Privacy Policy

We collect information in the following ways:

• Account information — name, email address, and password (stored as a salted hash) when you register.
• Product data — the income streams, goals, tasks, opportunities, financial figures, and business model details you enter into the app.
• Billing information — processed and stored by our payment processor, Stripe. DreamStream does not store full credit card numbers on its own servers.
• Usage data — pages visited, features used, and general device/browser information, collected to improve reliability and the product experience.
• Communications — messages you send to support or through in-app contact forms.

• To provide, operate, and maintain the Service.
• To process subscription billing and manage your account.
• To power the built-in AI business assistant (see “AI Processing” below).
• To send transactional emails — trial reminders, billing receipts, and account notifications.
• To detect, investigate, and prevent fraud or abuse.
• To comply with legal obligations.

When you use the AI business assistant, the relevant module content (for example, the stream, goal, or canvas you're working in) is sent to our AI provider, Anthropic, to generate a response. This data is used to generate your response and is handled under Anthropic's API data-handling terms. It is not used to train Anthropic's foundation models. We do not sell any data processed through the assistant.

We use essential cookies to keep you logged in and remember your preferences (such as light/dark mode). We do not use third-party advertising trackers on the marketing site. [PLACEHOLDER: update if analytics tooling, e.g. Google Analytics or Plausible, is added]

We share data with the following categories of service providers, only as needed to operate the Service:

• Stripe — payment processing and billing.
• Anthropic — AI business assistant responses.
• Resend — transactional email delivery.
• Hosting infrastructure — Render (application hosting) and Neon (database hosting).

Each provider is contractually restricted from using your data for any purpose other than providing services to DreamStream.

We retain account and product data for as long as your account is active. If you cancel your subscription, your data remains associated with your account in case you return. [PLACEHOLDER: confirm exact retention/deletion window after account closure with legal counsel]

We use industry-standard measures — encrypted connections (TLS), hashed passwords, and access controls — to protect your information. No system is 100% secure, and we cannot guarantee absolute security of data transmitted over the internet.

Depending on your location, you may have the right to access, correct, export, or delete your personal information. You can manage most of this directly from your account settings, or contact us to make a request. [PLACEHOLDER: add specific GDPR/CCPA language if serving EU/CA residents]

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

DreamStream is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. [PLACEHOLDER: add transfer-mechanism language if serving international users subject to GDPR]

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date, and material changes will be communicated by email or in-app notice.

Questions about this policy can be sent to support@dreamstreamstrategy.com.