Privacy Policy

What SceneAlly Is (and isn't)

SceneAlly is a creator-economy discovery platform with three paths:

• Creators discover shoot locations ("Rental Scenes") and creator opportunities ("Creator Drops").
• Homeowners/Hosts list Rental Scenes.
• Businesses list as Partner Businesses to connect with creators for promos, paid UGC, affiliate deals, product placement, events, collaborations, and partnerships.

Scope

This Policy applies to information collected through the Platform. It does not apply to:

• third-party websites or services you access through links on the Platform,
• third-party payment processors (e.g., Stripe),
• communications or transactions conducted off-platform (email, phone, text, in-person, etc.).

Those third parties have their own privacy policies and practices.

Information We Collect

We collect information in three ways: (A) information you provide, (B) information collected automatically, and (C) information from service providers.

A) Information you provide

Depending on how you use the Platform, you may provide:

Account & profile information

• name or username
• email address
• password (stored in hashed form by WordPress; we do not store your plaintext password)
• account type (Creator, Homeowner/Host, Business)
• optional profile details you choose to add

Listing & content information

• listing title, description, photos, amenities/attributes
• general location information you provide (may include neighborhood/city/region; exact addresses should only be shared if you choose)
• business details such as website, contact name, optional contact email, affiliate link (if provided)
• any other content you submit to the Platform

Messages

• content you send through on-platform messaging tools (e.g., HivePress Messages), including timestamps and recipient identifiers

Support requests

• information you include when contacting support (including attachments, if any)

Marketing / Creator Drops (Brevo)

• email address and related signup metadata (e.g., signup time, source page) when you opt into Creator Drops or similar communications

B) Information collected automatically

When you visit or use the Platform, we (and our service providers) may collect:

• IP address
• device and browser information
• operating system
• referring/exit pages
• pages viewed and actions taken on the Platform
• approximate location (derived from IP; not precise GPS unless you explicitly provide it)
• log data, error reports, and performance data
• cookie identifiers and similar technologies (see Section 8)

C) Information from service providers (payments)

If you purchase a listing plan through WooCommerce/Stripe:

• we receive and store order-related information such as plan purchased, date/time, price, status, and identifiers needed for accounting/support.
• we do not receive or store full payment card numbers. Payment card data is handled by the payment processor (e.g., Stripe) under its own policies.

Public Information and Your Responsibility

Some information is inherently public on a listing directory. Anything you publish in a listing (photos, descriptions, rules, approximate location, website, optional contact information, etc.) may be viewable by visitors and may be indexed by search engines.

How We Use Information

We use information to:

• operate, maintain, and improve the Platform
• create and manage user accounts
• publish and display listings and directory content
• enable user-to-user messaging and platform features
• process listing plan purchases and provide customer support related to purchases
• send transactional communications (e.g., account notices, important service messages)
• send marketing communications where you've opted in (e.g., Creator Drops), and honor unsubscribe requests
• monitor, prevent, and investigate fraud, abuse, security incidents, and violations of our Terms
• comply with legal obligations and enforce our Terms and policies
• maintain backups, logs, and audit trails for security and continuity

We do not use your data to run cross-site behavioral advertising profiles.

Legal Bases (Where Required)

If you are in a jurisdiction that requires a legal basis (e.g., EEA/UK), we process personal data based on:

• Contract (to provide the Platform and paid listing services you request)
• Legitimate interests (security, fraud prevention, improving the Platform)
• Consent (marketing emails like Creator Drops, where required)
• Legal obligation (compliance with applicable laws and lawful requests)

How We Share Information

We do not sell your personal information. We share information only as described below:

A) With other users and the public

• Your public listing content is visible to visitors and/or registered users.
• Messaging may reveal your username/profile details to the recipient.

B) With service providers ("processors")

We use reputable vendors to run the Platform (e.g., hosting, analytics, email delivery/marketing, spam prevention, security tools, payment processing, support tools). These providers may process personal information only to provide services to us and are not permitted to use it for their own unrelated purposes.

Examples may include: hosting providers, email delivery (SMTP), Brevo (marketing list), Stripe (payments), and other WordPress/HivePress/WooCommerce-related services you've enabled.

C) For legal, safety, and enforcement reasons

We may disclose information if we believe it is necessary to:

• comply with applicable laws, regulations, subpoenas, court orders, or lawful government requests
• enforce our Terms, policies, or agreements
• protect the rights, safety, and security of SceneAlly, our users, or the public
• detect/prevent fraud, abuse, or security threats

D) Business transfers

If SceneAlly is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality and notice where required.

Cookies and Similar Technologies

We use cookies and similar technologies for:

• authentication and session management (keeping you logged in)
• security (fraud prevention, abuse prevention)
• site functionality and preferences
• performance and analytics (understanding what pages/features are used)

You can control cookies through your browser settings. If you disable cookies, parts of the Platform may not function properly.

Do Not Track: Some browsers offer "Do Not Track." There is no universal standard; we do not respond to DNT signals in a uniform way.

Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect information, such as:

• TLS/SSL encryption in transit
• access controls and least-privilege administration
• monitoring/logging for abuse and security events
• routine maintenance and updates

Data Retention

We retain personal information for as long as necessary to:

• provide the Platform and maintain your account
• keep listings active as you choose
• comply with legal obligations
• resolve disputes
• enforce agreements and prevent abuse
• maintain security logs and backups

If you request account deletion, we will make reasonable efforts to delete or de-identify personal information, subject to:

• legal requirements
• legitimate security and fraud-prevention needs
• technical constraints (e.g., backups retained for limited periods)

Public content you posted may remain visible if you do not remove it before requesting deletion, and copies may persist where others have stored or reposted it.

Your Choices and Rights

A) Account information

You may access, correct, or update certain account information through your account settings. You may also contact us to request deletion.

B) Marketing emails (Creator Drops)

You can unsubscribe at any time using the link in the email. Transactional messages (e.g., security or account notices) may still be sent.

C) California (CCPA/CPRA) notice (if applicable)

If you are a California resident, you may have the right to:

• know what personal information we collect, use, and disclose
• request deletion (with exceptions)
• correct inaccurate personal information
• opt out of "sale" or "sharing" (as defined by CPRA)

SceneAlly does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under California law.

D) EEA/UK (GDPR) rights (if applicable)

You may have rights to access, correct, delete, restrict processing, object to processing, and data portability. You may also withdraw consent where processing is based on consent.

To exercise rights, contact us at the email in Section 14. We may need to verify your identity before responding.

Children's Privacy

SceneAlly is intended for individuals 18 or older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will take steps to delete it.

International Users

SceneAlly is operated from the United States. If you access the Platform from outside the U.S., you understand and agree that your information may be processed and stored in the United States and other jurisdictions where our service providers operate.