visit scene.io or use our services (the "Service"), why we use it, who we share it with and the choices you have.

We are a company registered in England and Wales (company number 15093585) at 11 Charlotte Place, London, England, W1T 1SJ. You can reach us about anything in this policy at support@scene.io.

We process personal data under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where they apply, the EU GDPR and other privacy laws.

2. Controller and processor

When we are the controller. We decide how and why your data is used for your account, sign-in, billing, support, product analytics, security and our own marketing.

When we are the processor. The content your organisation puts into Scene belongs to your organisation. That includes stories, documents, decks, meeting recordings and the people named in them. For that content your organisation is the controller and we process it on its instructions, under our Terms and our data processing agreement. If you are a colleague, a meeting participant or a viewer of a deck and you have a question about that content, please contact the organisation that uses Scene first. We will help them answer it.

3. What we collect

• Account data: your name, email address, password or single sign-on details, workspace, role and preferences.
• Content: what you and your colleagues add to or create in Scene. That includes text, files, links, images, brand kits, stories, decks, narration scripts and comments.
• Meeting data: if you connect the notetaker, the recordings, transcripts and participant names of the meetings it joins (section 6).
• Voice data: if you train a personal voice, your recordings and the voice model made from them (section 5).
• Dictation audio: what you say when you use the microphone to write (section 7).
• Usage and device data: pages and features used, clicks, session replays, IP address, browser, device, time zone and error reports (section 8).
• Published deck data: how viewers interact with decks you share (section 9).
• Communications: emails, support conversations and feedback you send us.
• Billing data: company name, billing contact and payment records. Card details are held by our payment provider, not by us.

We do not intentionally collect criminal offence data. Special category data can be part of the content you upload, and a personal voice can be biometric data (section 5).

4. Why we use it, and our legal basis

We do not sell your personal data. We do not use your content to train AI models, and our AI providers do not either (section 10).

5. Personal voice

Scene can learn your voice from recordings you make, so decks can be narrated in it. A voice model made from your recordings may count as biometric data, so we treat it with extra care.

• Consent. We only train a voice after you record it yourself and give explicit consent. Our consent text reads: "This is my own voice. I agree to store it for voice generation, and that members of my workspaces can narrate their decks in my trained voice. I can delete my recordings and voice model at any time." We keep a record of when you consented and to which version.
• Your voice only. You may only record and train your own voice. Recording someone else, or uploading another person's audio, is not allowed.
• Who can use it. Members of your workspaces can narrate their decks in your trained voice. Decks narrated in your voice stay in those workspaces, and anyone they are shared with can hear them.
• Where it is processed. Training and synthesis run on GPU servers from RunPod in European data centres. Recordings and models are stored in our AWS storage.
• How long we keep it. We keep your recordings and voice model until you delete them or close your account.
• Deleting it. You can delete your recordings and voice model at any time in Account settings > Voice. That also withdraws your consent. We remove them from our systems within 30 days. Narration already produced in your voice stays in the decks it was made for until those decks are edited or deleted.

Notice for US residents. Some US states, including Illinois, Texas and Washington, have laws on biometric identifiers such as voiceprints. We collect voice data only with your written consent as described above. We use it only to generate narration you and your workspaces ask for. We never sell, lease or trade it, and we do not disclose it except to the processors that run the feature for us. We destroy it when you delete it or close your account, and in any case within three years of your last interaction with Scene.

6. Meeting recording

If you connect your calendar and turn on the notetaker, a bot from our provider Recall.ai can join your meetings. It records audio and video and makes a transcript, and Scene uses them to write summaries, follow-ups and decks.

• Recording captures everyone on the call, not only you. Before recording, you must tell the other participants and get any consent the law requires. Our Terms make this your responsibility.
• The bot joins under a visible name, so participants can see it is there.
• Recall.ai processes recordings in the United States.
• Calendar access is read-only. We read event times, titles, links and attendee emails so the bot knows which meetings to join.
• Recordings and transcripts stay in your workspace until you or your workspace admin delete them, or the account is closed.

7. Dictation

When you speak instead of typing, your audio is turned into text in one of two ways.

• In the browser. Some parts of Scene use your browser's built-in speech recognition. Your browser vendor processes the audio under its own privacy policy. For example, Chrome sends it to Google, and Safari sends it to Apple.
• Through our provider. Other parts send the recording to OpenAI for transcription. It is used only to return the text, and it is not used to train models.

We keep the text, not the audio.

