Privacy Policy

Policy version: 1.0
Effective date: July 21, 2026
Privacy contact: support@scenerelay.com

1. Scope and who is responsible

This Privacy Policy describes how Robert Long, a sole proprietor offering the Scene Relay product (“Scene Relay,” “we,” “us,” or “our”), handles personal information through scenerelay.com, the Scene Relay customer account and checkout, software licensing and update services, transactional communications, and support.

This policy does not govern the independent WordPress events publication that a Scene Relay customer operates. The Scene Relay plugin is installed on hosting selected by that customer. Edition events, profiles, WordPress users, newsletter subscribers, local analytics, uploaded media, membership records, and settings remain in that customer-controlled WordPress environment and are not centrally collected by the Scene Relay licensing service. The customer operating that site is responsible for its own privacy notice, choices, retention, processors, and legal obligations.

For personal information covered by this policy, the responsible party is:

Robert Long, sole proprietor
Scene Relay
175 Garner Ave
Buffalo, NY 14213
support@scenerelay.com

Robert Long determines the purposes and means of the vendor-platform processing described in this policy. Scene Relay has not appointed a separate data-protection officer or international representative. Questions about the responsible party or applicable privacy role may be sent to the privacy contact above.

2. Information we collect

A. Account and contact information

We collect information you provide when creating or using a Scene Relay customer account, such as your email address, username or display name, account authentication information, and support contact information. WordPress stores passwords as password verifiers rather than readable plaintext passwords.

If you contact support, we receive the message and any information or files you choose to include. Please do not send passwords, payment credentials, API keys, database exports, complete Scene Relay purchase keys, or activation tokens by email.

B. Purchases, subscriptions, and recurring-charge consent

For the $199 USD annual auto-renewing Scene Relay software subscription, we store commercial records such as:

product, plan, currency, fixed charge total, internally allocated tax, net-sale, refund, and dispute amounts;
purchaser, billing, or software-use location information used to source and document an internal tax allocation;
order, checkout, customer, subscription, plan, invoice, payment, refund, and dispute references supplied by Square;
payment, renewal, cancellation, refund, dispute, and entitlement status and timestamps;
billing cadence, paid-through date, grace-period boundary, and cancellation-at-period-end status; and
the policy and recurring-charge disclosure versions accepted at checkout, acceptance time, and an integrity-protected consent record.

The consent record includes a keyed fingerprint derived from limited request context such as network address, browser user-agent, and language header. Scene Relay stores the fingerprint, not those raw values, in its consent table.

Square hosts or tokenizes payment entry and processes payment-card information. Scene Relay does not receive or store complete card numbers, card security codes, or bank credentials.

Scene Relay's launch price is exactly $199 USD total for every buyer. No tax is added at checkout. Where Scene Relay determines that sales, use, or a similar transaction tax applies, Scene Relay uses purchaser/use location information to record the applicable allocation internally within that fixed total. Square processes the payment but does not calculate that internal allocation.

Location evidence is limited to the information requested during checkout or account administration and information Square makes available for the transaction. Scene Relay restricts access to commercial records to authorized operational use. Any internal allocation is calculated and rounded in United States dollars without increasing the customer’s $199 USD total. A purchaser seeking exemption treatment should contact support@scenerelay.com before purchasing.

C. License, installation, and update information

When you activate, validate, deactivate, or update Scene Relay, the vendor service may receive and store:

your license’s public reference, product, plan, commercial state, paid term, grace period, and activation allowance;
a random installation identifier;
normalized WordPress site URL and host;
the server-classified environment, such as production, staging, or local;
Scene Relay plugin and WordPress versions;
activation, validation, deactivation, and update timestamps and status; and
request correlation identifiers, release version, package authorization, digest, and download audit information.

The purchase key is used for activation but is not stored by the installed plugin. The vendor database stores non-reversible verifiers for purchase and activation secrets. A newly issued or rotated license key may be held for no more than seven days in an authenticated-encryption envelope that is bound to the customer, order, license, and recipient context. It is revealed only through an authenticated account action and is purged after its one-time reveal, expiry, or a full refund.

The Scene Relay licensing service does not collect your edition’s posts, profiles, attendees, subscriber list, local audience analytics, page contents, WordPress user list, installed-plugin inventory, map keys, or arbitrary diagnostics. It does not perform a licensing request on each public page view.

D. Transactional email information

We use Resend to process account, license, purchase, billing, cancellation, refund, payment-recovery, and renewal messages. Depending on the message, Resend receives the recipient email address, sender/reply-to information, subject and message content, an authenticated account link, and bounded message tags or identifiers needed for reliable delivery.

License messages do not contain the plaintext license key or its encrypted delivery envelope. Scene Relay stores bounded provider message identifiers, message type, status, timestamps, idempotency and request hashes, and signed delivery-event projections such as sent, delivered, delayed, bounced, complained, failed, or suppressed. Scene Relay does not persist the raw Resend webhook body.

