Privacy Policy

1 Who is responsible

The legally registered business trading as GlobalScene is the controller or responsible party for personal information processed to operate GlobalScene. If you require the registered business name, registration details, business or service address, or other operator information, email GlobalScene.info@proton.me. This information will be supplied on request. Direct privacy questions, rights requests and requests for the relevant privacy lead or Information Officer to the same address. This Policy applies to the website and installable app, not the independent services users contact through external links.

2 Information we process

Account information includes the identifiers and login details supplied through the authentication service actually used, account email where collected, creative name and account status. Email and password accounts are created in this app. Google and X sign-in are offered through the Grok authentication service at auth.grok.me. Public profile and listing information includes creative field, samples, listing text, compensation label, creation labels, dates, comments and any contact information you choose to publish. Likes and reports may be associated with your account. A signup IP address may be stored with a profile.

Technical information may include IP addresses, browser and device details, request timestamps, error logs and security records needed to operate and protect the service. Support and moderation records include correspondence, reported URLs, supporting evidence and decisions. We do not currently collect payment-card details for GlobalScene purchases because platform payments are inactive.

Your chosen profile, listing, sample and contact details can be viewed by other people and may be indexed by search engines. Do not publish passwords, identity documents, financial account details, exact home addresses or confidential client information. Public material may reveal sensitive information even when we do not request it. Do not post another person's private information without a valid legal basis and permission where required.

3 Purposes and lawful grounds

We process necessary account and listing information to provide the service you request. Where applicable, this relies on performance of our agreement with you. We use necessary security and abuse-prevention records to protect users and the board, relying on legitimate interests where that ground is recognised and after considering impacts on users. Legal notices, valid official requests and required records are processed to meet applicable legal obligations.

Optional marketing and non-essential tracking require consent where applicable. Consent can be withdrawn without affecting the lawfulness of earlier processing. A service account is not permission to send promotional messages. GlobalScene does not send marketing email and does not collect a marketing preference. Public posting is your deliberate instruction to display the selected material; it does not authorise every secondary use of it.

Where POPIA applies, we use an applicable permitted justification and meet its processing conditions. GDPR terminology in this Policy does not mean GDPR applies to every user. Local legal rights depend on the circumstances and relevant law. We collect only information needed for the stated purposes; required fields are marked and optional information may be omitted. Without necessary account details, we may be unable to provide account features.

4 Providers and recipients

Authorised service providers may process necessary information for hosting, authentication, database and sample storage, security and support under appropriate instructions and safeguards. The register below lists only parties established from the application and its deployment setup. We do not describe unverified providers as active.

Other users receive information you intentionally make public. We may disclose limited information when lawfully required by authorities, to investigate serious abuse, protect legal rights or respond to valid legal proceedings. Any business transfer involving personal information requires appropriate safeguards and notice where required. We do not authorise providers to use private account data for their independent advertising purposes merely because they help operate the app.

Current position on sale, sharing for cross-context advertising and targeted advertising: this application’s own code has no advertising tags, analytics product, or sale of personal information. GlobalScene does not sell personal information and does not run its own cross-context advertising. The grok.com script above is loaded with the page. It is not described here as an advertising partner. Its cookies are listed in the Cookie Policy.

Database Hosting and Data Storage

GlobalScene uses Neon PostgreSQL, a managed cloud database service, to securely store and manage information necessary for the operation of the platform.

Depending on the features used, this information may include account details, user profiles, creative listings, comments, reports and other information submitted through GlobalScene.

Neon acts as a third-party infrastructure provider processing hosted information on behalf of GlobalScene for database storage, retrieval and management.

We apply appropriate technical and organisational security measures to protect personal information against unauthorised access, alteration, disclosure and loss.

Information may be stored or processed outside a user's country of residence, depending on the configured database hosting region and authorised service providers. Where international transfers of personal information occur, GlobalScene will apply the safeguards required by applicable data protection laws.

Users may contact us at GlobalScene.info@proton.me with questions about the storage or processing of their personal information.

5 International processing

Our providers may process information outside your country. On 14 October 2026, Vercel hosting for www.globalscene.world used region iad1 in the United States. The same day, responses from auth.grok.me and from the grok.com script had country code US and a Cloudflare ray ending EWR. Google sign-in, when chosen, goes to Google. The live database is Neon PostgreSQL. Its region is the configured hosting region and may be outside a user's country. This application does not hold a transfer contract for each provider, and accepting these Terms is not consent to every transfer. Where required, a transfer still needs an applicable lawful mechanism. Where POPIA applies, transfers must meet section 72. Contact us for what we can supply about a provider, subject to lawful redactions.

