1 Introduction
This Privacy Policy is formulated by DreamWeaver Labs (hereinafter referred to as "we"). It applies to the DreamWeaver Echo mobile application, web client, and all related AI-generation services provided by us (hereinafter collectively referred to as "the Service").
We recognize the importance of your personal information. We commit to strictly complying with globally applicable personal data protection laws and regulations, including but not limited to the General Data Protection Regulation (GDPR) of the European Union, the California Consumer Privacy Act (CCPA/CPRA), the Children's Online Privacy Protection Act (COPPA), and Japan's Act on the Protection of Personal Information (APPI). We process your personal information in a transparent and compliant manner.
Please read this Policy carefully before using the Service to understand how we collect, use, store, and share your personal information, as well as the rights you are entitled to.
2 Personal Information We Collect
We only collect the minimum scope of personal information necessary for providing and improving the Service, including the following categories:
2.1 Information You Provide Voluntarily
Account Registration Information
When you register an account, we collect your email address and username. You may optionally add profile information such as avatar and nickname. If you log in using a third-party account (Apple, Google, etc.), we will obtain public basic information authorized by the third-party provider.
Service Submission Content
Prompts, parameter settings, uploaded reference materials you input when using AI-generation features, and content you generate and save. Please note that you are solely responsible for any personal information you choose to include in generated content.
Transaction and Payment Information
If you use paid features, we collect your order information and payment status. Sensitive payment details such as full payment card numbers and passwords are processed directly by licensed third-party payment service providers. We do not store your complete payment credentials.
Customer Service and Feedback Information
When you contact customer service or submit feedback, we collect your communication content, contact details and relevant issue information to handle your requests.
2.2 Automatically Collected Information
- Device and Technical Information: Device model, operating system version, unique device identifier, IP address, and network environment information, used to ensure service compatibility and operational security.
- Usage Behaviour Data: Feature usage frequency, generation records, operation paths, crash logs, and performance data, used to improve service experience and troubleshoot faults.
- Cookies and Similar Technologies: The web version uses cookies and similar technologies to remember your preferences and maintain your login status. You may manage cookies through your browser settings.
2.3 Anonymized Data
We anonymize or de-identify certain data. After processing, such data cannot identify any specific natural person and shall not constitute personal information. We may freely use anonymized data for service optimization, product development, statistical analysis and other purposes.
3 How We Use Your Personal Information
We strictly follow the principles of data minimization and purpose limitation, and use your personal information for the following lawful purposes:
- Providing and Operating AI-Generation Services
- Process your input prompts and uploaded materials to generate corresponding content and deliver the Service.
Special Notice: Without your explicit written consent, we will never use your private prompts, personally-uploaded materials, or non-public generated content to train our AI models. If you voluntarily participate in the model optimization program, we will only use relevant data within the scope of your authorization.
- Account and Order Management
- Perform identity verification, maintain login status, and protect account security.
- Process your subscriptions and orders, deliver paid service benefits, and complete transaction reconciliation.
- Service Optimization and Security Protection
- Analyse service usage to improve product functions, user experience and generation quality.
- Troubleshoot defects, fix vulnerabilities, prevent fraud, malicious attacks and service abuse, and safeguard service and account security.
- Comply with legal and regulatory compliance obligations.
- Customer Support and Feedback Handling
- Respond to your inquiries, complaints and suggestions, follow-up on processing results and provide feedback to you.
- Marketing and Notifications (Subject to Your Consent)
- Send you notifications regarding service updates, new feature launches and promotional activities. You may unsubscribe at any time via app settings or email.
4 Sharing and Disclosure of Personal Information
We will not sell your personal information, nor will we share your personal information for cross-context advertising purposes. We may share your personal information only under the following circumstances:
4.1 Authorized Service Providers
We engage qualified third-party service providers to assist in operating the Service, including:
- Cloud storage and cloud computing service providers for data storage and service deployment;
- Third-party payment institutions for processing payment transactions;
- Customer service tool providers, data analytics service providers, and others.
All service providers must sign strict data processing agreements with us. They shall keep personal information confidential, process data only upon our instructions, and shall not use the data for any other purposes.
4.2 Legal and Compliance Requirements
We may disclose your personal information in accordance with law under the following circumstances:
- Respond to lawful requests from judicial authorities, administrative agencies and other competent authorities;
- Comply with applicable laws, legal procedures or mandatory requirements;
- Protect the legitimate rights, property and personal safety of us, users or the public.
