Privacy Policy

Last updated: June 18, 2026

Scentori ("we," "us") operates the Scentori service. This policy explains what we collect, why, and your rights. We do not sell your personal information and we do not use third-party advertising trackers.

What we collect

  • Account info — email and (if you use Google) name and avatar from your Google profile.
  • Shelf data — fragrances you add, notes, reviews, ratings, wishlist items, photos you upload.
  • Optional profile — display name, avatar, and an approximate location if you grant access (used for weather-aware suggestions).
  • Usage & diagnostics — basic logs (request times, errors, IP, user agent) to keep the service healthy and secure.
  • Affiliate clicks — when you click an outbound buy link we log the destination retailer, timestamp, and your user ID (if signed in) to measure interest and reconcile commissions. See our Affiliate Disclosure.

Legal bases (EU/UK users)

  • Contract — to provide the account and shelf you signed up for.
  • Legitimate interests — to keep the service secure, prevent abuse, and improve features.
  • Consent — for optional features like location, marketing emails, and non-essential cookies. You can withdraw consent at any time.
  • Legal obligation — to respond to lawful requests and comply with applicable law.

How we use it

  • To run your private shelf and the community features you opt into.
  • To generate AI suggestions (occasion ranking, scent of the day, chatbot). Prompts are sent to our AI provider with the minimum context needed and are not used to train their models without your consent.
  • To send transactional email (sign-in, password reset, security alerts).
  • To send marketing email only if you opt in. Every marketing email includes an unsubscribe link and our mailing address.

What we never do

  • Sell or rent your personal information.
  • Share your personal information for cross-context behavioral advertising.
  • Show your email, exact location, or private shelf items to other users.
  • Use your photos in marketing without your explicit permission.
  • Use third-party ad pixels (Google Ads, Meta, TikTok, etc.).

Subprocessors

We rely on a small number of vendors who process data on our behalf under written data-protection terms:

  • Backend & database — Lovable Cloud infrastructure (powered by Supabase). Stores your account, shelf, and photos. Data is held in the US.
  • Edge hosting & CDN — Cloudflare. Serves the app and caches static assets.
  • AI provider — Lovable AI Gateway (Google Gemini and similar models) for AI features. Prompts contain the minimum context needed for the request.
  • Transactional email — Resend, for sign-in and security emails.
  • Sign-in providers — Google (if you choose Google sign-in).

International transfers

Scentori is operated from the United States. If you access Scentori from outside the US, your information will be transferred to and processed in the US. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

Data retention

  • Active accounts — kept as long as your account exists.
  • Deleted accounts — purged from production within 30 days; encrypted backups roll off within 90 days.
  • Logs & diagnostics — retained up to 90 days for security and debugging.
  • Affiliate-click logs — retained up to 24 months for commission reconciliation, then deleted or anonymized.

Your rights

Regardless of where you live, you can edit your profile, delete fragrances and reviews, toggle public shelf visibility, and delete your account at any time from Settings → Profile.

Depending on where you live, you may also have the right to access, correct, port, restrict, object to processing of, or delete your personal information, and to lodge a complaint with your local data-protection authority. EU/UK users have rights under the GDPR; California residents have rights under the CCPA/CPRA — see our Do Not Sell or Share My Information page.

To exercise any right we don't already give you in-app, email Scentori.info@gmail.com with the subject line "Privacy Request." We respond within 30 days (45 for CCPA, extendable as the law allows). We will verify your identity by confirming control of your account email.

Cookies and storage

We use first-party storage to keep you signed in and to cache your shelf for fast loads. No third-party advertising cookies. See our Cookie Policy.

Children

Scentori is not directed to children. You must be at least 13 years old (or 16 in the EU/UK and comparable jurisdictions) to create an account. We do not knowingly collect personal information from children under these ages. If you believe a child has provided us information, email Scentori.info@gmail.com and we will delete it promptly.

Security

We use industry-standard safeguards (encryption in transit, encryption at rest, row-level access controls, least-privilege access). No system is perfectly secure; if we become aware of a breach affecting you, we will notify you as required by law.

Changes

We may update this policy. Material changes will be surfaced in the app. The "Last updated" date above always reflects the current version.

Contact

Email Scentori.info@gmail.com or call 847-563-0495 with any privacy question.