International Data Storage and Transfers

GlobalScene uses Neon PostgreSQL, a third-party managed database service, to store and process information necessary for operating the platform.

Our primary database may be hosted in the United States. Personal information may also be processed in other countries where our authorised service providers operate.

Where personal information is transferred internationally, GlobalScene takes steps to ensure those transfers comply with applicable data protection laws, including South Africa's Protection of Personal Information Act (POPIA), where applicable.

For questions about international data processing, please contact GlobalScene.info@proton.me.

6 Retention and security

We retain account information while the account is active and afterwards when a deletion request, security need, legal duty or dispute still requires it. Public listings leave the feed on expiry, filling or removal under the board rules. A filled listing stays labelled for 24 hours and then leaves the feed. Leaving the feed is not the same as erasure. The timetable below is what the server does next.

Implemented schedule, which the server enforces:

• Account content is removed when you delete the account from the Account page. That includes the profile, listings, samples, comments, likes, showcase pieces and the signup IP. It happens in that request, not after a waiting period. The same request also removes any unused billing entitlement rows so the profile can be deleted. Platform billing is not active.
• Terms acceptance rows and age-confirmation rows are kept. They are not deleted with the account.
• Reports you submitted are kept. An open report stays until it is closed. A closed report is then kept for the period below.
• A listing that has left the feed (archived or removed) is deleted after 180 days, including its sample and comments, unless an open report still points at that listing or one of its comments.
• A filled listing leaves the feed 24 hours after it is marked filled. That 24 hours is not the deletion period. The 180 days start when it leaves the feed.
• Closed reports are deleted 365 days after they were closed. Open reports are kept.
• Ban records are kept. This app does not expire them.
• This app does not keep its own request-log table and does not make its own backup copies. A host backup, if the host keeps one, is not on a schedule set here, and removed content is not put back on the board from a backup.

We use access restrictions in the application and protect sign-in cookies with the secure cookie settings configured in the auth library. Protection of data in transit depends on HTTPS as served by the host. No internet service can guarantee absolute security. We assess suspected breaches and notify affected people and regulators when required by applicable law. Do not send passwords or full identity documents by ordinary email unless a secure, necessary verification method has been agreed.

7 Your rights and requests

Depending on applicable law, you may request access, correction, deletion, restriction, portability, objection to certain processing and withdrawal of consent. South African users may have POPIA rights to access, correct or delete qualifying information and object to relevant processing. Additional regional rights, including advertising-related opt-outs, apply where the law and actual activity require them.

Email GlobalScene.info@proton.me with the subject Privacy request and explain the request, account identifier and relevant country. We verify identity proportionately and do not request more information than needed. Requests are usually free; lawful exceptions, fees or refusals will be explained. We respond within the applicable statutory deadline and explain any permitted extension. Where GDPR applies, the normal response period is one month, subject to lawful extensions.

You may complain to the relevant authority, including South Africa's Information Regulator at https://inforegulator.org.za/, your EEA supervisory authority or the UK Information Commissioner's Office at https://ico.org.uk/. You need not complain to us first. Deletion requests cannot make us erase another user's independently retained communications or material already copied by external parties, but we will explain the actions within our control.

8 Children

Accounts and posting are for adults aged 18 or over. Creating a profile requires you to confirm that you are 18 or older. That confirmation is stored with the policy version. It is not an identity-document check. We do not knowingly invite children to create accounts. If you believe a child has provided information through an account, contact us so we can assess restriction and deletion in accordance with applicable law. Do not upload a child's identifying information, likeness or voice without a lawful basis and appropriate permissions. Child exploitation material is prohibited regardless of permission claimed.

9 Cookies, automated tools and changes

The Cookie Policy explains cookies, browser storage, choices and embedded content. The board currently offers user-selected filters and sorting; likes do not rank people or jobs. AI labels describe how users say their samples were made. They are not AI detector results. We do not present the board as having AI matching or automated employment decisions.

If materially different profiling, automated moderation or AI processing is introduced, we will explain the actual processing, providers, purposes, safeguards and rights before use where required. This Policy does not authorise training on users' samples. We publish updated versions and give appropriate notice of material changes.

Legal hub · Terms · Privacy · Cookies · Community Standards · Copyright · Legal Information · Safety · Contact