Privacy Policy

Effective Date: 2024-01-28

This Privacy Policy explains the data collection, use, and sharing practices of StudioD24, the company behind the Dreamala service. We recommend that you read this Privacy Policy in full to ensure you are fully informed. If you have any questions about this Privacy Policy or data collection by StudioD24, use, and disclosure practices, please contact us at support@dreamala.com.

COLLECTION AND USE OF DATA

Information You Provide to Us:

When you use Dreamala, we collect and store information that you provide directly to us, such as when you create an account, log your dreams, generate AI images, or participate in any interactive features of our services. This information may include your name, email address, dream data (including descriptions, timestamps, summaries, characters, keywords, and categorized themes), and any other information you choose to provide.

Information We Collect Automatically:

When you use Dreamala, we may also automatically collect information about your use of our services, including your engagement with the service, the date and time of your visit, the pages you view, and other information about your interactions with the service.

Use of Information:

We use the information we collect to provide, maintain, and improve Dreamala, including to generate AI images based on your dream data. We also use this information to communicate with you, such as to send you email notifications about your account and to respond to your comments, questions, and requests for customer service.

Data Deletion:

We retain this data for as long as you have an active account or when your account has been inactive for 2 years. After this period, user data is automatically deleted. Automated deletion is done for service provision and legal compliance. Prior to automated deletion, we will notify you via email and provide you with the opportunity to export your data or delete it immediately.

TRACKING TECHNOLOGIES ON OUR WEBSITE

Cookies and Similar Technologies: We may use cookies, pixel tags, and similar technologies to collect information about you when you use Dreamala. These technologies help us understand how you interact with our service, enable you to log in to the service, and help us improve the service. You can disable cookies in your browser settings, but some parts of our service may not function properly without them.

INFORMATION SHARING

We will not share your personal information with any third parties without your consent, except as necessary to provide the Dreamala service or as required by law.

Third Party Services:

We may share your information with third-party service providers who assist us in operating our services, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. These third parties include:

Payment Processors: We use Stripe to process payments. Stripe may receive and store your payment information, including your billing address, for the purpose of processing payments. We do not store your credit card number or other payment information.

Analytics:

We use Mixpanel to analyze how users use our services. Mixpanel may receive and store information such as your IP address, device type, browser type, and other information. Mixpanel is prohibited from sharing this information with third parties except as required by law. Opting out of cookies on the website will also opt you out of Mixpanel tracking (see section "TRACKING TECHNOLOGIES ON OUR WEBSITE"). We use Mixpanel’s EU data center.

Data Storage:

Our database and backend processing is hosted on Supabase, which in turn uses AWS services. Your data is stored in EU datacenters and processed by EU-based servers.

Website Hosting:

Our website is hosted on Vercel, which may collect information about your visit to our website, including the pages you view, the links you click, and other actions you take on our website. This information is used to improve our website and services.

Email Service:

We use Resend to send emails. Resend may receive and store information such as your email address, for the purpose of sending you email notifications.

DATA SECURITY

We use reasonable measures to help protect your personal information and to maintain its accuracy. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security, and improperly collect, access, steal, or modify your information. Despite our best efforts, third party interceptions of online transmissions are possible. We will promptly notify you if we become aware that your personal information has been compromised.

We also recommend that you take additional measures to protect your information, such as keeping your login credentials confidential, logging out of your account when you're not using it, and keeping your web browser up-to-date. Should you suspect any unauthorized activity related to your account, it is your responsibility to contact us immediately.

While we strive to protect your personal information, we cannot guarantee the absolute security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

In the unlikely event of a data breach, we commit to complying with applicable laws and regulations pertaining to breach notification, and to communicating with you honestly and openly about what occurred. We will act swiftly to mitigate the impact of any breach and to restore the integrity and confidentiality of any compromised data.

We use industry-standard encryption protocols (e.g., TLS) to protect your data during storage and transmission. We regularly conduct security audits. Our employees receive ongoing training in data security procedures.

USER CHOICES AND CONTROLS

StudioD24 values your privacy and is committed to providing you with choices and controls regarding the personal information you provide. Here are the options available to you:

Account Settings: You can review and update your account information and privacy settings by accessing your account settings on the Dreamala service.

Opt-out Options: Dreamala may send you updates, newsletters, or promotional materials. You have the option to opt-out of receiving such communications by following the unsubscribe instructions provided in the emails.

Data Deletion: You can request the deletion of your account and associated data by contacting our support team. Please note that certain information may be retained for legal or legitimate business purposes.

Data Portability: You can request a copy of your data in a format that is readable by you by contacting our support team.

Cookie Controls: You have the ability to manage your cookie preferences through your web browser settings. Please refer to our "TRACKING TECHNOLOGIES ON OUR WEBSITE" section for more information.

DATA PROTECTION AND GDPR/CCPA COMPLIANCE

This section outlines our commitment to comply with the EU General Data Protection Regulation (GDPR), the Finnish Data Protection Act, and the California Consumer Privacy Act (CCPA), where applicable. We recognize the importance of protecting the personal data of all users, regardless of their location.

Our commitment includes:

Data Minimization: We collect only the necessary personal data to provide the Dreamala service. We have implemented data minimization practices to ensure the data we collect is strictly necessary for the services provided. We will not collect or retain more data than needed to fulfill the purpose for which it was collected.

User rights:

You have the rights to access, rectify, delete, restrict, and object to the processing of your personal data in accordance with the GDPR and, where applicable, the CCPA. You can exercise these rights by contacting us at support@dreamala.com.

Transparency:

We are transparent about our data practices and have made every effort to clearly explain them in this Privacy Policy.

Data Subject Access Requests (DSARs):

We have implemented procedures to manage and respond to DSARs in accordance with the GDPR and Finnish law. DSAR requests should be submitted to support@dreamala.com. We will respond to DSAR requests within 5 working days of receiving the request. We will process the request within 30 days of receiving it.

Legal Basis for Processing:

We process your personal data based on legitimate interest, consent, contract, legal obligation, or public interest.

Where applicable, we will comply with the requirements of the CCPA regarding consumer rights, including the rights to deletion, access, and portability of data, as detailed in this Privacy Policy. As a company based in Finland, we comply with the principles of the GDPR. However, in relation to Californian users, we will address the aforementioned CCPA rights.

CHANGES TO THIS PRIVACY POLICY

StudioD24 may update this privacy policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify users of any material changes by posting the updated policy on our website. It is your responsibility to review this policy periodically to stay informed about how we are protecting your information.

CONTACT US

If you have any questions, concerns, or feedback about this privacy policy, or if you would like to exercise your rights or make a complaint, please contact us at support@dreamala.com.

ACCEPTANCE OF TERMS

By using the Dreamala service, you signify your acceptance of this Privacy Policy. If you do not agree to this policy, please do not use our services.

Thank you for entrusting Dreamala with your dreams. We are dedicated to ensuring the security and privacy of your personal information.

Last Updated: 2024-10-01