Privacy Policy

1. Information We Collect

We collect the following categories of information:

1.1 Information You Provide

• Dream descriptions — the text you submit for interpretation. This is the primary data we process.
• Payment information — processed securely by our payment partner Creem (creem.io). We do not store, access, or process your credit card number, CVV, or full payment credentials.

1.2 Information Collected Automatically

• IP address — used for rate limiting (preventing abuse) and approximate geolocation for analytics.
• Visitor ID — a randomly generated anonymous identifier stored in your browser's localStorage and cookies. This is not linked to your real identity.
• Usage data — page views, button clicks, scroll depth, and feature usage (collected via our first-party analytics system). No third-party tracking scripts are used.
• Device information — browser type, operating system, and screen size (via standard HTTP headers).
• Referrer — the URL that brought you to our site, used for understanding traffic sources.

2. How We Use Your Information

• Service delivery: Processing your dream text through AI models to generate interpretations, artwork, and reports.
• Payment processing: Facilitating secure payment through Creem for premium reports.
• Rate limiting: Preventing abuse by limiting free interpretations per IP address and visitor ID.
• Analytics: Understanding how users interact with the Service to improve user experience and product quality.
• Report access: Storing results temporarily so you can revisit your report via the unique result URL.

3. Data Sharing & Third Parties

We do not sell your personal data. We share data only with the following service providers, strictly for operational purposes:

• AI service providers (OpenRouter / Together AI) — receive only the dream description text for generating interpretations and artwork. No personal identifiers are shared. SlumberVision is not affiliated with, endorsed by, or sponsored by OpenRouter, Together AI, or any underlying AI model providers.
• Creem (creem.io) — payment processing only. Handles checkout, payment confirmation, and refund processing.

We do not use third-party advertising trackers (no Google Analytics, no Facebook Pixel, no TikTok Pixel). All analytics are first-party and self-hosted.

4. Data Retention

• Dream interpretations and reports: Stored for 30 days to allow you to access your results via your unique result link. After 30 days, dream data is automatically purged.
• Analytics data: Aggregated analytics logs are retained for up to 90 days, then archived or deleted.
• Payment records: Transaction metadata (amount, date, result ID) is retained as required by applicable tax and financial regulations.
• Rate limit data: IP and visitor ID rate limit records are retained for 24 hours only.

5. Cookies & Local Storage

We use minimal browser storage:

• Visitor ID cookie (sv_visitor_id) — A randomly generated anonymous identifier. Expires after 365 days. Used for rate limiting and analytics. This is not a tracking cookie.
• localStorage — Stores the same visitor ID for durability. No other data is stored locally.

We do not use advertising cookies, social media cookies, or third-party tracking cookies.

6. Data Security

We implement industry-standard security measures to protect your data:

• All data in transit is encrypted via HTTPS (TLS 1.2+)
• Payment processing is handled entirely by Creem — we never see or store your card details
• Webhook signatures are verified using HMAC-SHA256 to prevent tampering
• Server access is restricted and monitored

7. Your Rights

Depending on your jurisdiction (including under GDPR, CCPA, and similar frameworks), you may have the right to:

• Access — Request a copy of the personal data we hold about you
• Deletion — Request deletion of your dream data and associated results
• Rectification — Request correction of inaccurate data
• Objection — Object to certain processing activities
• Portability — Request your data in a structured, machine-readable format

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

SlumberVision is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will promptly delete it.

9. International Data Transfers

Your data may be processed on servers located outside your country of residence. By using the Service, you consent to the transfer of your data to these servers. We take reasonable steps to ensure your data is treated securely regardless of location.

10. Contact

For any privacy-related questions, data requests, or concerns, please contact us at: [email protected]