Privacy Policy
Last updated: April 1, 2026
DreamStarter ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at dreamstarter.xyz (the "Platform").
1. Information We Collect
Information You Provide
- Account information: name, email address, and password when you create an account
- Profile information: avatar, display name, and preferences you choose to set
- Dream content: business ideas, briefs, and project details you submit to the Platform
- Payment information: billing details processed securely through Stripe (we do not store card numbers)
- Communications: messages you send to our support team
Information Collected Automatically
- Device information: browser type, operating system, and device identifiers
- Usage data: pages visited, features used, and interaction patterns
- Log data: IP address, access times, and referring URLs
- Analytics data: aggregated usage metrics collected via Mixpanel
2. How We Use Your Information
- Provide, operate, and improve the Platform and its AI-powered features
- Process your dreams through our AI agent pipeline and deliver results
- Process payments and manage your subscription
- Send transactional emails (account confirmation, password resets, dream updates)
- Send marketing communications (only with your consent; you can opt out anytime)
- Analyze usage patterns to improve our product and user experience
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations
3. AI Processing
Your dream briefs and project content are processed by our AI agents to generate deliverables such as brand guides, content strategies, legal documents, and more. This processing occurs on our secure servers and through our AI infrastructure partners. We do not use your content to train AI models. Your dream data is isolated per account and is never shared with other users.
4. Information Sharing
We do not sell your personal information. We may share your information in the following circumstances:
- Service providers: hosting (Vercel, Railway), payment processing (Stripe), email delivery (Resend), and analytics (Mixpanel) — bound by data processing agreements
- Legal requirements: when required by law, subpoena, or government request
- Business transfers: in connection with a merger, acquisition, or sale of assets (you will be notified)
- With your consent: when you explicitly authorize sharing
5. Data Security
We implement industry-standard security measures to protect your information, including:
- Encryption in transit (TLS) and at rest
- Secure authentication with httpOnly session cookies
- Regular security audits and penetration testing
- Access controls and principle of least privilege
- Incident response procedures
6. Data Retention
We retain your account data for as long as your account is active. Dream content is retained while your subscription is active and for 30 days after cancellation. You can request deletion of your data at any time by contacting us. Some data may be retained longer to comply with legal obligations.
7. Your Rights
Depending on your location, you may have the following rights:
- Access: request a copy of your personal data
- Correction: update inaccurate or incomplete data
- Deletion: request deletion of your personal data
- Portability: receive your data in a structured, machine-readable format
- Opt-out: unsubscribe from marketing communications at any time
- Restriction: request that we limit processing of your data
8. GDPR (European Users)
If you are in the European Economic Area, you have additional rights under GDPR, including the right to access, rectify, erase, and port your data, as well as the right to object to processing. Our legal basis for processing is contract performance (providing the Platform), legitimate interests (improving our services), and consent (marketing). To exercise your rights, contact us at support@dreamstarter.xyz.
9. CCPA (California Residents)
California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at support@dreamstarter.xyz.
10. Cookies
We use essential cookies for authentication and session management, and analytics cookies (with your consent) to understand how you use the Platform. You can manage cookie preferences through our cookie consent banner.
11. Children's Privacy
DreamStarter is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Platform. Continued use after changes constitutes acceptance.
13. Contact Us
If you have questions about this Privacy Policy or your personal data, contact us at:
Email: support@dreamstarter.xyz