Privacy Policy

Effective date: October 14, 2026

Who We Are

SceneOak is operated by COD Co., Ltd. (株式会社ＣＯＤ), Room 203, シティーオオソネ21, 4-24-11 Matsugaya, Taito-ku, Tokyo 111-0036, Japan ("we", "us"). Our seller details are listed in our Legal Notice (特定商取引法に基づく表記). For any privacy question, email services@bizcod.co.jp.

This Privacy Policy explains what personal data we handle when you use our AI video generation service, why, who we share it with, and the choices you have.

Information We Collect

1. Account information — Your email address, name, an optional avatar, and your password (stored only as a hash). We send a verification email when you sign up.
2. Content you create — The prompts you write, the images you upload, and the videos generated for you, together with their settings (model, length, aspect ratio) and the credits they cost.
3. Billing information — Your plan, purchase and subscription history, and credit balance. Payments are processed by Stripe; your card details are entered on Stripe's pages and never reach our servers.
4. Support messages — What you send us by email or in a support ticket.
5. Usage and device data — Pages visited, features used, IP address, browser and device type, and error logs, used to run, secure and improve the service.
6. Cookies — Cookies that keep you signed in and remember your language and theme, plus analytics cookies that help us understand how the site is used, including our own visitor cookie described under First-Party Analytics.

First-Party Analytics

We keep our own statistics to improve the product and its pricing. They stay in our own database (hosted by Cloudflare, as described below); we do not sell them or pass them to analytics providers.

• What we record: the country you visit from, where you came from (the referring site's domain, or the campaign tags in the link), the page you landed on and the pages where key steps happen, whether you use a phone or a computer, which plan you clicked, and a random visitor ID kept in a cookie.
• What we do not record in these statistics: your IP address, full web addresses or their query strings, conversation IDs, or your email address.
• Linking to your account: when you sign up or sign in, the statistics recorded in this browser, including those from before you signed up, are linked to your account.
• European visitors: if you visit from the European Union, the European Economic Area, the United Kingdom or Switzerland, we do not set the visitor cookie, and your visits are only counted, never linked to you or your account.
• Retention: statistics records are deleted after 400 days.

How We Use Your Information

• To create and secure your account, and to verify your email address.
• To render your videos, store them in your library, and show you your history.
• To process payments, grant and track credits, and send receipts and service notices.
• To answer support requests.
• To detect and prevent fraud, abuse and violations of our Terms of Service.
• To understand usage and improve the service.

We do not use your prompts, uploaded images or generated videos to train AI models, and we do not sell your personal information.

Who We Share It With

We share personal data only with service providers that process it on our behalf to run the service, and only as much as each one needs:

• AI model providers (for example fal) — receive your prompt and any uploaded image so they can render your video.
• Cloudflare — hosts the service and stores your account data, uploads and generated videos (including Cloudflare R2 storage).
• Stripe — processes payments and handles your card details.
• Email delivery providers — send verification emails, receipts and service notices.
• Analytics providers — help us measure site traffic.

If you make a conversation public with the Share button, anyone with its link can view its prompts and videos until you set it back to Only me. Separately, each uploaded image and generated video is stored at its own hard-to-guess URL that can be opened without signing in; anyone who obtains that file URL can view the file, even if the conversation is private.

We may also disclose information when required by law or by a lawful request from public authorities, or to protect our rights, our users or the public.

Some of these providers process data outside Japan, including in the United States. We choose providers that protect personal data with appropriate safeguards.

Data Security

Data is encrypted in transit (HTTPS) and stored with providers that encrypt it at rest. Access is limited to the people and systems that need it to run the service. No method of transmission or storage is 100% secure, but we work to protect your information.

Data Retention

We keep your account data and content while your account exists. When you ask us to delete your data or close your account, we delete or anonymize it within a reasonable period, except records we must keep by law (such as transaction records for tax and accounting).

Your Rights

You have the right to access, correct, export or delete your personal information, and to ask us to stop using it. You can update your name and avatar in Settings › Profile. To request a copy of your data, its deletion, or account closure, email us at services@bizcod.co.jp or open a support ticket after signing in. We may need to confirm your identity before acting on a request.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with its effective date and, for material changes, notify you through the service or by email.

Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, email us at services@bizcod.co.jp or open a support ticket after signing in.