Legal
Privacy Policy
Last updated: July 4, 2026
This page is maintained by ScaleCity Playground to answer common security and privacy questions about the application. We comply with the EU General Data Protection Regulation (GDPR).
1. Data collected
- Account: email, name (optional), avatar (if Google).
- Content: projects, briefs, prompts, references, generations, workflows.
- Usage: credit consumption, AI-call logging (for billing, quotas and debugging).
- Technical: session, UI preferences (localStorage), no ad tracker.
2. Purposes
- Provide and maintain the Service (auth, generation, storage).
- Handle billing and quotas.
- Prevent abuse and improve reliability.
3. Sub-processors and AI providers
Your prompts and references are sent directly to the following AI providers depending on the selected model: Anthropic (Claude), Google (Gemini, Veo, Nano Banana), OpenAI (GPT Image 2, Sora), BytePlus (Seedance), ElevenLabs. These providers process your data under their own policies; we do not use them for training or advertising profiling.
Database, authentication and storage are hosted by Supabase (EU infrastructure). Media files are stored in a private, at-rest-encrypted bucket.
4. Retention
- Active account: as long as you use the Service.
- Account deletion: 30-day retention then permanent deletion.
- Billing logs: 5 years (accounting requirement).
5. Your rights
Under GDPR, you have rights of access, rectification, erasure, restriction, objection and portability. To exercise them, contact us at the address in the legal notice.
6. Cookies
We only use strictly necessary cookies and localStorage (Supabase session, UI preferences). No ad cookies, no third-party trackers.
7. Security
Access via hashed password or Google OAuth, TLS transport, per-user isolation via Row Level Security on the database, sensitive-operation logging.
8. Contact
For any personal-data question, write to contact@scalecity.fr.