4.3 Business Change Scenarios
In the event of merger, acquisition, asset transfer, business divestiture or similar transaction, we may transfer your personal information together with the relevant business, and require the transferee to be bound by this Privacy Policy. Material changes will be notified to you prominently in advance.
4.4 Other Circumstances With Your Explicit Consent
With your explicit authorization, we may share your specified personal information with third parties.
5 Data Storage and Security
5.1 Storage Location
Your personal information may be stored in your country/region, or in countries/regions where we and our authorized service providers operate facilities (including but not limited to the United States, European Union member states, and Singapore). We ensure all cross-border data transfers comply with applicable legal requirements.
5.2 Security Measures
We adopt industry-standard security technical and administrative measures to protect your personal information, including Transport Layer Security (TLS) encryption, at-rest data encryption, access-control mechanisms, regular security audits, and employee confidentiality training, to prevent data leakage, tampering and loss.
Please understand that no internet environment is absolutely secure. We will make our best efforts to protect your information security.
5.3 Retention Period
We retain your personal information only for the minimum period necessary to achieve the intended purposes:
- Account information: Retained until you cancel your account. Necessary records will be kept for the minimum period required by law, and deleted or anonymized upon expiry.
- Generated content and submitted materials: Managed by you, and you may delete them at any time. Upon account cancellation, relevant content will be deleted simultaneously (except where retention is required by law).
- Logs and operational data: Retained for no longer than legally required periods, and deleted or anonymized upon expiry.
6 Your Privacy Rights
Subject to applicable laws in your jurisdiction, you hold corresponding personal data rights. We will respond to your rights requests promptly in accordance with law after verifying your identity.
6.1 General Rights
All users may exercise the following rights:
- Right of access: To query and obtain your personal information held by us;
- Right of rectification: To request correction of inaccurate or incomplete personal information;
- Right to erasure: To request deletion of your personal information (except where retention is mandated by law);
- Right to withdraw consent: To withdraw your prior consent for data processing;
- Right to data portability: To receive a machine-readable copy of your personal information;
- Account cancellation: To apply for cancellation of your DreamWeaver Echo account.
6.2 Users in the European Union / European Economic Area (GDPR)
In addition to the general rights above, you also have:
- Right to restriction of processing: To request restriction of processing of your personal information under specific circumstances;
- Right to object: To object to our processing of your personal information based on legitimate interests on grounds relating to your particular situation;
- Right to lodge a complaint with a supervisory authority: You have the right to file a complaint with the data-protection supervisory authority of your country.
The legal bases for our processing of your personal information include: performance of the service contract with you, our legitimate business interests, your consent, and compliance with legal obligations.
6.3 California Users (CCPA/CPRA)
Under California law, you are entitled to:
- Right of access: Request disclosure of categories and specific pieces of your personal information we have collected, used and shared over the past 12 months;
- Right to deletion: Request deletion of your personal information collected by us;
- Right to opt-out: We do not sell your personal information, so no opt-out is required;
- Right to non-discrimination: You shall not be subject to discriminatory treatment for exercising your California privacy rights.
6.4 How to Exercise Your Rights
You may submit rights requests online via Settings-Privacy Center within the App, or send an email to [email protected]. We will verify and process your request within statutory time-limits. Identity verification may require you to provide necessary information.
7 Children's Privacy Protection
The Service is available to users aged 13 and above. For users in the European Union, the Service is available to users aged 16 and above. We do not knowingly collect personal information from children under the applicable age thresholds.
If we discover we have inadvertently collected personal information of a child, we will immediately take steps to delete such data. If you are a guardian and find we have collected information about a child under your care, please contact us through the above channels.
8 International Data Transfers
When we transfer your personal information to countries or regions outside your jurisdiction, we strictly comply with applicable cross-border data-transfer laws and implement appropriate safeguards, including but not limited to:
- Applying Standard Contractual Clauses (SCCs) approved by the European Commission;
- Receiving jurisdictions with an adequacy determination under data-protection law;
- Binding Corporate Rules (BCRs);
- Obtaining your explicit consent.
You may contact us to obtain a copy of relevant safeguards.
9 Third-Party Service Links
The Service may contain links to third-party websites, applications or services. We are not responsible for the privacy policies or data-processing practices of third parties. We recommend you review the privacy policy of any third-party service before accessing it.
10 Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect service changes or legal revisions. Updated policies will be published within the Service. Material changes will be notified to you via prominent notices such as pop-ups or emails.
Your continued use of the Service after policy updates constitutes your acceptance of the revised Privacy Policy.
11 Contact Us
If you have any questions, comments or rights-related requests concerning this Privacy Policy, please contact us at:
Email: [email protected]