Privacy Policy

1. Information We Collect

We collect the following types of information:

Account information: When you sign in with Google, we receive your name, email address, and profile picture from Google OAuth.

Usage data: We log your AI generations, credit balance, and transaction history.

Payment data: Payment processing is handled by PayPal. We do not store your credit card information — only transaction records and credit grants.

Technical data: We may collect IP addresses, browser type, and device information for security and analytics purposes.

2. How We Use Your Information

We use your information to:

Provide and maintain our AI generation services.

Process payments and manage your credit balance.

Communicate with you about your account and service updates.

Improve our services and develop new features.

Detect, prevent, and address technical issues, fraud, and security concerns.

3. Data Storage

Your data is stored on Cloudflare infrastructure, including Cloudflare D1 (SQLite at the edge) for user accounts, credit ledgers, and generation records.

Uploaded images are processed by our AI provider (Atlas Cloud) for generation and are not permanently stored on our servers unless you explicitly save them to your dashboard.

4. Third-Party Services

We use the following third-party services:

Google OAuth: For authentication. See Google’s Privacy Policy for details.

PayPal: For payment processing. See PayPal’s Privacy Policy for details.

Atlas Cloud / KubeDL: For AI image and video generation.

Cloudflare: For web hosting, database, and security.

5. Cookies

We use a session cookie (ai_dream_session) to maintain your authenticated session. This cookie is a signed JWT and does not contain personally identifiable information in plaintext.

We do not use third-party tracking cookies or advertising cookies.

6. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.

Generation records and uploaded images may be retained for up to 90 days after deletion for abuse prevention purposes.

7. Your Rights

You have the right to:

Access the personal data we hold about you.

Request correction of inaccurate data.

Request deletion of your data.

Export your data in a portable format.

Withdraw consent for data processing at any time.

8. Security

We implement industry-standard security measures including encrypted session tokens, HTTPS for all traffic, and secure secret management via Cloudflare Workers.

However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children’s Privacy

Our services are not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have collected data from a child, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a new "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at ai-dream.html5beta.com.