Last updated: October 7, 2026
This policy describes how Sun Sand Sound, Inc. (doing business as SceneTown) (“SceneTown”, “we”, “us”) collects, uses, shares, and keeps information when you use SceneTown websites, apps, creator tools, APIs, and related services (the “Services”), and the choices and rights you have. It is written to be read. Where it uses a defined legal term, the term has the meaning the law gives it.
By using the Services you acknowledge this Privacy Policy, which forms part of our Terms of Service. The cookie inventory is at /cookies; how to exercise your rights is at /data-rights. This policy also covers business contacts, sponsors, investors, applicants, and people who receive an invitation or an event email through the Services; some of them receive additional notices.
Sun Sand Sound, Inc. (doing business as SceneTown) is the data controller for personal information processed through the Services. We are based in the United States, and the Services are designed for and directed to adults in the United States. The Services are for people 18 and older. See Section 16.
We collect information in four ways: what you give us, what you give us about other people, what is collected automatically, and what we receive from others.
Some features ask you for information about someone else: the email address or handle of a person you invite, the guest list of an event you organize, and the names, shares, and contact details of collaborators in a revenue split. You are responsible for having the right to give it to us. We use it only for the purpose you gave it for — to send the invitation in your name, to run your event, to record and pay the split — to detect duplicates and abuse, and as the law requires. A person who receives an invitation or an event email from us can stop further messages with one click and can exercise the rights in Section 12 whether or not they have an account.
Before some parts of the Services open, you must pass one identity and age check, performed by Stripe Identity on a government-issued document and a matching selfie. A fee for the check is disclosed before you pay it.
What we do not keep. Images of your document or selfie, and your date of birth, never enter SceneTown storage. Stripe reads the document, and we read the verified date of birth from Stripe in memory, reduce it to an adult yes-or-no, and discard it. The evidence stays with Stripe under its own privacy policy and retention terms, where it can be retrieved for compliance.
What we keep. The result of the check, the level of assurance, when it was performed, the policy version in force, a reference to the verification session, and, where required for payouts and tax, the name and tax identifiers Stripe Connect requires. We keep the age-eligibility decision for as long as you have an account and as the law requires afterward, so we never have to ask again.
Automated decision. The age decision is automated and binary. A person who does not pass receives a neutral answer and a waiting period before trying again; nothing in the answer reveals why. If you believe a decision is wrong, write to privacy@scenetown.com and a person will review it.
Biometric information. We do not collect, store, or derive biometric identifiers or templates. Our verification provider may process biometric information to match a selfie to a document, under its own notice and retention schedule, which is presented to you before the check begins.
We use information to operate, improve, and protect the Services, including to:
Legal bases (EEA, UK, Switzerland). Where those laws apply, we process personal information to perform our contract with you (the Services, payments, payouts); for our legitimate interests (security, fraud and abuse prevention, one-account enforcement, rights protection, product improvement, business operations, and marketing to existing members), balanced against your rights; with your consent, where we ask for it (optional cookies, marketing, connected platforms); and to comply with legal obligations (tax, sanctions, legal process).
Some features use artificial intelligence, including Scenie, agent and delegate profiles, Noddles workflows, generated skill tools, image generation, bio and copy helpers, embeddings, and moderation or safety assistance. When you use these features you are interacting with software, not a person. AI outputs can be incomplete, inaccurate, or inappropriate; review them before relying on or publishing them.
To provide these features we send relevant inputs and context to model providers such as Anthropic, OpenAI, and fal.ai. This may include your prompt, chat history for the active session, selected profile or creator context, workflow inputs and outputs, generated-skill intent and test context, image prompts and generated assets, embedding input text, and the technical metadata needed to meter cost, debug, secure, and operate the feature. Model providers process inputs and outputs to provide the service, maintain security, detect abuse, and meet their legal obligations under their terms with us.
Do not include passwords, private keys, unreleased financial records, government IDs, health information, or other sensitive personal data in AI prompts unless the feature specifically asks for it. We do not use private AI conversations or your uploaded music to train a SceneTown foundation model.
We store AI session records, tool calls, workflow outputs, generated-skill logs, usage metrics, and credit records as described in this policy. You can request access, export, correction, restriction, or deletion of in-app AI records through Section 12. Some derived or shared artifacts — public templates, organization-approved skills, embeddings, graph memory, and financial records — may be retained, anonymized, or handled manually where deletion would affect other members, legal obligations, or platform security. Where AI generates or materially edits content we may label, watermark, log, or otherwise mark it. If you publish or export AI-assisted content you are responsible for any disclosure the law or another platform requires.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information as follows.
We use cookies, local storage, pixels, and similar technologies for sign-in, preferences, security, and — only if you opt in — analytics and marketing. See /cookies for names, durations, and opt-out paths. Disabling non-essential cookies may limit some features. Emails we send may include a pixel that tells us whether they were opened.
Purchases, subscriptions, verification fees, event tickets, credits, and payouts are processed through Stripe and related providers, which collect and process payment and identity information under their own privacy policies. We receive transaction status, limited payment metadata (such as the card brand and last four digits), and the records needed for accounting, tax, and support. Members receiving payouts must complete Stripe Connect onboarding and, where required, verification before funds are released.
