Your details.
A clear purpose.
This notice covers the SCENE website, early-access requests and private-beta workspace, including connected social accounts. Updated 22 October 2026.
Who is responsible.
SCENE is operated by Strawberry Works Ltd. For privacy questions or to withdraw your request, email support@scenehq.co.uk.
What you share and why.
The form collects your email, name or brand, optional product description, request time and confirmation that you agreed to early-access contact. If you arrive through a tagged campaign link, we record its source label to understand which introductions bring relevant requests. Please do not include sensitive personal information.
We use these details to assess and respond to your request, relying on your consent. Providing them is optional, but we need an email to respond. Submitting does not create an account, payment or newsletter subscription. We do not sell your details or make automated eligibility decisions.
Hosting and protection.
Vercel hosts this website and stores requests in a private Blob store configured in London. Authorised operators can access requests; there is no public request directory. Vercel also processes technical information, including IP addresses and request logs, to serve and protect the website. We use a short-lived, keyed hash of your IP address to limit repeated form submissions. We do not save the raw IP address in the request record.
We rely on legitimate interests to protect the website against misuse. Vercel operates internationally, so a London storage location does not mean all processing stays in the UK. See Vercel’s data processing terms for its transfer safeguards and subprocessors.
How long we keep requests.
Request records are deleted by a daily cleanup after 180 days, or earlier when you withdraw and ask us to remove them. Anti-abuse records are eligible for deletion after two days and removed by the daily cleanup. The workspace and connected-account retention criteria are set out below. Correspondence needed to resolve a privacy request is kept only as long as necessary to handle and document it.
Your choices and rights.
You can withdraw consent at any time; this does not change the lawfulness of earlier processing. Depending on the circumstances, you can request access, correction, deletion, restriction or a portable copy of your data.
You can object to processing based on legitimate interests, including the anti-abuse processing described above. Contact support@scenehq.co.uk to exercise your rights. You can also complain to the Information Commissioner’s Office.
Cookies, optional analytics and the demo.
We do not add advertising pixels. Optional Google Analytics remains off unless you choose “Allow analytics”. The interactive demo uses fictional campaigns; it creates no customer workspace and publishes nothing. Hosting security features may process technical information needed to protect the site.
If enabled, optional Google Analytics receives page paths, coarse source categories, access-request success/error events and basic browser/device information, including network information processed by Google. It uses analytics cookies to distinguish visits. We do not send form fields, email addresses, workspace identifiers, prompts or creative content. Google processes analytics data under its provider terms; analytics may involve international processing. You can keep analytics off or withdraw consent through “Analytics choices” in the footer. Withdrawal stops future collection and removes SCENE analytics cookies; it does not erase earlier aggregate reports. We use consent for this optional measurement. Contact support about your data rights. See Google’s privacy policy.
Your workspace and connected accounts.
SCENE is an invitation-only campaign workspace. We process your account email and identity, workspace membership, brands, campaign briefs, uploaded media, captions, creative versions, review comments, approvals and schedules to provide the features you request. Shared-workspace content is available to the people and tools authorised for that workspace, according to their permissions.
When an owner connects a supported social account, the platform asks them to authorise SCENE. Depending on the connection, Meta (Facebook, Instagram or Threads), TikTok, Google (YouTube), LinkedIn, Pinterest or X provides account identifiers and names, eligible Page or channel choices, granted permissions, access tokens and, where supplied, refresh tokens and expiry information. SCENE uses those records to identify the selected destination, maintain authorised access, and provide supported publishing and measurement features. You sign in with the platform; SCENE does not request your social-account password.
Facebook Pages held in a Business Portfolio may require the additional business-management permission to discover the selected Page. You choose the business and Pages to share in Meta’s permission screen. SCENE uses this connection for Page discovery and supported Page features; connecting does not itself publish content or invite people to your business.
You can decline a connection and continue using the available unconnected workspace features. A connection’s availability depends on platform approval, your account type and the permissions you grant. This policy does not mean every listed integration is available to every user.
Publishing and measurements.
When you approve and schedule supported content, SCENE sends the selected media, caption and platform-specific settings to that destination. The platform may receive an upload or a temporary media-download URL. Your chosen audience and the platform’s rules determine who can see the resulting post. SCENE records delivery status, submission and post identifiers, and post links so you can track the result.
