For teams that need paperwork.

This agreement is between a business customer (“you”) and BLM GROUP SRL (CUI 51672006, Trade Register J2025028942008, Str. Dionisie cel Mic 53C, Bl. 50A, Sc. D, Et. 3, Ap. 52, 900355 Constanța, Romania), which runs loudscene (“we”). It covers the personal data you put into loudscene about other people, and that we process for you while providing the service. It is part of our Terms of service and applies automatically when you use loudscene for a business; nothing needs to be signed.

If you need a countersigned copy for your records, write to contact@loudscene.com with your company's name and address. Where this agreement and the Terms disagree about personal data, this agreement wins.

For data in your workspaces (people named or shown in your videos, testimonials, your team members, guests who comment on review links) you are the controller and loudscene is your processor. For our own account, billing and website data we are the controller, as described in the Privacy policy.

We process your personal data only to provide loudscene to you and only on your documented instructions: these Terms, this agreement, and what you do in the product (the sites you paste, the briefs you write, the videos you make, share and delete). We do not use it for our own purposes, sell it, or train AI models on it.

If we believe an instruction breaks data protection law, we tell you. If the law requires us to process data in another way, we tell you first, unless the law forbids it.

Everyone at loudscene who can access your personal data is bound by confidentiality, and access is limited to what they need to run and support the service.

• Workspace isolation enforced in the database by row-level security on every request.
• Encryption in transit (HTTPS/TLS) everywhere, and encryption at rest for the database and file storage.
• API keys stored only as hashes; connector credentials stored encrypted.
• Generated animation code runs in a sandbox with no network access; brand extraction refuses private network addresses.
• Roles per workspace (owner, admin, editor, viewer, client reviewer) that decide who can see and change what.
• Technical logs kept for up to 30 days, to detect misuse and fix errors.

You authorise the sub-processors listed in our Privacy policy. We bind each of them to data protection terms at least as protective as these. We announce a new sub-processor at least 30 days before it starts processing your data; if you object on reasonable data protection grounds and we cannot resolve it, you may end the affected service and get a pro-rata refund of what you prepaid for it.

Your workspaces are stored in the EU (Frankfurt, Germany). Some processing happens outside the EU, for example while our hosting serves a request or an AI provider writes a script. Any such transfer relies on the EU Standard Contractual Clauses or an adequacy decision, such as the EU-US Data Privacy Framework.

We help you answer requests from the people whose data you hold (access, correction, deletion, export), mostly through the product itself and otherwise on request. We also give you the information you need for data protection impact assessments and for consultations with a supervisory authority.

If a breach affects your personal data, we tell you without undue delay and within 48 hours of becoming aware of it, with what we know: what happened, the data and people likely affected, the likely consequences, and what we are doing about it. We keep you updated as we learn more.

You can export your videos at any time. When you delete a workspace, or ask us to delete your account, we delete its personal data within 30 days, and from any backups within 90 days, unless the law requires us to keep part of it (for example invoices).

We make available the information needed to show we meet this agreement, normally through our security documentation and written answers to your questions. If that is not enough, you may audit us once a year, with 30 days' notice, during business hours, at your cost, and under confidentiality, or ask an independent auditor to do so.

• Subject and purpose: providing loudscene: reading brands from websites, writing and animating videos, rendering, hosting share and review pages, and the integrations you turn on.
• Duration: as long as you use loudscene, plus the deletion periods above.
• Types of personal data: whatever you put in your workspaces, typically names, job titles, photos and logos, quotes and testimonials, text from your website, email addresses of people you invite, and comments on review links.
• People concerned: your team members, your customers and partners featured in your videos, and guests you invite to review.
• Special categories: loudscene is not designed for them (such as health data); please do not upload them.