You are responsible for content you upload or share. Depending on the feature and your settings, content may be public, visible to selected members, downloadable by people you license it to, or accessible to SceneTown staff and service providers for hosting, moderation, support, rights protection, or legal compliance. Public content may be copied or indexed by others; removing it from the Services does not remove copies others have made. Do not post personal information you do not want others to see.
Listings from public information. To help people find live music, we list venues, record stores and similar places, festivals and other recurring events, and radio stations, labels and other music organizations, using information they have published themselves: the name, what kind of place, event or organization it is, its town (and, for a venue, its public address), its website, and its public social media handle. We do not list private homes this way. A listing that its business or organizer has not claimed says so on its page. They can claim the listing, ask us to correct it, or ask us to take it down from its page (“Something wrong with this listing?”) or by emailing privacy@scenetown.com, and a person will answer within 30 days. If you send us an email address with that request, we use it only to reply. If you claim a listing, a person at SceneTown checks the evidence you give us (an email at its own website, or a link from its official site or account) before the claim takes effect, and we use that evidence only to check the claim.
We keep information as long as needed to provide the Services, operate our business, resolve disputes, enforce agreements, protect rights, and meet legal obligations, and then delete or de-identify it. In general:
We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit and at rest for stored media, access controls, and audit logging. No system is perfectly secure, and we cannot guarantee the security of any information. Keep your credentials, keys, and wallet secure, and tell us at security@scenetown.com if you believe your account has been compromised. If a breach affects you, we will notify you and the authorities as the law requires.
Depending on where you live, you may have the right to:
How. Self-service tools — profile visibility, activity sharing, data export, and deletion — live at Studio settings → Privacy. For anything else, or if you do not have an account, email privacy@scenetown.com or follow /data-rights. We may need to verify your identity before we act; we will ask for no more than we need to. An authorized agent may act for you with your written permission. We respond within the time the applicable law allows, and we tell you if we need longer. Some information cannot be deleted: records on a public blockchain, records we must keep by law, and de-identified data.
This section applies to California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act and its regulations, and is our notice at collection.
We collect these categories from you, your use of the Services, service providers, payment and verification processors, public blockchains, and other members, as described in Section 2. We use and disclose them for the business and commercial purposes in Sections 4 and 6, and we keep each category as described in Section 10. We do not sell personal information, do not share it for cross-context behavioral advertising, and have no actual knowledge that we sell or share the personal information of anyone under 16. Where an analytics or advertising technology you opt into could constitute “sharing”, you may opt out via cookie controls or a Global Privacy Control signal, which we honor.
Invitations and referral quotas are a limit on how many people a member may let in, not a payment for personal information; no financial incentive is offered in exchange for personal information.
To exercise your rights, use Section 12 or email privacy@scenetown.com. We may verify your identity before fulfilling a request, and we will not discriminate against you for making one.
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have rights to access, correct, delete, and export personal information and to opt out of targeted advertising, sale, and certain profiling. We do not sell personal information or engage in targeted advertising, and the profiling we do (Section 15) does not produce legal or similarly significant effects, so those opt-outs are honored by default. To exercise a right, use Section 12. If we decline a request, you may appeal by replying to our decision or emailing privacy@scenetown.com with “appeal” in the subject; we will respond in writing within the time your state’s law provides, and if we deny the appeal we will tell you how to contact your state’s attorney general.
We use automated systems to decide whether an account may be created (the age check in Section 3), to detect duplicate accounts and invitations, to detect fraud and abuse, to rank stream recommendations by the published formula, and to assist content moderation. None of these systems is used to profile you for advertising. Where an automated decision denies you access or removes content, you may ask for human review by writing to privacy@scenetown.com with the details, and a person will review it.
The Services are for adults 18 and older. We do not knowingly collect personal information from anyone under 18, and account creation requires passing the age check in Section 3. The Services are not directed to children under 13. If you believe a minor has provided us personal information, email privacy@scenetown.com and we will delete it and close the account.
SceneTown is based in the United States and the Services are directed to U.S. users. If you access the Services from elsewhere, your information is transferred to, processed, and stored in the United States and in other countries where our providers operate, which may have different data-protection laws than your home country. Where the laws of the EEA, the United Kingdom, or Switzerland apply, we rely on standard contractual clauses or other approved mechanisms for the transfer, and you have the right to lodge a complaint with your local supervisory authority.
The Services link to third-party sites, wallets, payment providers, messaging platforms, and partner tools. We are not responsible for their privacy practices. Review their policies before sharing information with them.
We may update this Privacy Policy from time to time. We will post the revised policy here with a new “Last updated” date and, for material changes, give notice in the Services or by email where we have an address on file, at least 14 days before the change takes effect where practicable. Continued use after the effective date means you acknowledge the revised policy.
Privacy questions and requests: privacy@scenetown.com. Security reports: security@scenetown.com.
Data controller: Sun Sand Sound, Inc. (doing business as SceneTown), a Delaware C Corporation with its principal place of business at 2261 Market Street STE 30670, San Francisco, CA 94114 US. Phone: (530) 448-7327.
We use cookies to keep the site working and, with your consent, to remember your preferences across visits.
AI features may send prompts, chat history, workflow context, and generated outputs to model providers to run the feature. Review AI privacy details.
Details at /cookies.