8. Product analytics and error monitoring

• PostHog helps us understand how Scene is used. It records page views, feature use and, with your consent, session replays of what happens on screen. Password fields are always masked. PostHog stores data in the EU. On the scene.io website, PostHog, including session replay, loads only after you accept analytics.
• Sentry collects error reports so we can fix bugs. A report includes what went wrong, your browser and device, and your user ID, name and email so we can follow up. Sentry stores data in Germany and sets no cookies.

You can change your consent for analytics at any time in the cookie settings. See our Cookie policy.

9. Analytics on published decks

When you publish or share a deck, Scene records how people view it, so you can see who opened it and how far they got. For each visit we record:

• an anonymous visitor ID stored in the viewer's browser;
• the pages and slides viewed, time spent and how much narration was played;
• the viewer's IP address, browser and device;
• an approximate city and country, worked out from the IP address.

If a viewer identifies themselves, for example by signing in or replying to a call to action, we can link the visit to them.

You decide whether to share decks and who with. If you add your own analytics tools, such as Google Analytics or Google Tag Manager, to pages you publish, you are responsible for them (see our Terms).

10. AI

Scene uses large language models to turn your material into stories, decks and narration.

• Our main models are Anthropic's Claude models, which we run through Amazon Bedrock in our AWS account. Some features also use OpenAI and ElevenLabs. The full list is on our service providers page.
• No training on your data. Our AI providers do not use your content or prompts to train their models.
• Location. We run models in the UK or EU where we can. Some models are only available in, or route requests to, other regions, including the United States. In that case your request may be processed outside the UK and EU, with the safeguards in section 13.
• Output can be wrong. AI can produce inaccurate or incomplete content. Please review anything Scene makes before you share it.
• No automated decisions. We do not make decisions with legal or similarly significant effects about you using only automated processing.

11. Who we share data with

We use carefully selected providers to run Scene. They act on our instructions under written contracts and may only use your data to provide their service to us. They include:

• cloud hosting and AI;
• meeting recording;
• file and web reading;
• analytics and error monitoring;
• sign-in;
• email and customer support.

The full list, with what each provider does and where it processes data, is on our service providers page.

We may also share data:

• with other members of your workspace, as the Service is designed to do;
• with professional advisers, auditors and insurers;
• if we are required to by law, or to protect the rights, safety or property of Scene, our customers or others;
• with a buyer or investor if we sell or reorganise all or part of our business, under the same protections as this policy.

12. Staff access

A small number of Scene staff can access customer accounts and content. They do so only to provide support, investigate problems, keep the Service secure or improve the product.

• Changes made through our admin tools are logged.
• When staff work inside a workspace to help, their edits may appear as "Scene".
• Staff are bound by confidentiality.
• To keep track of new activity, we post a short notice in our internal Slack when someone creates a new story or deck. It includes the creator's name and email, the workspace name, the title and a link. It does not include the deck's content.
• Bug reports from our staff can include screenshots, which may show customer content.
• We keep a copy of the service emails we send, to check delivery and handle support.

13. International transfers

Our main infrastructure is in AWS London (eu-west-2). Some providers process data in other countries, including the United States (see section 10 and our service providers page).

When personal data leaves the UK or EU, we protect it with one of the following:

• an adequacy decision or the UK-US Data Bridge, where the provider is certified;
• the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses;
• the EU Standard Contractual Clauses.

We also assess each transfer and apply technical measures such as encryption in transit and at rest. You can ask us for a copy of the relevant safeguards at support@scene.io.

14. How long we keep data

Backups follow the same rules and are overwritten on a rolling cycle. We may keep data longer where the law requires it or to resolve a dispute.

15. Security

We protect data with encryption in transit and at rest, access controls, logging and regular reviews. Access to personal data is limited to the people and providers who need it. If a personal data breach puts your rights at risk, we will tell you and the regulator as the law requires.

16. Your rights

You have the right to:

• access the personal data we hold about you;
• correct it;
• have it deleted;
• restrict or object to how we use it;
• receive it in a portable format;
• withdraw consent at any time, without affecting earlier processing.

To use any of these rights, email support@scene.io. We will reply within one month. For content your organisation controls, we will pass your request to that organisation and help it respond.

If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office (ico.org.uk) or your local data protection authority.

17. Children

Scene is a business tool and is not meant for anyone under 18. We do not knowingly collect data from children.

18. Changes to this policy

If we make a material change, we will email account holders at least 30 days before it takes effect and update the date at the top of this page.

19. Contact

Scene Technologies Ltd, 11 Charlotte Place, London, England, W1T 1SJ. Email support@scene.io.