Privacy Policy

At DreamLense, we place paramount importance on protecting your personal data. This privacy policy explains how we collect, use, store and protect your information when you use our AI photo generation service. By using our service, you accept the practices described in this policy.

**Identification data:** - Email address - Name (optional) **Payment data:** - Transaction information (processed by Stripe, we do not store your banking details) **Uploaded photos:** - Photos you upload to train your AI model - These photos are stored temporarily and automatically deleted after 30 days **Generated photos:** - Portraits generated by our AI - Stored until account deletion or your deletion request **Technical data:** - IP address (for security and fraud prevention) - Anonymized browsing data (via Vercel Analytics)

We use your data to: - **Provide our service**: Train a personalized AI model and generate your portraits - **Process your payments**: Via our partner Stripe - **Communicate with you**: Status notifications, service emails - **Improve our service**: Anonymized performance analysis - **Ensure security**: Fraud and abuse prevention We never sell your personal data to third parties.

**Uploaded photos (sources):** Automatically deleted 30 days after upload **Generated photos:** Kept until your deletion request or account deletion **Account data:** Kept as long as your account is active **Payment data:** Kept in accordance with legal obligations (10 years for accounting data) You can request deletion of your data at any time through our interface or by contacting us.

We share your data only with: **Stripe**: For payment processing - Privacy policy: https://stripe.com/privacy **Supabase**: For data storage - Servers located in the European Union - Privacy policy: https://supabase.com/privacy **Vercel**: For website hosting - Privacy policy: https://vercel.com/legal/privacy-policy **Replicate**: For AI generation - Your photos are processed to generate portraits then deleted - Privacy policy: https://replicate.com/privacy We do not share any data with advertisers or non-essential third parties.

We implement technical and organizational security measures to protect your data: - SSL/TLS encryption for all communications - Secure authentication (email OTP) - Restricted data access (principle of least privilege) - Continuous system monitoring - Encrypted photo storage Despite our efforts, no system is completely secure. In case of data breach, we will inform you in accordance with applicable regulations.

In accordance with the General Data Protection Regulation (GDPR), you have the following rights: **Right of access**: Obtain a copy of your personal data **Right to rectification**: Correct inaccurate data **Right to erasure**: Request deletion of your data **Right to portability**: Receive your data in a structured format **Right to object**: Object to the processing of your data **Right to withdraw consent**: Withdraw your consent at any time To exercise these rights, contact us at: privacy@dreamlense-ai.com You also have the right to lodge a complaint with your local data protection authority.

We use cookies strictly necessary for the service to function: **Essential cookies:** - Authentication session - Language preference (NEXT_LOCALE) **Analytics cookies (optional):** - Vercel Analytics (anonymized) - Microsoft Clarity (UX analysis) - Google Analytics (if you consent) You can configure your browser to refuse non-essential cookies.

Our service is intended for people 18 years and older. We do not knowingly collect data from minors. If you are a parent and believe your child has provided us with data, contact us to delete it.

We may update this privacy policy. In case of significant changes, we will inform you by email or via a notification on the site. The last update date is indicated at the top of this page.

For any questions regarding this policy or your personal data: **Email**: privacy@dreamlense-ai.com **Address**: DreamLense SAS, [Address to be completed] Data Protection Officer (DPO): [To be designated if applicable]