E. Website, login, and security information

The vendor website uses WordPress authentication and security mechanisms. Necessary cookies may maintain a signed-in session, remember login preferences, protect forms, and support account security. A cookie’s exact name and duration can vary with the WordPress version and account settings.

The Scene Relay application does not currently include a cross-site behavioral advertising or behavioral-analytics service. Standard web-server, hosting, firewall, DNS, or security logs may nevertheless process network address, request time, requested path, user-agent, referrer, and security events for delivery, abuse prevention, and incident response. The Scene Relay commercial application’s audit and webhook tables use redacted or hashed context and do not store raw visitor IP addresses. Short-lived application rate-limit counters use a keyed hash of network context rather than a raw address.

Scene Relay uses a managed web-hosting environment with server backups, DNS, TLS, access logging, and security controls. Those systems may process the limited request and security data described above. Scene Relay does not currently use advertising, chat, session replay, or cross-site behavioral analytics. We will update this policy before materially changing those practices.

3. How we use information

We use the information described above to:

create and secure customer accounts;
create checkout sessions and administer the annual auto-renewing subscription;
verify recurring-charge consent and preserve transaction records;
reconcile authoritative payment, renewal, cancellation, refund, and dispute status with Square and maintain purchaser/use-location and internal tax-allocation records separately;
issue and administer licenses and installation allowances;
authorize protected releases, downloads, and updates;
deliver required account and commercial messages and investigate delivery failures;
provide support and respond to account, privacy, and security requests;
prevent duplicate fulfillment, fraud, credential abuse, and unauthorized access;
maintain redacted audit, webhook, and release-integrity records; and
comply with accounting, tax, legal, security, and recordkeeping obligations.

We do not use customer-site edition content or visitor behavior for targeted advertising because the vendor licensing service does not collect that information.

Where a legal basis is required, we process account, checkout, licensing, download, update, and support information to perform our contract with you; financial, tax, consent, and compliance records to meet legal obligations; and security, fraud-prevention, audit, and service-integrity information for our legitimate interests in operating and protecting Scene Relay. Where processing relies on consent, you may withdraw that consent prospectively, but withdrawal does not affect prior lawful processing or records that must be retained for another lawful basis.

4. Sources of information

We obtain information:

directly from you when you register, check out, manage the account, or contact support;
automatically from the installed Scene Relay licensing/update client when an administrator performs activation or when bounded background validation/update requests occur;
from Square regarding checkout, payments, subscriptions, invoices, refunds, disputes, and available purchaser or billing details;
from Resend regarding message acceptance and delivery status; and
from hosting and security systems when needed to operate and protect the vendor website.

5. When we disclose information

We disclose personal information only as needed for the purposes above, including to:

Square, which hosts or tokenizes checkout and processes subscription payments, renewals, refunds, and disputes; Square does not calculate Scene Relay's internal tax allocation;
Resend, which sends transactional account, license, purchase, billing, and renewal email and returns delivery status;
hosting, infrastructure, backup, DNS, and security providers that operate or protect scenerelay.com;
professional advisers such as accountants, attorneys, insurers, or security specialists subject to appropriate duties;
government authorities or other parties when required by law or reasonably necessary to protect rights, safety, security, and service integrity; and
a successor in a merger, acquisition, financing, reorganization, or transfer of the Scene Relay business, subject to applicable notice and legal requirements.

We do not sell personal information for money. Based on the current architecture, we do not share personal information for cross-context behavioral advertising or use it for targeted advertising.

Square and Resend are the principal third-party processors used for the commercial service. Managed hosting, backup, DNS, email-routing, and security providers process data only as needed to operate and protect the service. These providers may process information in the United States or other locations in which they operate and are governed by their own contractual and privacy obligations. Current provider information is available from support@scenerelay.com.

6. Payment information

Square is the payment provider for purchases of the Scene Relay software subscription on scenerelay.com. Payment entry occurs in Square-hosted or Square-tokenized components. Square’s own privacy notice governs the information it collects and processes for payment, fraud, regulatory, and financial purposes.

Scene Relay stores provider identifiers, commercial totals, purchaser/use location information, and internal allocation records needed to fulfill, reconcile, and account for the order, but not raw card or bank credentials.

Scene Relay does not process ticket payments. Scene Relay Pro can let a customer connect its own supported payment-provider account for customer-site memberships or promoted placements. Those credentials and transaction records remain in the customer-controlled WordPress environment and with the customer’s selected provider; the Scene Relay vendor licensing service does not centrally collect the credentials or funds. When a visitor uses a customer’s payment flow or leaves for an organizer-selected ticket provider, that customer, organizer, and provider determine the applicable privacy practices.

7. Retention

We keep information only as long as reasonably necessary for the purposes described in this policy, including service delivery, security, accounting, tax, consent evidence, dispute handling, fraud prevention, and legal compliance. The following current technical rules apply:

a recoverable encrypted license-key envelope expires after no more than seven days and is purged earlier after its authenticated one-time reveal or a full refund;
raw Square and Resend webhook bodies are not retained by the Scene Relay application; minimal event identifiers, payload hashes, status, timestamps, and redacted error information are retained for replay protection and incident response;
active installation details are retained while needed to provide licensing and protected updates;
after an installation has been deactivated, its site URL, host, installation identifier, environment, and software versions can be anonymized through the privacy-request workflow while lifecycle and entitlement history remains; and
financial, license, subscription, payment, refund, consent, notification-delivery, and redacted audit records may need to remain after account closure or an erasure request.

