GDPR - Dreams Meanings

At Dreams Meanings, we prioritize the protection of your privacy and personal data. We are committed to complying with the General Data Protection Regulation (GDPR) to ensure the security and confidentiality of your information when using our dream interpretation services.

1. Data Collection and Processing

1.1 Personal Data Collection

We collect and process the following personal data:

Email address for account creation and authentication
Account credentials for secure access
Dream content submitted for interpretation
Payment information for premium subscriptions (processed via Stripe)
Usage data and IP addresses for service functionality

1.2 Legal Basis for Processing

We process your data based on:

Contractual necessity for service provision
Legitimate interests in service improvement
Your consent for specific processing activities
Legal obligations where applicable

2. Purpose of Data Processing

We process your personal data for:

Providing AI-powered dream interpretation services
Managing user accounts and subscriptions
Maintaining the public dream archive (with anonymization)
Processing payments for premium features
Sending essential service communications
Improving our AI interpretation capabilities

3. Data Security

We implement the following security measures:

Encryption of personal data in transit and at rest
Strict access controls and authentication procedures
Regular security assessments and updates
Secure payment processing through Stripe
Data anonymization for public dream archive

4. Data Retention

Our retention policies specify:

Account data is deleted immediately upon account deletion
Anonymized dreams remain in the public archive indefinitely
Premium users' private dreams are deleted with their account
Payment records are retained as required by law
Communication records are kept for support purposes

5. User Rights

Under GDPR, you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data
Object to data processing
Request data portability
Withdraw consent at any time

6. Data Transfers

Regarding international data transfers:

We process data in Switzerland
Third-party services (Stripe, Ahrefs, Mailgun) may process data internationally
Appropriate safeguards are in place for all transfers

7. Contact Information

For GDPR-related inquiries:

Data protection officer: Rahim Rezgui
Email: [email protected]
Response time: Within 30 days
Data protection authority: Swiss Federal Data Protection and Information Commissioner

Last Updated: December 23, 2024

Contact: [email protected]

GDPR Compliance