Privacy Policy

Privacy Policy

Effective Date: July 1, 2026

Last Updated Date: July 1, 2026

Document Version: 3.0

1. Legal & Corporate

1.1 Data Controller: scrollcam.com operates as the primary Data Controller for the personal information processed through the ScrollCam platform.

1.2 Data Processor Status: In certain circumstances, we may act as a Data Processor on behalf of our enterprise customers when processing end-user data strictly under their instructions.

1.3 Privacy Contact: For any inquiries regarding your data, please contact our Data Protection Officer at: Email: privacy@scrollcam.com Postal Address: ScrollCam, Pune India.

2. Regulatory Compliance

We process your data within the frameworks of major global data protection laws, including the GDPR, UK GDPR, CCPA/CPRA, and India's Digital Personal Data Protection Act (DPDP Act), 2023.

2.1 Legal Bases for Processing:

• Contract: Processing is necessary to deliver the Service, manage your Subscription, and execute our Terms and Conditions.
• Consent: Where you have explicitly opted into newsletters or optional tracking.
• Legitimate Interest: To improve our rendering engines, monitor security, and prevent fraud.
• Legal Obligation: To maintain financial records for tax compliance.

2.2 Supervisory Authorities: If you believe your data privacy rights have been violated, you can get in touch with our Data Protection Officer as mentioned in Section 1.3.

3. Data Collection

We categorize collected information as follows:

• Account Information: Name, email address, and authentication credentials.
• Billing Information: Billing address, tax ID, and transaction history.
• Customer Content: Media assets may be temporarily processed during active sessions.
• Technical Data: IP address, browser type, operating system, and crash logs.
• Usage Analytics: Feature interactions and performance metrics. All usage analytics are stripped of personally identifiable information and anonymized wherever technically feasible.
• Device Information: Screen resolution and hardware capabilities utilized to optimize the application viewport.

4. Client-Side Processing Architecture

A core tenet of our privacy strategy is localized processing. Video timeline trimming, frame extraction, and playback happen primarily within your local browser environment. Uploaded media is processed locally whenever technically possible, minimizing server-side storage where technically feasible.

5. Cookies & Browser Storage

To ensure optimal performance, our Service utilizes local browser storage:

• Cookies: Used exclusively for secure authentication and maintaining session security.
• Local Storage: Used to preserve your editor's state, UI preferences, and guest project recovery files. Warning: Manually clearing your browser's local storage or cache will permanently delete any unsaved or guest projects.
• Session Storage: Used for temporary, single-tab application state management.

6. Third-Party Services

We utilize carefully vetted third-party processors, including:

• Payment providers to securely process Subscription transactions.
• Cloud hosting providers to host the core application infrastructure.
• Analytics providers to monitor aggregated platform health.
• Error monitoring services to track and patch software bugs.
• CDN providers to globally distribute visual assets.

These third parties process data solely under our instructions where applicable.

7. International Transfers

Your data may be transferred to and processed in the India, UAE, Singapore, USA or other cloud regions. We ensure these transfers are protected by legally recognized safeguards, such as implementing Standard Contractual Clauses (SCCs) with our subprocessors where applicable.

8. Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

• Industry-standard transport encryption for all traffic.
• Encryption at rest where applicable for database records.
• Strict role-based access controls and authentication.
• Continuous security monitoring and regular updates.

9. Data Retention

We retain data only as long as required:

• Accounts & Projects: Retained for the lifetime of your active Account.
• Billing Records: Retained to comply with international tax laws.
• Support Tickets: Retained for up to 3 years for quality assurance.
• Backups: System backups undergo a rolling overwrite cycle.

10. Your User Rights

You have the right to request access, rectification, erasure, restriction, or data portability concerning your personal data. You may also object to processing or withdraw your consent at any time. To exercise these rights, please email privacy@scrollcam.com. We will acknowledge and fulfill your request within the period required by applicable law.

11. Children's Privacy

The Service is not intended for individuals under the age of 18 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect data from minors.

12. Notice to California Residents (CCPA)

We explicitly confirm that we do not sell your personal information, nor do we share your personal information for cross-context behavioral advertising purposes.

13. Automated Decision Making

We do not use automated decision-making processes or algorithmic profiling that produces legal effects or similarly significant effects concerning you.

14. Data Breaches

In the event of a security breach compromising your personal data, we will notify affected users and the relevant regulatory authorities promptly, strictly adhering to the notification timelines required by applicable law.

15. Account Deletion Execution

Upon initiating account deletion, your profile, credentials, and cloud-hosted projects are permanently erased from active production servers. Necessary financial data is isolated and retained solely for legal compliance. Any Exported Output you have physically downloaded remains safely on your devices and is entirely unaffected by account deletion.