Privacy Policy

1. Introduction

This Privacy Policy describes how Scale Montage (hereinafter "we", "our", or "the Service"), operated by SAS MV GROUP, collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

By using Scale Montage, accessible at montage.scale-theme.com, you agree to the practices described in this policy. This policy also covers the Eragen carousel-AI module, which extends the Service with AI-assisted carousel composition, image generation, and content moderation (see Section 10).

2. Data Controller

The data controller is:

• Company: SAS MV GROUP
• Legal form: SAS (Simplified Joint-Stock Company)
• Address: 5B rue des Alouettes, 89100 Soucy, France
• Email: contact@scalemontage.com

3. Data We Collect

3.1. Data provided directly by the user

• Registration data: name, email address, password (hashed)
• Content: uploaded videos, descriptions, hashtags, captions
• Settings: publishing preferences, scheduling options

3.2. Data collected via third-party platforms

When you connect a third-party platform account, we collect the following data via the official APIs of these platforms:

3.3. Data collected automatically

• Session data: session identifier, login date
• Technical data: IP address, browser type (for security purposes)

4. Purpose of Data Processing

We use your data for the following purposes:

5. Data Storage and Security

5.1. Hosting

Your data is hosted on servers located in France, operated by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France. OVH is ISO 27001 certified and GDPR compliant.

5.2. Security Measures

We implement appropriate technical and organizational measures to protect your data:

• OAuth token encryption: access tokens for third-party platforms are encrypted (AES-256) before database storage
• Password hashing: passwords are hashed using a secure algorithm (bcrypt)
• HTTPS connections: all communications are encrypted via TLS
• Access control: data access is restricted based on the principle of least privilege
• CSRF protection: protection against Cross-Site Request Forgery attacks for OAuth flows

5.3. Data Retention

• Account data: retained as long as the account is active, deleted within 30 days of a deletion request
• OAuth tokens: retained as long as the third-party account is connected, deleted immediately upon disconnection
• Videos: retained as long as the account is active, deleted upon account deletion
• Analytics: retained for 24 months, then anonymized or deleted
• Technical logs: retained for 12 months

6. Data Sharing

We never sell your personal data. Your data may be shared with:

• Connected third-party platforms: only the data necessary for publishing (video content, descriptions, hashtags) and in accordance with the permissions you have granted
• Hosting provider (OVH): as part of the technical hosting of data
• Competent authorities: in case of legal obligation

No data transfers outside the European Union are performed, except through the APIs of third-party platforms (TikTok, Meta, Google), which are subject to their own privacy policies and appropriate transfer mechanisms (standard contractual clauses).

7. Your Rights (GDPR)

Under the GDPR and the French Data Protection Act, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your data
• Right to data portability: receive your data in a structured, readable format
• Right to object: object to the processing of your data
• Right to restriction: request restriction of the processing of your data
• Right to withdraw consent: withdraw your consent at any time (disconnect third-party accounts, delete your account)

To exercise your rights, contact us at contact@scalemontage.com. We will respond within a maximum of 30 days.

You also have the right to lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr.

8. Data Deletion

You can delete your data in several ways:

• Disconnect a third-party account:from the "Social Accounts" page in the application, which immediately deletes the associated tokens and data
• Delete your account: by contacting contact@scalemontage.com, which triggers the complete deletion of all your data
• Deletion callback: if you revoke access from a third-party platform (e.g., Facebook/Instagram settings), we receive a notification and automatically delete the associated data. See our Data Deletion page.

9. Third-Party Services

Our Service integrates with the following platforms, which have their own privacy policies:

• TikTok: TikTok Privacy Policy
• Meta (Instagram / Facebook): Meta Privacy Policy
• Google (YouTube): Google Privacy Policy

10. Eragen Carousel AI Module

The Eragen module adds AI-assisted carousel creation to the Service. The following data flows are specific to this module:

10.1. Image moderation

Every image you upload to the carousel editor is first sent to OpenAI's moderation API (omni-moderation-latest) to detect unsafe content. Only a verdict is stored on our side ; OpenAI does not retain moderation inputs for training.

10.2. AI image generation

When you ask the editor to generate a slide background or visual asset, the prompt (and optionally reference images you select) is sent to a third-party generation provider — fal.ai, OpenAI, or another provider we may add later — to produce the bitmap. The generated image is stored in your project ; the prompt is kept as provenance so you can regenerate. Reference providers' terms ( fal.ai, OpenAI) apply to that processing.

10.3. AI agent assistance

When you interact with the carousel agent (chat panel of the editor), your messages and the structured state of the carousel you are editing are sent to a large-language-model provider — currently Anthropic (Claude) or MiniMax, behind a provider-agnostic router — so the agent can reason about your edits and call tools on your behalf. Conversations are not used to train these models when the provider honours its "zero data retention for API" setting, which we enable wherever supported.

10.4. URL imports

The editor can import public posts from URLs you paste (TikTok, Instagram, etc.) to clone them as editable drafts. Only content that is publicly accessible at the URL is fetched ; no third-party credentials are used. By pasting a URL, you confirm that you have the right to reuse the content for your own creative purposes and you accept responsibility for any subsequent use.

10.5. Training

We do not train any models on your carousels, prompts, uploaded images, generated images, or chat messages.

11. Cookies

For more information about our use of cookies, please see our Cookie Policy.

12. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with a revised update date. In case of significant changes, we will notify you by email.

13. Contact

For any questions about this privacy policy or your personal data, contact us at contact@scalemontage.com.