This is a translation provided for convenience. In case of discrepancy, the French version prevails.
This policy explains what personal data Scenorama processes, why, for how long, and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
Data controller
Antium Digital (entreprise individuelle Franck MEYER), 365 route de Massée, 47310 Moirax, France. Contact for any question about your data: hello@scenorama.app.
Data processed and purposes
| Data | Why | Legal basis |
|---|---|---|
| Account: email, name, password (hashed, unreadable by us), export signature | Creating and securing your account, signing you in, personalising your exports | Performance of the contract |
| Content: video links and files, extracted images, notes, drawings, logos | Providing the extraction, annotation and export service | Performance of the contract |
| Subscription: plan, dates, Stripe identifiers, invoices | Managing payments, invoicing and accounting obligations | Contract and legal obligation |
| Security: IP address, date and type of action (sign-in, password change), technical logs | Preventing fraud, securing the account, diagnosing incidents | Legitimate interest |
| Service emails | Address confirmation, security alerts, subscription, renewal reminders | Contract and legal obligation |
We do not send any newsletter without your consent, we do not sell any data and we do not use any advertising or tracking tools.
Payments
Payments are handled by Stripe, which collects your card details directly. Scenorama only receives limited information (card type and last 4 digits, payment status). Stripe acts as a separate data controller for its anti-fraud obligations: see Stripe's privacy policy.
Recipients and processors
- Infomaniak Network SA (Switzerland): hosting of the service, the data and emails.
- Stripe Payments Europe Ltd (Ireland): payment and invoicing. Certain data may be transferred to the United States, under the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.
Switzerland benefits from an adequacy decision of the European Commission. When you provide a video link, our servers retrieve the video from the platform concerned (YouTube, TikTok, Instagram, etc.) without passing on any data about your account.
Retention periods
| Data | Period |
|---|---|
| Account and content (projects, notes, logos) | Until the account is deleted; erased immediately upon deletion |
| Videos retrieved from a link | 7 days (technical cache) |
| Uploaded videos not used | 30 days |
| Processing history | 14 days |
| Backups | Rolling 14 days |
| Invoices and accounting records | 10 years (Article L123-22 of the French Commercial Code) |
| Technical and security logs | 12 months maximum |
Cookies
Scenorama only uses two strictly necessary cookies, which are exempt from consent: a session cookie (to keep you signed in) and a security cookie protecting against forged requests (CSRF). No audience measurement, advertising or social media cookies are set. During payment, the Stripe page sets its own cookies required for the security of the transaction.
Security
Encrypted connection (HTTPS), hashed passwords, strict separation of data between users, firewall-protected server, automatic security updates, daily backups and an email alert whenever a password is changed.
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability with regard to your data, as well as the right to set out instructions regarding what happens to your data after your death.
- Change your information: “My account”.
- Retrieve your content: PDF, PowerPoint, web page and ZIP exports from each project.
- Erase everything: “My account” → “Delete my account”.
- Any other request: hello@scenorama.app. We reply within one month.
If you consider that your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority (cnil.fr).