Your data, kept in Europe.

• We collect what we need to make your videos and run your account, nothing to sell.
• Your data is stored in the European Union, in Frankfurt (Germany).
• No advertising trackers. We do not sell or rent personal data, and we do not train AI models on your content.
• You can export or delete your data at any time.

Loudscene is the controller for account, billing and website data. For content your business customers upload about their own customers (for example names in a testimonial video), the customer is the controller and we process it on their behalf under the Data processing agreement. Contact: support@loudscene.com.

• Account: email, name, profile picture from Google or GitHub if you sign in with them, a wallet address if you sign in with one. To run your account (contract).
• Your content: the websites you paste, what we extract from them (colours, fonts, logos, text, screenshots), briefs, uploads, videos and comments. To make and host your videos (contract).
• Billing: plan, invoices and payment status from Stripe. We never see full card numbers (contract, legal obligations).
• Referrals: the referral code you arrived with, stored in a cookie for 90 days, and whether you became a paying customer, so creators can be paid (legitimate interest).
• Previews without an account: a salted hash of your IP address and a device cookie, to limit free previews per day. Raw IP addresses are not stored (legitimate interest: preventing abuse).
• Review links: the name a guest types and their comments, visible to the team that shared the link (contract with that team).
• Technical logs: errors and request metadata kept for up to 30 days for security and debugging (legitimate interest).

Our database, file storage and render workers run in the EU (Frankfurt, Germany). Some sub-processors are based outside the EU; when data leaves the EU we rely on the EU Standard Contractual Clauses or an adequacy decision (such as the EU-US Data Privacy Framework).

• Supabase: database, sign-in and file storage (EU, Frankfurt).
• Vercel: website hosting and delivery.
• Railway or Fly.io: render workers (EU region).
• Anthropic: the AI that writes scripts and animation code from your brief and site text.
• ElevenLabs: voice-over, only when you ask for one.
• Stripe: payments, invoices, tax and creator payouts.
• Resend: sign-in and notification emails.
• GitHub: only if you install the GitHub App, which reads release notes and pull request titles of the repositories you pick.

We use only cookies the service needs: your session, your current workspace, the referral code you arrived with (90 days), the preview limit on /try, and view counts on share pages (one day). No advertising or cross-site tracking cookies, so there is no cookie banner to click through.

Only what you choose: a share link shows its video and your display name to anyone who has the link; the gallery shows videos you opted in, with your display name and avatar. The Creators leaderboard shows your display name only if you opt in. You can undo any of these at any time.

• Account and content: while your account exists. Deleted videos are removed from storage within 30 days, backups within 90.
• Previews made without an account: deleted after 7 days unless you create an account to keep them.
• Invoices and payout records: as long as tax law requires (up to 10 years).

You can access, correct, export or delete your personal data, object to processing based on legitimate interest, and restrict processing. Most of this is in Settings; for anything else write to support@loudscene.com and we answer within 30 days.

You can also complain to your data protection authority; in Romania that is the ANSPDCP.

Access to data is limited per workspace by row-level security in the database. API keys are stored only as hashes; connector credentials are encrypted. Generated animation code runs in a sandbox with no network access, and brand extraction refuses private network addresses. If a breach affects you, we will tell you and the authority within the time the GDPR requires.

We will announce material changes to this policy by email and in the app at least 30 days before they apply.