Privacy notice.

This notice covers Scenario’s website, accounts and workspaces. When you connect a supported provider, add business context or ask Scenario a question, the information involved may contain personal data about you, your staff or customers. You should only provide information you are entitled to use.

When you sign up, we receive your name, email address and, for email sign-in, a protected password hash. If you use Google or GitHub, we receive the information needed to sign you in, such as a provider identifier, email and profile image. We keep sessions, verification and security records, including IP address, browser or device details and rate-limit records.

In a workspace, we process information you enter or upload, connected account data, derived metrics, scenarios, questions, responses and service usage. Connected Stripe data may include customer, invoice, subscription and payment records relevant to the analysis. For a paid plan, we keep Stripe customer and subscription identifiers, the plan, payment status and cancellation setting. Stripe processes the payment details; Scenario does not receive full card numbers. If you email us, we receive your message and contact details. Site visits also generate technical requests and server logs.

We use account information, workspace content and necessary cookies to provide sign-in, connections, analysis, answers and service messages. Where we act as controller, the lawful basis is performance of our agreement or steps you request before entering one. We use technical and security records to prevent abuse and maintain the service under our legitimate interest in a secure, reliable service. We use correspondence to respond to you under that same interest or, where relevant, to take steps you request before a contract.

Where your workspace contains other people’s data, your business may be the controller and Scenario may process it on your behalf. Contact us if you need to discuss a data processing agreement before providing such data.

We use Neon to host the database, Resend for account emails, and Better Auth software for sign-in. Google or GitHub is involved if you choose its sign-in option. We check new passwords against a breached-password service. We use model providers, including Cerebras and OpenRouter where configured, to process relevant questions and business context for the requested feature. Stripe processes subscription payments and provides account data you authorise us to read. Other connected providers receive the requests needed to maintain a connection and retrieve the information you authorise. Email providers handle correspondence.

Some providers may process information outside the UK. If you need details of a specific provider or transfer for your use of Scenario, contact us before connecting or uploading sensitive information.

Scenario uses cookies needed to keep you signed in and protect your account. These are essential to the service you request. We have not added advertising or analytics cookies. If that changes, we will explain them and ask for consent where required.

Sessions expire after seven days unless renewed through use. Verification and reset links expire sooner. We keep account and workspace records while your account is open. On closure, you can request removal of account and workspace information, subject to records we need for security, legal or dispute reasons. Disconnecting a provider stops future access; it does not by itself erase information already imported. Contact us about deletion of that information.

You can ask to access, correct or erase your personal information, restrict its use, object to use based on legitimate interests, or receive information you supplied in a portable form where the law applies. Email us to exercise a right. We may need to verify your identity and may have a lawful reason to keep some records.

You can complain to the Information Commissioner’s Office in the UK. We would welcome the chance to address your concern first.

We will update this notice when the service or its providers change materially. The date above shows when it was last updated.