2. Information We Collect

We collect the following categories of personal data:

Information you provide directly:

• Your name (optional) and email address, when you create an account.
• Scripts, scenes, annotations, notes, and other content you upload or create.
• Information you share when contacting us for support.

Information we receive from your school or institution:

• Where your school provides scenespace to you as part of your course, we may receive your name and school email address from them in order to create your account.

Information collected automatically:

• Usage data (features used, session activity, device and browser information).
• Log data (IP address, access times, error logs).
• Cookies and similar technologies (see clause 8).

Information generated through the Service:

• Audio files generated by text-to-speech for your scenes.
• AI-generated analysis and Dramaturg responses associated with your account.

3. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Contract (Article 6(1)(b)): To provide the Service you have signed up for, including hosting your scripts, generating audio, providing AI analysis, and maintaining your account.
• Legitimate interests (Article 6(1)(f)): To improve the Service, prevent fraud and abuse, secure our systems, and communicate service updates. Where we receive your details from your school, we rely on our legitimate interest in providing the Service your school has arranged for you. Our legitimate interests are balanced against your privacy rights, and you may object at any time.
• Consent (Article 6(1)(a)): Where we send you marketing communications or use non-essential cookies. You may withdraw consent at any time.
• Legal obligation (Article 6(1)(c)): Where we are required by law to retain or disclose certain information.

4. How We Use Your Information

We use your personal data to:

• create and maintain your account;
• store and process your scripts to provide text-to-speech, AI analysis, and rehearsal features;
• communicate with you about the Service, including support and important updates;
• improve and develop new features;
• detect, prevent, and address technical issues, fraud, or abuse;
• provide your school with anonymised, aggregated reports on how the cohort as a whole has used the Service, where your school provides scenespace to you as part of your course;
• comply with our legal obligations.

5. Categories of Recipients

To deliver the Service, we share your data with the following categories of third-party processors, each acting under contract with us and bound by appropriate data protection terms:

• AI voice generation providers, for text-to-speech audio generation.
• AI language model providers, accessed via an AI development gateway, for script analysis and the Dramaturg (AI script coaching).
• Cloud database, authentication, and storage providers, for hosting your account and content.
• Web hosting providers, for serving the Service.
• Email delivery providers, for sending account and service communications.

A current list of our named subprocessors is available on request by contacting us at hello@scenespace.net. We may update this list from time to time as our processors change.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

6. International Data Transfers

Some of our processors are based outside the UK, primarily in the United States. When we transfer your personal data outside the UK, we rely on appropriate safeguards under UK GDPR, including:

• the UK International Data Transfer Agreement or EU Standard Contractual Clauses, where applicable;
• the UK-US Data Bridge, where the recipient is certified under it;
• other lawful transfer mechanisms permitted under UK GDPR.

You may request more information about the safeguards in place by contacting us.

7. Data Retention

We retain your personal data for as long as your account is active. When you delete your account:

• your scripts, notes, and audio files are deleted within 90 days;
• account identifiers may be retained for up to 12 months for security, anti-abuse, and legal compliance purposes;
• log data is generally retained for up to 12 months;
• data we are required by law to keep will be retained for the period required.

8. Cookies and Similar Technologies

We use cookies and local storage to:

• keep you signed in to your account (essential);
• remember your preferences (essential);
• understand how the Service is used and improve performance.

You can manage cookies through your browser settings. Disabling essential cookies may affect your ability to use the Service.

9. Your Rights

Under UK GDPR, you have the right to:

• access your personal data and receive a copy;
• rectify inaccurate or incomplete data;
• erase your data ("right to be forgotten");
• restrict processing in certain circumstances;
• object to processing based on legitimate interests;
• portability of your data in a structured, machine-readable format;
• withdraw consent at any time, where processing is based on consent;
• not be subject to decisions based solely on automated processing that produce significant effects on you.

To exercise these rights, contact us at hello@scenespace.net. We will respond within one month.

10. Right to Complain

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

• Website: ico.org.uk
• Helpline: 0303 123 1113

We would appreciate the chance to address your concerns directly before you contact the ICO.

11. Data Security

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, access controls, and secure cloud infrastructure. However, no method of transmission or storage is fully secure, and we cannot guarantee absolute security. We will notify you and the ICO of any personal data breach as required by law.

12. Children's Data

The Service is not intended for use by anyone under 18. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has provided us with personal data, please contact us and we will take appropriate steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect. The "Last updated" date at the top reflects the latest revision.

14. Contact

For questions or to exercise your rights, contact us at hello@scenespace.net.