Privacy Policy

1. Information We Collect

Dream Cloud collects the following categories of data:

• —Account info — email address, display name, and authentication credentials
• —Dream & reading data — dream text, readings, optional voice transcripts, and Atlas archive entries you create
• —Voice capture — optional audio sent to OpenAI Whisper for transcription; not stored permanently unless saved as part of your dream text
• —Payment info — billing details processed securely by Stripe (we do not store card numbers)
• —Usage analytics — feature usage patterns, session data, and performance metrics

2. How We Use Your Data

• —Provide, maintain, and improve the Dream Cloud platform
• —Train and improve AI agent quality using anonymized interaction patterns
• —Process payments and manage your subscription
• —Send service notifications including morning standup summaries, project updates, and opt-in build status text messages
• —Detect and prevent abuse, fraud, and security incidents

3. Third-Party Services

We share data with the following service providers, each bound by their own privacy policies:

• —Supabase — database and authentication
• —Stripe — payment processing
• —ElevenLabs — voice synthesis and speech recognition
• —Vercel — application hosting and edge delivery
• —Twilio — optional build status text messages

We do not sell your personal information to any third party.

4. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, row-level security on all database tables, and regular security audits. No system is 100% secure, but we take reasonable precautions to protect your data.

5. Your Rights

You may at any time:

• —Access all data associated with your account
• —Export your projects, PRDs, and brand assets
• —Request deletion of your account and all associated data
• —Opt out of non-essential communications

To exercise any of these rights, contact privacy@dreamcloud.app.

6. Cookies

Dream Cloud uses essential cookies only — for authentication and session management. We do not use third-party tracking cookies, advertising pixels, or behavioral profiling. No cookie banner is required because we do not track you.

7. Data Retention

While your account is active, we retain your data to provide the service. If you delete your account, we begin a 30-day grace period during which you can reverse the deletion. After 30 days, all account data is permanently purged from our systems and backups.

8. Changes to This Policy

We may update this policy as our practices evolve. Material changes will be communicated via email or in-app notification at least 30 days before taking effect.