Privacy Policy
How we handle your information, where it goes, and the choices you have.
About this policy
This policy describes how Dreamtune handles personal information when you visit our website or use our workspace, API, developer tools, models, tools, and compute services. It applies to features when they are available to you.
When you use Dreamtune through an organization, its administrators manage your membership and access. The organization may have its own policies for the information you submit.
Information we process
- Account and workspace information. Account identifiers, profile information supplied through our sign-in provider, including your name, username, primary email and verification status, profile image, and account timestamps. We keep an account profile in our database and refresh it from our sign-in provider when you sign in. We also process organization membership, roles, invitations, and access permissions.
- Requests and results. Prompts, messages, tool inputs, files or links you submit, generated results, and compute configuration needed to carry out your requests. Some request records and results are stored to support retrieval and operation recovery.
- Usage and technical records. Request identifiers, selected models and tools, timestamps, status, token counts, costs, resource usage, and diagnostic information. Hosting and service providers may process IP addresses, browser information, and security logs.
- Billing information. Payment and order identifiers, amounts, currency, payment status, wallet balances, and usage ledger entries. Payment details are handled by our payment processor; Dreamtune does not store full card numbers or card security codes.
- Information you send us. Details you share when asking for support or communicating with the Dreamtune team.
Provide only information you are authorized to share. Avoid including passwords, API secrets, or sensitive personal information in prompts or tool inputs unless the specific service is designed and approved for that use.
How we use information
We use information to authenticate users, manage workspace access, execute requests, deliver results, meter usage, process payments, maintain financial records, investigate failures, prevent abuse, and respond to support requests.
Where applicable data protection law requires a legal basis, these purposes relate to performing our agreement with you, complying with legal obligations, and our legitimate interests in operating and protecting the service. Where consent is required for an optional use, we ask for it separately and you may withdraw it.
Providers and sharing
Dreamtune uses service providers to deliver the features you choose. These include Clerk for authentication, Razorpay for payments, OpenRouter and selected model providers for model requests, Monid and its connected providers for tools, and Lambda for compute. Hosting, database, and monitoring providers also process information needed to operate the service.
Your request inputs are sent to the providers needed to execute that request. Providers may apply their own retention, processing, and model-training policies. Review the selected provider's terms before submitting confidential information; Dreamtune does not promise that all providers use the same data practices.
Workspace administrators and authorized members can access information permitted by their roles. We may also disclose information where required by law, to protect the service or others, or as part of a business transfer subject to applicable safeguards.
Retention and security
Retention depends on the type of record, the purpose it serves, account activity, operational recovery needs, dispute resolution, and applicable financial or legal obligations. Deleting an account does not automatically erase records we must retain for those purposes.
We use access controls, workspace authorization, hashed Dreamtune API keys, and protected credential storage. Operational traces are designed to exclude prompts, responses, media, authorization headers, and API secrets. No storage or transmission system can guarantee absolute security.
International processing
Dreamtune and its providers may process information in countries other than where you live. The location depends on the hosting, model, tool, or compute provider used. Where applicable law requires transfer safeguards, those requirements apply to the relevant processing arrangement.
Your choices and rights
You can manage your profile and organization membership in account settings and revoke workspace API keys when you no longer need them. You can choose which inputs to submit and which available services to use.
Depending on your location, you may have rights to access, correct, delete, or obtain a copy of your personal information; restrict or object to processing; or withdraw consent. Requests may require identity verification, and legal or financial retention obligations may limit deletion. You may also complain to your local data protection authority.
Contact the Dreamtune team for privacy questions or a rights request. Describe the request and the account or workspace concerned, and do not include passwords or API secrets. For information controlled by your organization, contact its administrator as well.
Children
Dreamtune is intended for people who can enter a binding agreement and is not directed at children. If you believe a child has supplied personal information without appropriate authorization, notify the Dreamtune team.
Policy updates
We may update this policy as our services and data practices change. The date above identifies the latest version. Where required, we will provide additional notice of material changes.
For the rules that apply to using the service, read our Terms of Service.