Privacy Policy

Who is responsible

GlowScene Studio, trading as GlowScene, is the data controller for account, order, support and product-usage information. Our contact details are 85 Pinewood Drive Milton Of Leys, IV2 6GH, support@morfirfir.shop, and +44 7750079280. Users may contact us about privacy or complain to the UK Information Commissioner’s Office; EEA users may also contact their competent supervisory authority.

What we collect

We collect account identifiers, name, email, telephone number when supplied, billing status, subscription plan, support correspondence, event briefs, guest-count ranges, venue descriptions, prompts, generated outputs, technical logs, device and approximate network information, cookie choices, and usage records. Optional venue-photo uploads and example data may contain information chosen by the user. Do not upload sensitive personal data or images without the necessary rights and permissions.

Collection sources

We collect information directly from you when you create an account, enter user input in the workspace, upload a permitted file, submit a contact or event-brief form, subscribe, or contact support. We collect technical and usage information automatically through essential cookies, browser requests and service logs. We also receive limited status and transaction information from our hosting, database, email, payment and AI generation providers. Stripe or PayPal, when offered as a payment option, processes card and wallet details under its own privacy notice; GlowScene does not receive or store complete card numbers.

User inputs, uploads and generated outputs

Your event descriptions, prompts, optional venue files, selected example data and generated outputs are processed only to structure the requested brief, create boards or videos, provide downloads, secure the service and resolve support issues. Required user input and files are sent to the selected AI generation provider for the requested task. We do not use customer content to train general AI models. Generation caches and optional uploads are deleted within 30 days unless you save an asset to an active project; saved project content remains until you delete it or close the account, followed by backup expiry within 90 days. You may request deletion through the contact method below.

AI providers

Our selected AI generation provider acts as a processor and receives only the user input, event parameters and uploaded file content needed to produce the requested output. The provider returns task status and generated asset links to GlowScene. We restrict this processing by contract and do not authorise the AI provider to use customer content for its own general-model training. Provider processing may involve an international transfer protected as described below.

Why we use it and legal bases

We use account, order, prompt and output data to perform our contract: provide the workspace, run requested generation, deliver files, manage subscriptions and answer support. We use legitimate interests for security, fraud prevention, service reliability and aggregate product measurement. We use consent for optional analytics, non-essential cookies and marketing where required. We process records where necessary to meet tax, accounting, dispute and legal obligations.

Who we share it with

Data is limited to processors needed to operate the service: hosting and infrastructure providers, Supabase for database and file storage, Stripe or PayPal for payment, transactional email providers, support tooling, and the selected AI generation provider for prompts and files needed to produce requested outputs. Professional advisers and authorities may receive records where lawfully required. We do not authorise processors to use customer content to train their general models on our behalf.

International transfers

Some processors operate outside the United Kingdom or EEA. Where restricted data is transferred, we use an adequacy decision, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses where relevant, and supplementary safeguards appropriate to the transfer.

How long we keep it

Account and subscription records are kept for the active relationship and ordinarily up to six years afterward for tax and dispute records. Support messages are ordinarily kept for 24 months. Security logs are ordinarily kept for 12 months. Optional uploads and generation caches are deleted within 30 days unless the user saves an asset to an active project; saved project assets remain until deletion by the user or account closure, followed by backup expiry within 90 days. Cookie choices follow the durations in the Cookie Policy.

Security

We use access controls, encrypted transport, restricted service credentials, processor reviews and operational logging. No network service can guarantee absolute security. Users should keep account access private and report suspected misuse promptly.

GDPR and CCPA rights

UK and EEA users may request access, correction, deletion, restriction, portability or objection, and may withdraw consent without affecting prior processing. California residents may request access, correction or deletion and information about categories collected and disclosed, subject to legal exceptions. We verify requests proportionately and ordinarily respond within the applicable statutory period. There is no discrimination for exercising privacy rights.

Do Not Sell or Share

We do not sell personal information and do not share it for cross-context behavioural advertising. If this practice changes, we will provide the required opt-out control before it begins.

Cookies

Essential cookies support security, administrator and account sessions. Optional analytics or preference cookies are used only according to the consent choices described in the Cookie Policy. Browser controls may remove cookies, but blocking essential cookies can prevent secure account features.

Automated decisions and children

AI helps create visual references, but GlowScene does not make decisions producing legal or similarly significant effects about users. The service is not for children under 13. Users aged 13–17 may use it only with a parent or guardian’s consent and supervision.

Contact

Send privacy requests to support@morfirfir.shop with “Privacy request” in the subject, or write to GlowScene Studio, 85 Pinewood Drive Milton Of Leys, IV2 6GH. We may ask for information needed to verify identity and scope the request.