Privacy Policy

Overview

This Privacy Policy explains how InnoventuresAI Inc., a Delaware C corporation, the owner and operator of scenescape.io, collects, uses, discloses, and protects information when you use the website, creator workspace, public viewer, AI generation tools, account features, and related services. References to "we," "us," and "our" mean InnoventuresAI Inc.

This Policy applies to creators with accounts, administrators, visitors to public published worlds, and people who communicate with us. It does not apply to websites, services, or content controlled by third parties, even if they are linked from the Service.

Information you provide

• Account information, such as email address, authentication details handled through Supabase, account identifiers, profile details, plan key, role, and credit information.
• Creator content, such as project names, slugs, descriptions, style prompts, world context, scene prompts, enhanced prompts, reference images, uploaded panoramas, generated or uploaded audio, generated music, hotspot titles, hotspot body text, narration scripts, AI guide settings, and published viewer content.
• AI request content, such as prompts, project context, scene content, hotspot content, model settings, voice preferences, uploaded references, chat messages, and other inputs needed to generate text, images, speech, music, guide suggestions, or guide responses.
• Support and administrative information, such as messages you send us, credit grant requests, feedback, bug reports, and any other information you choose to provide.
• Payment-related information if paid checkout is enabled. Payment details may be collected and processed by a payment processor. We do not need to store full payment card numbers in the Service.

Information collected automatically

• Usage information, such as sign-in events, projects opened, worlds published, AI job type, AI job status, credits charged, generation timestamps, and administrative activity.
• Device and technical information, such as IP address, browser type, operating system, device type, referral page, pages viewed, timestamps, error logs, and performance information.
• Local browser storage information. The creator prototype may store draft projects, active project identifiers, AI settings, and published prototype data in localStorage on your device.
• Cookies or similar technologies used by authentication, hosting, security, preferences, and application functionality.

Public published worlds

If a creator publishes a world, the published project may be accessible to anyone with the link and may include scene names, descriptions, panorama images, generated or uploaded media, hotspot text, narration, music, and AI guide behavior configured by the creator.

Do not include private, confidential, sensitive, regulated, or third-party information in a published world unless you have permission and a lawful basis to publish it. Unpublishing or deleting content may not remove copies already accessed, cached, saved, or shared by viewers or third parties.

How we use information

• To provide, operate, maintain, secure, debug, and improve the Service.
• To authenticate users, manage accounts, maintain sessions, enforce plan limits, calculate AI credits, administer credit grants, and support billing if paid features are enabled.
• To create, store, render, publish, and display projects, scenes, hotspots, assets, narration, background music, AI guide interactions, and public viewer experiences.
• To submit prompts, content, files, settings, and metadata to AI and media providers so they can generate requested output.
• To detect, prevent, and respond to fraud, abuse, security incidents, policy violations, prohibited content, and technical problems.
• To communicate with you about account, service, security, billing, support, product, and legal matters.
• To comply with law, enforce our Terms, protect rights and safety, and preserve records where needed.

AI and media providers

The Service may use third-party AI and media providers to power generation and chat features. Depending on the feature and configuration, those providers may include OpenAI for text, planning, prompt enhancement, image generation, and related AI workflows; Google Gemini for speech generation, AI guide chat, and AI guide live voice; FAL for music generation and image upscaling; and Supabase for authentication, database, and storage-related infrastructure.

When you use these features, the relevant prompts, project context, scene details, files, chat messages, settings, and technical metadata may be sent to those providers. Their processing is governed by their own terms, privacy notices, data processing commitments, and retention rules.

How we disclose information

• Service providers and subprocessors that help us host, store, secure, authenticate, process payments, operate, support, monitor, or improve the Service.
• AI and media providers when needed to process your generation, speech, music, upscaling, or AI guide requests.
• The public, other users, or viewers when you publish a world, share a link, or otherwise make content available through the Service.
• Administrators and authorized personnel who need access for support, abuse prevention, credit management, security, billing, or operational purposes.
• Law enforcement, regulators, courts, or other parties when we believe disclosure is required by law or necessary to protect rights, safety, security, or the integrity of the Service.
• Parties involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction, subject to appropriate confidentiality or legal protections where required.
• Other parties with your consent or at your direction.

Retention

We retain information for as long as reasonably needed to provide the Service, maintain accounts, support published worlds, calculate credits, keep security and audit records, resolve disputes, comply with legal obligations, and enforce agreements.

Draft data stored in your browser localStorage remains on that device until you clear it, the browser removes it, or the application overwrites it. Generated files and published content may remain available until deleted, unpublished, or removed according to Service functionality and operational backups.

Security

We use reasonable administrative, technical, and organizational measures designed to protect information. These measures may include authentication, row-level access controls, scoped storage access, provider access controls, and operational monitoring.

No online service is completely secure. You are responsible for choosing a strong password, protecting your account credentials, limiting access to shared links, and avoiding the upload or publication of information that should not be exposed.

Your choices and controls

• You can choose what content to create, upload, generate, save, publish, share, unpublish, or delete through available Service controls.
• You can clear localStorage in your browser to remove locally stored prototype data from that device, though this may affect drafts and settings stored only in the browser.
• You can contact us to request access, correction, deletion, export, or restriction of personal information, subject to identity verification, technical limitations, legal requirements, and legitimate business needs.
• You can stop using AI features if you do not want relevant prompts, files, settings, or context sent to AI providers.
• You can opt out of non-essential marketing communications where such communications are offered. Service, security, legal, and transactional messages may still be sent.

International processing

The Service and its providers may process information in the United States and other countries. These countries may have privacy and data protection laws that differ from the laws where you live. Where required, we rely on appropriate legal mechanisms for cross-border transfers.

Regional privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or appeal of a privacy decision. Some jurisdictions also provide rights to opt out of certain data sales, sharing, targeted advertising, or profiling.

We do not intend to sell personal information in the conventional sense. If future analytics, advertising, or data-sharing practices trigger opt-out rights under applicable law, we will provide the required notices and controls.

Children's privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to the Service without appropriate consent, contact us and we will take reasonable steps to delete it.

Schools, parents, guardians, and organizations using the Service with minors are responsible for obtaining any required consents and ensuring that published content and AI use are appropriate for those users.

Changes to this Policy

We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify users, such as posting the updated Policy, updating the last updated date, or providing in-product notice.

Your continued use of the Service after an updated Policy becomes effective means the updated Policy applies to your continued use.

Contact

Privacy requests, support questions, or account issues can be sent to support@innoventuresai.com. Other inquiries can be sent to hello@innoventuresai.com. The website for the Service is https://scenescape.io.