Privacy Policy

Last updated: May 2026

1. Introduction & Data Controller

This Privacy Policy applies to dream-box.app ("Service", "we", "our", "us"), operated by FotoX ("Data Controller").

It explains how we collect, use, and safeguard your information when you use our AI image processing service. For GDPR / CCPA purposes, the entity above is the Data Controller responsible for your personal data.

2. Information We Collect

  • Account Information: Email address or Telegram ID when you register
  • Usage Data: Pages visited, features used, and interaction data
  • Payment Information: Transaction records (we do not store full payment details)

3. Image Processing & Data Retention

🔒 Your Privacy is Protected

  • All uploaded images are processed in real-time and automatically deleted within 24 hours
  • We do NOT store, save, or archive any user-uploaded images beyond this window
  • Generated results are stored temporarily and automatically deleted within 24 hours — they will no longer be accessible from your account or any direct URL after this period
  • We do NOT use your images for AI training or any other purpose
  • If you need to keep an image, download it within 24 hours of generation

4. How We Use Your Information

  • To provide and maintain our service
  • To process your transactions
  • To communicate with you about your account
  • To improve our service and user experience

5. Data Security

We implement industry-standard security measures to protect your data, including:

  • SSL/TLS encryption for all data transmission
  • Secure server infrastructure
  • Regular security audits

6. Cookies

We use essential cookies to maintain your session and preferences. We do not use tracking cookies for advertising purposes.

7. Third-Party Services

We may use third-party services for payment processing (PayPal, Telegram Stars, cryptocurrency, regional bank transfer). These services have their own privacy policies.

8. Your Rights (GDPR / CCPA)

You have the right to:

  • Access your personal data
  • Request deletion of your account and personal data
  • Request correction of inaccurate data
  • Object to processing of your data
  • Data portability — receive your data in a portable format
  • Opt-out of marketing communications

To exercise these rights, contact our Data Protection Officer at [email protected].

9. Contact Us