Privacy policy

Who is responsible for your data

Each event on SceneSetGo is run by an event organiser, who is the controller of the personal data collected at their event. The SceneSetGo platform processes that data on the organiser's behalf. The organiser's contact route is included in the consent notice you see before taking part, and event staff can help you at the venue.

What we collect

• Your photo — the picture you take or upload as the basis of your portrait.
• Your answers — the scene choices you pick (for example an activity and a location).
• Your portrait — the AI-generated image created from the two above.
• Your name and email — only at events that ask — most events never ask. Where the organiser has chosen to, you are asked once, before the questions, and told whether it is required to take part. These details go to that event's organiser, are visible only to their administrators, are never shown in the gallery or on the wall, and are kept until the organiser deletes them. You can ask an event host to delete them at any time.
• Technical records — short-lived session identifiers, timestamps and audit entries that keep the service working and accountable. We never ask you to create an account.

Consent

Nothing is processed until you give explicit consent on the event page. Taking part requires processing consent; anything optional (such as marketing use by the organiser) is a separate, unticked choice. Giving your name and email where an event asks for them does not put you on a marketing list — that is the separate tick, and leaving it unticked does not stop you taking part. You can stop at any point before submitting your photo and nothing is kept.

How your photo is used

Your photo and answers are sent once to an AI image provider (Google Gemini) to generate your portrait, then stored privately. Attendee images are not used to train AI models by this platform. Portraits only appear in the event's gallery or on its venue wall after review, and event galleries are restricted to people with the event link or PIN.

How long we keep things

• Source photos are deleted automatically 24 hours after upload.
• Generated portraits are deleted automatically 30 days after the event, and sooner if you ask or an operator removes them.
• Audit records of administrative actions (not images) are retained to keep the service accountable.

Who else processes data

The platform runs on vetted infrastructure providers acting as sub-processors: Google (AI image generation), Supabase (database and private media storage) and Vercel (hosting). Images are stored privately and served through short-lived signed links — there are no public image URLs.

Cookies

SceneSetGo sets functional cookies only: one that remembers you entered an event's PIN, and a preference for light or dark mode. There are no advertising or cross-site tracking cookies.

Your rights

You can ask for your photo and portrait to be deleted at any time — speak to event staff or use the contact route in the event's consent notice. Deletion requests are carried out by an administrator, remove the stored images immediately, and are recorded in the audit log. Depending on where you live you may also have rights of access, correction and objection, which the event organiser will honour.

Changes to this policy

If the way the platform handles personal data changes, this page is updated and the date at the top revised. Significant changes are reflected in the consent notice shown at events.