Privacy Policy

Last updated: 2026-04-30

Who We Are

Stellar is operated by STELLAR RESTAURANTS LTD, company number SC526453, with its registered address at 99 Gorgie Park Road, Edinburgh, Scotland, EH11 2QL. Our website and platform are provided through scotsolove.com. For privacy questions or data protection requests, email support@scotsolove.com. In this policy, "Stellar", "we", "us", and "our" refer to STELLAR RESTAURANTS LTD. "You" means the person who visits our website, creates an account, uploads content, pays for a plan, or uses our AI reel generation tools.

This Privacy Policy explains what personal data we collect, why we use it, how long we keep it, who helps us process it, and what rights you have. We aim to describe our practices in plain English so you can make informed choices about using Stellar.

Information We Collect

We collect account data such as your name, email address, login details, billing status, selected plan, and communication preferences. When you use the service, you may upload photographs, video clips, captions, prompts, descriptions, brand assets, and related project instructions. We also create AI-generated outputs, including reels, still previews, captions, edit history, and generation metadata.

We collect payment metadata from Stripe, including customer ID, payment status, billing country, tax-related records, invoice IDs, plan or credit pack purchased, and dispute or refund status. We do not receive or store full card numbers. We also collect usage logs, device and browser data, IP address, approximate location derived from IP address, timestamps, pages viewed, actions taken, error logs, security events, cookie choices, and similar technical information needed to operate the platform.

How We Use Your Information

We use your information to create and manage your account, process your uploads, generate reels, provide previews and downloads, measure credit usage, deliver billing and refund workflows, and provide customer support. We also use data for fraud prevention, platform security, abuse detection, rate limiting, troubleshooting, service monitoring, tax and accounting compliance, and enforcing our Terms of Service.

We may use aggregated or de-identified usage information to improve the product, understand which features are useful, make the service more reliable, and plan future functionality. We may send operational emails about your account, billing, security, policy changes, or requested support. Marketing emails are sent only where permitted by law, and you can opt out of them at any time.

Legal Bases Under GDPR (Article 6)

Where GDPR applies, we rely on several legal bases. We use contract performance to provide the account, billing, credits, generation, and support services you request. We use legitimate interests to secure the platform, prevent fraud, improve reliability, analyse service usage, respond to business queries, and protect our legal position, provided those interests are not overridden by your rights.

We use legal obligation where we must keep tax, accounting, payment, corporate, or compliance records. We use consent for optional cookies, certain marketing communications, and any future use of identifiable uploaded content for AI model training. If we rely on consent, you may withdraw that consent without affecting processing that happened before withdrawal.

Sharing With Processors

We share personal data with service providers that process data for us under contract. Stripe processes payments, invoices, fraud checks, and related billing records. Stripe's privacy information is available at stripe.com/privacy. Supabase provides database, authentication, and storage infrastructure. Supabase privacy information is available at supabase.com/privacy.

Resend provides transactional email delivery, including account, billing, and support messages. Resend privacy information is available at resend.com/legal/privacy-policy. Vercel provides hosting, deployment, analytics, and edge infrastructure. Vercel privacy information is available at vercel.com/legal/privacy-policy. We also use a third-party AI provider to assist with reel generation. We share only the data needed to generate the requested output, operate safety checks, or investigate abuse.

International Transfers

Your data may be processed in the United States and other countries outside your country of residence. Where GDPR requires transfer safeguards, we use appropriate mechanisms such as the European Commission's Standard Contractual Clauses, commonly called EU SCCs, and additional technical and organisational measures where needed. These transfers allow us to use reliable infrastructure providers while still protecting your data under recognised legal safeguards.

Retention

AI reels and related project assets are deleted 30 days after creation unless a shorter retention period applies because you delete them first or an abuse investigation requires temporary preservation. Account data is retained while your account is active and for 90 days after closure so we can complete support, deletion, and security processes. Financial and Stripe records are retained for 7 years for tax, accounting, audit, refund, and dispute compliance.

Your Rights Under GDPR

Where GDPR applies, you may request access to your personal data, portability of data you provided, rectification of inaccurate data, erasure, restriction of processing, objection to processing based on legitimate interests, and withdrawal of consent. Some rights are subject to legal limits, for example where we must keep billing records or investigate abuse.

You may also lodge a complaint with the UK Information Commissioner's Office at ico.org.uk. We encourage you to contact us first so we can try to resolve the issue directly.

Your Rights Under CCPA

If the California Consumer Privacy Act applies to you, you may have the right to know what personal information we collect, delete personal information, correct inaccurate information, opt out of sale or sharing, and be free from discrimination for exercising your rights. You may use an authorised agent where permitted by law. We do not sell personal information. We also do not knowingly share personal information for cross-context behavioural advertising unless you have given the relevant cookie consent.

Children

Stellar is not directed to children. We do not knowingly collect personal data from users under 13. Users aged 13 to 17 may use Stellar only with verifiable parental or guardian consent. If you believe a child has provided personal data without the required consent, email support@scotsolove.com and we will take appropriate steps, including deletion where required.

Cookies

We use necessary cookies to provide authentication, payments, security, and preference storage. With your consent, we may use analytics cookies to understand platform usage and marketing cookies to measure campaign performance. More detail is available in our Cookie Policy at scotsolove.com/cookie-policy.

Security

We use technical and organisational safeguards designed to protect your data, including encryption in transit through TLS, encryption at rest where supported by our providers, access controls, least-privilege internal access, environment separation, logging, monitoring, and regular security review. No online service can guarantee absolute security, but we work to reduce risk and respond quickly to security events.

Changes to This Policy

We may update this Privacy Policy when our service, providers, legal obligations, or data practices change. If changes are material, we will notify you by email or in-app notice before or when the changes take effect. The "Last updated" date above shows the current version.

Contact and Data Protection Requests

To exercise privacy rights, ask questions, or make a data protection request, contact us using any of the channels below. We respond within 30 days unless the law allows a longer period because the request is complex or we need to verify your identity. Please include enough information for us to identify your account and understand your request.

Questions? Email support@scotsolove.com or call +44 7456 458776.

STELLAR RESTAURANTS LTD · Company No. SC526453 · Registered office: 99 Gorgie Park Road, Edinburgh, Scotland, EH11 2QL