Privacy policy
This policy explains what personal data #Sc4eKom handles, why, who else sees it, how long we keep it and what you can do about it. We have written it in plain English on purpose.
1. Who we are
The service is run by SC4E Ltd, a company registered in the United Kingdom ("SC4E", "we", "us"). For personal data you put into your account, SC4E Ltd is the data controller. Contact: support@sc4eai.com.
If you use the service for your own business and put other people's personal data into it (for example your customers' details), you are the controller of that data and SC4E acts as your processor. A data processing agreement is available on request.
2. What we collect
| Data | What it is | Where it comes from |
|---|---|---|
| Account | Your email address and an account ID, plus the name and photo if you sign in with Google. If you use a password, Google's sign-in service keeps it in scrambled form and we cannot read it. We use your email to decide whether you are allowed in and to send verification and password-reset emails. | Google sign-in or the email form |
| Your content | Messages you send, model replies, businesses, memory, prompts, projects, tasks, research, workflows, saved files and settings, including anything you type or paste. | You |
| Usage records | For each model call: time, which model, number of tokens, whether it worked, how long it took, any error message and, where billing is on, the cost and credits charged. | Created by the app |
| Billing | Credit balance and history, your Stripe customer ID, the amounts you have paid and, if you used an earlier billing method, your subscription ID and status. Card details are held by Stripe, not by us. | You, Stripe, the app |
| Admin log | A record of administrative actions such as credit changes, pricing changes and refused access attempts, with the email involved. | Created by the app |
| Technical | Standard web server logs kept by our hosting provider (such as IP address and browser type), and small items stored in your browser to keep you signed in and to let the app work offline. | Your device |
We do not use advertising or analytics cookies or trackers. We do not sell your data. We do not knowingly collect special category data and ask that you do not put it in unless you need to.
3. Why we use it, and our legal basis
- To provide the service you asked for (contract): signing you in, storing your workspace, sending your messages to the models you choose and showing the replies.
- To keep the service secure and working (legitimate interests): preventing misuse, fixing errors, monitoring reliability and enforcing spending limits.
- To bill and keep accounts (contract and legal obligation): metering usage, collecting payment and meeting tax and accounting duties.
- To respond to you (legitimate interests): answering requests and support messages.
We do not make decisions about you that have legal or similarly significant effects by automated means. Model replies are suggestions that you review.
4. Who else sees your data
We share data only with the services needed to run the app, and only as far as needed:
| Provider | Why | What they receive |
|---|---|---|
| Google (Firebase and Google Cloud) | Hosting, sign-in, database, server functions, secret storage | Everything stored in your workspace, held in London (europe-west2) |
| Anthropic, OpenAI, Google (Gemini), xAI, DeepSeek, Perplexity | To generate replies | Only the messages, saved context and history sent when you ask the models you picked. A provider receives data only when you select one of its models. |
| Stripe | Card payments, where billing is on | Your email, the card details you enter on Stripe's pages and your usage totals |
| GitHub | Only when you approve a code commit | The file and message you approved, sent to the repository you named |
Each AI provider has its own terms and privacy policy, which apply to what it receives. We recommend you read them, especially before sending sensitive material. Some providers, including DeepSeek, process data outside the United Kingdom and outside countries with a UK adequacy decision. Choose those models only for content you are comfortable sending there.
International transfers. Some of these providers process data outside the UK, including in the United States. Where that happens we rely on the safeguards recognised under UK data protection law, such as the provider's data transfer terms. We may also disclose data if the law requires it.
5. How long we keep it, and deleting it
- Your content stays until you delete it. Under More, then Delete, you can delete all your data in one step, or delete your account, which also deletes your content. Deleted content is removed from our live database straight away. Google may keep residual copies in its own systems for a limited time.
- Billing, credit and admin records are kept as long as needed for accounting, tax and dispute purposes, which is usually six years. They are not removed when you delete your data.
- Provider and Stripe copies follow those providers' own retention rules.
- You can download a full backup of your workspace before deleting anything.
6. Your rights
Under UK data protection law you can ask us to: give you a copy of your data, correct it, delete it, restrict how we use it, move it to another service, or stop using it where we rely on legitimate interests. Most of this you can do yourself inside the app. For anything else, email support@sc4eai.com and we will reply within one month. We may need to confirm who you are first.
If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.
7. Security
We use Google Cloud's security, sign-in restricted to verified email addresses, a separate private area for each person, server-side storage of provider keys, and database rules that limit access. No online service is perfectly secure. If a breach affects your data in a way the law requires us to report, we will tell you and the regulator as the law requires.
8. Children
The service is for adults and is not directed at anyone under 18. We do not knowingly collect children's data.
9. Changes
We may update this policy. The date below changes when we do, and we will tell you about important changes in the app or by email.