Unless a longer period is required for a legal hold, dispute, fraud investigation, or applicable law, Scene Relay applies the following schedule:

account profile information is retained while the account is active and for up to three years after closure;
support correspondence is retained for up to three years after the request closes;
order, subscription, payment, refund, dispute, tax-allocation, and recurring-charge consent records are retained for up to seven years after the relevant transaction or subscription ends;
license, entitlement, activation lifecycle, download, and redacted audit records are retained for up to seven years after the related commercial relationship ends;
webhook replay and transactional-email delivery records are retained for up to two years;
application security and rate-limit records are retained for up to one year unless needed for an active incident; and
routine backups age out under the hosting backup cycle, ordinarily within 90 days, unless isolated for recovery, security investigation, or a legal hold.

At the end of the applicable period, information is deleted or anonymized where reasonably feasible. Legal holds temporarily override ordinary deletion deadlines.

8. Your privacy choices and rights

Depending on where you live, you may have rights to request access, correction, deletion or anonymization, portability, restriction, objection, withdrawal of consent, or information about disclosures, and to appeal a denied request. These rights can be subject to identity verification and legal exceptions, including the need to retain financial, security, entitlement, consent, and dispute records.

You may update ordinary account information through your account where available. You can deactivate a Scene Relay installation before requesting anonymization of its operational site information. Active installation data cannot be anonymized while it is required to deliver the activation and update service.

To submit a request, email support@scenerelay.com from the address associated with your account. Do not send a password, complete license key, or activation token. We may ask for additional, proportionate verification. You may also contact us at the mailing address below.

We will respond within the period required by applicable law. An authorized agent may submit a request if the agent provides reasonable proof of authority and we can verify the relevant customer. We will not unlawfully discriminate against you for exercising a privacy right. If we deny a request, you may ask us to reconsider by replying to the decision, and you may contact the privacy regulator available in your jurisdiction. WordPress privacy export and erasure tools may be used internally to fulfill a verified request; email to support@scenerelay.com is the public request channel.

9. Cookies and similar technologies

The current vendor site uses cookies that are necessary for WordPress login, account sessions, preferences, checkout/account form protection, and security. The current Scene Relay storefront code does not add behavioral-advertising cookies.

Necessary WordPress cookies include authentication and secure-session cookies, login-preference cookies, and form/security cookies. Session cookies ordinarily expire when the browser session ends; persistent login or preference cookies may last from several days to approximately one year depending on the selected account option and WordPress configuration. Square may set its own necessary fraud-prevention and checkout cookies on Square-hosted or tokenized payment components under Square’s privacy notice. Because Scene Relay does not currently sell or share personal information for behavioral advertising, Global Privacy Control and “Do Not Track” signals do not change current processing. We will reassess consent and signal handling before enabling nonessential tracking.

10. Security

Scene Relay uses measures designed to protect account and commercial information, including HTTPS, access controls, non-reversible credential verifiers, encrypted short-lived credential delivery, request authentication, signed webhook verification, idempotency and replay protections, bounded logging, and protected release storage.

No system is completely secure. You are responsible for protecting your account, email account, WordPress administrator credentials, hosting, backups, and any credentials used only on your customer-controlled site. Contact support@scenerelay.com if you believe your Scene Relay account or license credentials have been compromised.

We investigate suspected security incidents and will notify affected people and authorities when required by applicable law. Security concerns should be reported promptly to support@scenerelay.com without including passwords, license keys, payment credentials, or other secrets.

11. International processing

Square, Resend, hosting, and other providers may process information in the United States and in other locations different from your own. Where applicable law requires a transfer mechanism or additional safeguard, we rely on the provider’s applicable contractual terms or another legally recognized mechanism. You may request current transfer information through support@scenerelay.com.

12. Children

Scene Relay’s commercial account and software subscription are intended for people at least 18 years old with legal capacity to enter the purchase agreement and are not designed or knowingly offered as a child-directed service. The customer operating an independent Scene Relay edition remains responsible for that site’s users, audiences, age-related requirements, and privacy notice.

13. Changes to this policy

We will post an updated effective date when this Privacy Policy changes. For a material change affecting existing customers, we will ordinarily provide at least 30 days’ advance notice by email or through the customer account. We may make an immediately effective change when reasonably necessary for security, legal compliance, fraud prevention, or to correct an error, with notice or consent when required by law. Checkout records the version of the Privacy Policy accepted with the applicable recurring-charge disclosure.

14. Contact us

For privacy questions or requests:

Robert Long, sole proprietor
Scene Relay
175 Garner Ave
Buffalo, NY 14213
support@scenerelay.com