Where supported and authorised, SCENE retrieves post-level counts such as views, likes, comments and shares, other available insights, and account follower counts. These are associated with the relevant account, workspace and creative version. The current direct integrations do not provide a private-message inbox or download individual follower lists; comment counts do not contain comment messages.
SCENE uses YouTube API Services for its YouTube integration. Google’s handling of information is described in the Google Privacy Policy. You can revoke SCENE’s YouTube access in your Google account permissions as well as disconnecting in SCENE. Contact us using the details above about any connected-platform information we hold.
Why we process workspace information.
Strawberry Works Ltd is responsible for account administration, website enquiries, service security and support. We use account information to provide the service you request and meet our agreement with you. Where you use SCENE for an organisation, we rely on our legitimate interests in administering its workspace and supporting its authorised members. We also rely on legitimate interests to protect accounts, prevent misuse, diagnose faults and maintain service reliability, and on legal obligations where we must keep or disclose information by law.
We handle the campaign content and connected-account actions you ask SCENE to process on your organisation’s instructions. Your organisation is responsible for its purposes and authority to use personal information in that content, including the audience it chooses when publishing. We do not use an OAuth permission screen as a substitute for those responsibilities.
We do not sell personal information, use connected-platform data for advertising profiles, or make solely automated decisions about individuals with legal or similarly significant effects. We do not use connected-platform data to train general-purpose AI models. If you choose to give an external assistant or tool access to a workspace, its access follows the permissions you grant and its own privacy terms also apply. When the new AI connection is available, you choose one studio and its permissions. The connected provider receives the studio data you authorise. Reduced grants support limited work such as drafts. If you explicitly select full studio authority, the agent can also approve, schedule, publish, delete and administer studio records where your current role and available SCENE features permit. Actions identify the connecting user and the agent connection. The connection expires after 30 days and can be revoked in SCENE; revocation stops new access but does not delete information already received by that provider or cancel work already scheduled.
Providers, access and security.
The private-beta application uses Supabase for account authentication, the database and private media storage; Vercel for hosting and scheduled processing; and Google Workspace for support correspondence. Authorised service operators can access information where needed for support, security and deletion handling. The social platforms receive the information needed for actions you request and process it under their own policies. SCENE’s active direct connections do not pass credentials through a separate social-publishing intermediary.
Workspace permissions restrict access. Direct-connection credentials are encrypted on the server and excluded from customer exports. Authentication and temporary connection state use essential browser storage; these are needed to keep you signed in and return you to the correct workspace. We do not add advertising pixels or optional analytics cookies to the private-beta application.
Our service providers operate internationally, so hosting in a particular region does not mean all processing stays in the UK. Their data-processing terms describe applicable transfer safeguards, including standard contractual clauses and UK transfer provisions: Supabase, Vercel and Google Workspace. Contact us for information about the safeguards relevant to your data.
Retention, disconnection and deletion.
We retain workspace content and its review, delivery and measurement history while needed to provide your workspace and the features you request. Retention depends on whether the workspace is active, whether you request removal, and whether a limited record is needed to resolve a delivery, support request, security incident or legal obligation. The website’s 180-day request period does not apply to workspace content. Our operator-created encrypted recovery snapshots are private and expire after seven days; the scheduled cleanup runs every five minutes. Local operator copies are removed by the same seven-day policy during the daily operating check. These snapshots are restricted to recovery. A separate minimal deletion register prevents a restored studio from becoming accessible again after removal. Hosting logs and any provider-managed backups have separate provider retention arrangements; deletion from active records does not instantly erase every provider copy. Information retained only for recovery or a legal requirement is restricted from ordinary use.
A workspace owner can disconnect an account in Settings → Connections. SCENE removes its stored direct-connection credentials, stops collecting new analytics through that connection and marks scheduled deliveries for it as needing attention. You can also revoke SCENE’s access in the social platform’s settings. Disconnecting does not erase campaign records, previous measurements or posts already sent to a platform, and cannot recall a request already in flight.
To request deletion of your SCENE information, including data obtained from a connected platform, email support@scenehq.co.uk. Include your workspace and relevant platform/account name and describe what you want removed. Never send passwords or access tokens. Owners can also export their workspace and submit a deletion request in Settings; that request pauses publishing and requires support follow-up.
We verify your authority, review the requested scope, remove the applicable active records and media, and confirm the outcome or explain any limited retention required. We handle rights requests within the applicable legal time limits and will explain any lawful extension. See the data-deletion instructions. Deleting information from SCENE does not delete posts from a social platform; use that platform’s controls to remove published content.