1. Information we collect
We collect only the information needed to provide and protect DreamOddly:
- Account data: your username, optional email address, account identifiers, and authentication records.
- Creative content: prompts, scripts, images, audio, video, project settings, generated output, and other material you choose to submit or store.
- Usage and ledger data: generation requests, selected models, service-credit estimates and deductions (your USD-denominated wallet balance), purchase and refund references, timestamps, and service logs.
- Payment data: Creem processes checkout and payment details as merchant of record. We may receive transaction identifiers, purchase status, amount, currency, and receipt contact details, but we do not receive or store your full card number.
2. How we use information
We use this information to provide the service, authenticate accounts, store projects, send generation requests, maintain an accurate service-credit ledger, process support and refund requests, prevent abuse, secure and troubleshoot the service, communicate important service notices, and comply with legal obligations.
3. Service providers
We disclose information only as needed to operate the service or meet legal obligations. Our principal processors are:
- Creem, which processes purchases, payment details, taxes, receipts, refunds, and chargebacks as merchant of record.
- Cloudflare R2, which stores creative assets and generated media.
- The AI model provider you select. Content needed for a generation—including prompts and relevant images, audio, or video—is sent to that provider to produce the requested result and is handled under that provider’s terms and privacy practices.
4. Google user data (YouTube and Google Drive)
Some features let you connect a Google account. If you sign in with Google, we receive your basic profile information (name, email address, and profile picture) to create and secure your DreamOddly account. If you connect Google for sharing, we request only the narrowest OAuth scopes the feature needs: “youtube.upload”, used solely to upload a video to your own YouTube channel when you explicitly request it, and “drive.file”, used solely to save exports you request into your Google Drive and limited to files created with DreamOddly. We do not read your YouTube videos, watch history, subscriptions, or analytics, and we cannot see other files in your Drive.
We do not share, transfer, or disclose Google user data to anyone, with these narrow exceptions: to Google itself when performing the upload or save you requested; to the providers that host our infrastructure and act on our instructions, strictly as needed; when legally required, as described below; or as part of a merger or acquisition, with prior notice to you. We never sell Google user data, never use it for advertising, and never use it to develop or train AI or machine-learning models.
OAuth tokens are stored encrypted and are used only for the actions described here. You can disconnect Google at any time in the product’s connection settings, or revoke DreamOddly’s access from your Google account security settings; disconnecting or deleting your DreamOddly account deletes the stored tokens.
DreamOddly’s use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including its Limited Use requirements.
5. Legal disclosures and international processing
We may disclose information if reasonably necessary to comply with law, enforce our terms, investigate fraud or safety incidents, or protect users, DreamOddly, or the public. Providers may process data in countries other than your own; where required, we use appropriate contractual or legal safeguards.
6. Retention and deletion
We retain account and creative content while your account is active or for as long as needed to provide the service. You may delete projects and may delete your account through the product. Account deletion removes or de-identifies associated content from active systems, subject to limited retention needed for legal, tax, payment, fraud-prevention, security, and dispute-resolution purposes.
Residual copies may remain in encrypted backups for a reasonable period and are deleted through the normal backup cycle. Some ledger and transaction records must be retained to keep financial records accurate and meet legal obligations.
7. Cookies
DreamOddly uses cookies and similar storage that are strictly necessary for sessions, authentication, security, and language or basic service preferences; these require no consent. With your explicit consent, we also use Google Analytics (provided by Google) to set analytics cookies (such as _ga) that measure aggregate, non-advertising visit and usage statistics to improve the site; these are never loaded without consent. You can grant or withdraw consent at any time from the cookie banner or the “Cookie preferences” link in the footer. We do not use advertising or cross-site behavioral tracking cookies. Google Analytics data processing is governed by Google’s privacy policy.
8. Your choices and security
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal information. You can update available account details or delete your account in the product, or contact us for help.
We use reasonable technical and organizational safeguards, but no online service can guarantee absolute security. Keep your credentials confidential and contact us if you believe your account has been compromised.
9. Contact
Privacy questions or requests: [email protected]