Privacy Policy

SceneCue (“we,” “us,” or “our”) is an Africa-born, globally accessible AI animation and cinematic video prompt library developed and operated by DicksonGrafiks Academy, an educational and creative technology academy based in the Federal Republic of Nigeria.

We endeavor to handle your personal information responsibly, transparently, and in general accordance with the principles of the Nigeria Data Protection Act, 2023 (NDPA) and recognized fair information practices.

By accessing SceneCue, creating an account through Google OAuth, or purchasing digital prompts, you acknowledge the practices described in this Policy.

SceneCue uses Google OAuth authentication to provide a seamless, passwordless login experience. When you click “Sign in with Google,” Google prompts you to authorize SceneCue to access basic profile details. We receive and store:

• Email Address: Used as your verified primary identifier to associate permanent ownership of purchased prompts and facilitate payment receipt lookups via Paystack.
• Full Name: Displayed on your customer dashboard and account navigation.
• Profile Avatar URL: Used to display your Google profile photo within the navigation bar and account profile header.
• Google User ID: A unique alphanumeric identifier assigned by Google to associate your authenticated session with your SceneCue account.

We do not receive or store your Google password, contacts, Google Drive files, or any other personal Google account data.

User accounts, identity verification, and database security are managed through Supabase, our cloud backend and authentication provider. When you authenticate:

• Supabase records your authenticated user ID and email within its database schema, with database-level access rules designed to protect user data.
• Session tokens are exchanged via HTTP-only authentication cookies (e.g. sb-*-auth-token) to verify your identity on server-rendered pages and API routes without exposing credentials to client-side scripts.
• A cryptographically signed customer session cookie (scenecue_customer_session) is issued using HMAC-SHA256 to help maintain your session across browser sessions for up to 30 days.

When you purchase a premium prompt or redeem a promotional access code, SceneCue records transaction data necessary to provide prompt access and maintain business records:

• Prompt Details: Prompt ID, title, and slug purchased.
• Buyer Email & User ID: Your verified Google account email and Supabase user ID.
• Payment Reference: The unique transaction reference generated by Paystack (e.g. SC-XXXXX).
• Financial Totals: Amount billed in Nigerian Naira kobo (e.g. ₦1,500 = 150,000 kobo) and transaction currency (NGN).
• Payment Status & Timestamp: Timestamp when payment was confirmed as paid by Paystack.
• Download Token Hashes: Cryptographic hashes of time-limited download signatures used to deliver structured prompt files (.txt) and optional character sheet images (.png).

SceneCue processes customer payments through Paystack Payments Limited, a licensed payment gateway operating under applicable Central Bank of Nigeria (CBN) regulations and certified to industry PCI-DSS standards.

Paystack transmits to SceneCue only a confirmation of successful payment, the transaction reference, amount paid, and basic card brand (e.g. Mastercard, Visa, or Verve) for receipt generation.

We process personal information strictly for legitimate operational purposes:

• Account Authentication: Verifying your identity upon login and maintaining your authenticated session across page navigation.
• Entitlement Provisioning: Providing permanent, account-based access to your purchased animation prompts and downloadable assets.
• Duplicate Charge Prevention: Checking your account ownership before opening checkout to prevent accidental duplicate purchases for the same prompt.
• Customer Assistance: Investigating payment inquiries, order reconciliations, or purchase recoveries when you provide a Paystack reference.
• Platform Security: Protecting SceneCue against automated scraping, fraudulent chargebacks, credential misuse, and service disruptions.
• Legal & Accounting Record-Keeping: Maintaining financial transaction records required under applicable Nigerian tax and corporate standards.

SceneCue employs a minimal, privacy-conscious approach to browser cookies and local storage:

• Strictly Necessary Cookies: We use authentication cookies (sb-*-auth-token, scenecue_customer_session) and short-lived OAuth redirect cookies (scenecue_auth_next) to authenticate users and route logins safely without open redirect vulnerabilities.
• Preference Local Storage: We use your browser's local storage to save your visual interface choice (theme: light or dark) and record whether you have dismissed the first-time onboarding guide (scenecue_onboarding_seen).
• No Behavioral Advertising Trackers: SceneCue does not load third-party advertising pixels (such as Meta Pixel, Google Ads remarketing tags, or TikTok Pixel) and does not track your browsing activity across other websites.

We implement reasonable technical and organizational measures designed to protect your personal information:

• Transmission Security: Web traffic and API interactions are transmitted using HTTPS encryption provided through our web hosting and infrastructure partners.
• Database Protection: User accounts and purchase logs are stored within managed cloud database infrastructure on Supabase, utilizing database access controls and standard hosting security safeguards.
• Cloud Hosting: SceneCue is hosted on Vercel's cloud platform, which provides distributed edge delivery and standard hosting protections.
• Media Delivery: Demonstration videos and downloadable assets are hosted on cloud storage services and delivered over HTTPS.

We do not sell, rent, monetize, or trade your personal information to third parties.

We share information only under the following limited circumstances:

• Service Providers: With third-party service providers (such as Supabase, Vercel, and Paystack) strictly to the extent required to host the platform, authenticate accounts, and process transactions.
• Legal Mandates: If required by law, subpoena, court order, or official request by Nigerian law enforcement or regulatory authorities pursuant to valid legal process.
• Protection of Rights: To enforce our Terms of Service, defend against legal claims, or protect the rights, property, or safety of SceneCue, DicksonGrafiks Academy, or our users.

Because SceneCue provides account-based access to purchased prompts without a scheduled expiration date, we retain your user account ID, verified Google email, and prompt purchase history in our database for as long as your SceneCue account remains active, so that you can sign in and reopen your prompts at any time.

Financial transaction records (payment references, amounts, and timestamps) are retained for the period required by applicable Nigerian tax, corporate, and financial reporting standards.

Depending on applicable data protection laws, you may have rights regarding your personal information:

• Right to Access: Inquire about the personal data and purchase records associated with your account.
• Right to Rectification: Request correction of inaccurate profile data.
• Right to Erasure: Request deletion of your user account, subject to legal and financial retention requirements. Note that deleting your account will terminate your access to previously purchased prompts.
• Right to Inquire or Object: Submit questions or objections regarding how your personal information is processed.

To make a privacy inquiry, contact DicksonGrafiks Academy through our direct support link in Section 15. We may verify your account identity before processing requests.

SceneCue is designed for professional animators, digital artists, creators, and creative students aged 18 and older. Minors under the age of 18 may use SceneCue only under the supervision and with the consent of a parent or legal guardian.

We do not knowingly collect personal data from children under the age of 13. If we become aware that personal information of a child under 13 has been collected without parental consent, we will take steps to remove that information.

SceneCue is operated from Nigeria and serves creators globally. To provide high-availability edge delivery and database storage, your data may be processed on secure cloud servers located outside your country of residence (such as data centers operated by Supabase and Vercel in the United States and Europe).

We rely on established commercial cloud providers that maintain administrative and technical safeguards for data hosted across their international networks.

We may revise this Privacy Policy periodically to reflect changes in our platform features, payment gateways, or operational requirements.

When updates occur, we will revise the “Effective Date” at the top of this page. Your continued use of SceneCue following the posting of an updated policy signifies your acknowledgment of the changes.

For customer assistance, privacy inquiries, or order support, please reach out through our official channels:

Operated by DicksonGrafiks Academy • Nigeria.