Legal

Privacy Policy

How we collect, use, and protect your information when you use DreamDive, VideoExpander, and ImagineMe.

Last updated: 2026-09-28

1. Who We Are and Scope of This Policy

This Privacy Policy ("Policy") explains how Latysocles Studio ("DreamDive", "VideoExpander", "ImagineMe", "we", "us", or "our") collects, uses, discloses, and protects information about you when you access or use DreamDive, VideoExpander, ImagineMe, dreamdive.ai, videoexpander.ai, imagineme.ai, our shared account system, websites, applications, APIs, dashboards, media generation tools, subscriptions, and related services (collectively, the "Service").

Controller / Operator: Latysocles Studio (The Netherlands)
Address: Zegenstraat 42, 3082XV, Rotterdam, The Netherlands
Contact: [email protected]
Trade register / Chamber of Commerce (KvK) number: 42070626

This Policy applies to information we process as a result of your use of the Service, including:

  • Creating and managing your shared account across DreamDive, VideoExpander, and ImagineMe;
  • Authenticating, securing, billing, supporting, and deleting that shared account;
  • Uploading images and other content to train custom models;
  • Uploading videos and submitting prompts or other inputs for image, video, or model generation;
  • Using our subscription plans, billing portal, and API access.

Your use of the Service is also governed by our Terms of Service. In the event of a conflict between this Policy and the Terms of Service, the Terms of Service will generally control with respect to your use of the Service.

2. Your Responsibilities

The Service allows you to upload and generate powerful media (including images and videos) and to train custom models. You are responsible for how you use these capabilities. In particular, by using the Service you agree that:

  • You are solely responsible for all content you upload, submit, or generate using the Service ("User Content"), including any personal data contained in that content.
  • You will only upload or submit content (including photos, videos, and text prompts) that you have all necessary rights, licenses, and permissions to use, and to allow us and our subprocessors to process as described in this Policy and our Terms of Service.
  • Where you upload or otherwise provide personal data about other individuals (for example, photos of other people), you represent and warrant that you have a valid legal basis to do so (such as their valid explicit consent for training/generation, or another lawful ground under applicable law), and you remain responsible for obtaining and documenting such consent or lawful basis.
  • You will not upload highly sensitive content (such as government IDs, financial account details, medical records, or sensitive-category data), and you will not upload images of minors for training.
  • You will not rely on outputs from the Service without independently reviewing them for accuracy, legality, and suitability for your specific use case, especially in any high-risk context (such as healthcare, finance, or legal decisions).

3. Information We Collect

3.1 Information You Provide Directly

We collect information that you provide directly to us when you use the Service, such as:

  • Account information: email address, password (stored in hashed form), and any other registration details required to create and maintain your account.
  • Profile and settings: your preferences, subscription tier, and configuration choices (for example, model names, training classes, or other per-account settings).
  • User Content and training data: images, videos, text, and other files that you upload to the Service to train models or use other features (including training datasets, prompts, mask images, and derived "profile" thumbnails).
  • Prompts and other AI inputs: text prompts, negative prompts, parameters (such as resolution, model choice, video duration, etc.), and other inputs you provide when generating content.
  • Communications: messages you send to us (for example, support requests, feedback, bug reports), and any information you provide within those communications.
  • API information: if you use our API, we may collect API keys, metadata about your API usage, and information contained in API requests and responses.

3.2 Information Collected Automatically

When you use the Service, we automatically collect certain technical and usage information, such as:

  • Log and device information: IP address, browser type and version, operating system, device identifiers, language preferences, date and time of requests, URL paths, HTTP status codes, and other standard web log data.
  • Usage information: features used, buttons clicked, pages viewed, generated jobs (for example, model trainings, image generations, inpainting jobs, and video jobs), success/failure status, and timestamps.
  • Session and security data: session identifiers, CSRF tokens, rate-limiting metadata, and other information that helps us maintain session integrity, prevent abuse, and secure the Service.
  • Approximate location information: inferred from your IP address, where permitted by law, for purposes such as fraud detection and localization.
  • Cookies and similar technologies: as described in section 6 below and in our Cookie Policy.

3.3 Payment and Subscription Information

We use third-party payment processors (such as Stripe) to handle subscription payments. When you purchase a subscription or manage your billing:

  • Billing processors collect your payment card details and other billing information directly. We do not collect or store your full payment card number on our own systems.
  • We may receive limited billing-related information from these providers, such as a tokenized customer ID, subscription status, plan code, billing period, and basic card metadata (for example, last 4 digits and brand), as needed to manage your subscription and display relevant information in your account.

3.4 Information From Third Parties

We may receive information about you from third parties, for example:

  • Service providers that help us with customer support, error tracking, analytics, or email delivery.
  • Payment processors that share limited information needed to confirm payments, manage subscriptions, and prevent fraud.
  • Third-party AI or media providers that process your prompts and content to generate outputs as necessary to provide the Service.

3.5 Biometric / likeness / face data notice (including retention schedule)

We may process face images and related visual features to train a Custom Model that can generate Outputs resembling a person. Depending on how a jurisdiction defines biometric data, face-derived features may be treated as biometric data if used to uniquely identify a person. We do not provide identity verification or authentication services, and we do not use face data to verify who you are.

  • Feature availability by jurisdiction. Certain features (including face-training) may be unavailable in some jurisdictions unless we can support required notices, consent flows, or written releases. We may block or restrict such features where needed for compliance.
  • Self-training: When you upload your own face images, you consent to processing necessary to train and operate your Custom Model, and you must ensure you have the right to do so.
  • Training on others: You must only upload images of other people if you have their explicit, informed consent for training and generation. You must keep documentation and provide it if requested for enforcement/safety reasons.
  • Consent and written release. Where laws require explicit consent and/or a written release for biometric processing, we may require additional confirmations and we may decline or restrict processing if we cannot support compliant capture.
  • Biometric retention & destruction schedule (public policy). Where biometric laws apply to us as a service provider, we maintain this retention schedule and destruction guideline as part of our public Policy: we retain face-related training images/datasets and derived model artifacts until you delete them or delete your account, and we permanently delete biometric identifiers/information when the initial purpose has been satisfied or within a legally required period, which is generally no later than three (3) years after your last interaction with the biometric/face-training feature (whichever occurs first), unless a longer retention period is required by law or needed to establish, exercise, or defend legal claims. Deletion from backups may be delayed until the next backup rotation, but we maintain backups for a limited period and overwrite or delete them on a rolling basis.
  • Minors and sensitive uploads: Do not upload images of minors for training. Do not upload IDs, medical information, or other sensitive-category data.

4. How We Use Your Information

We use the information we collect for the following purposes (and for any other purposes disclosed to you at the time of collection or with your consent):

  • Providing and maintaining the Service, including creating and managing your account, processing uploads/prompts/trainings/generation jobs, delivering outputs, and operating subscriptions/quotas across DreamDive, VideoExpander, and ImagineMe.
  • Running AI and media workflows, including sending your prompts/images/parameters to internal or third-party AI providers to produce requested outputs, and creating thumbnails/previews for UI display.
  • Improving and developing the Service, including feature analytics, debugging, performance monitoring, and product experiments (generally using aggregated and/or de-identified telemetry where feasible).
  • Safety, security, and abuse prevention, including detecting and responding to fraud/misuse, enforcing Terms/Policies, and applying safeguards. This may include limited human review where necessary.
  • Communications, including:
    • Service communications (required): account, billing, security, and essential operational messages.
    • Product communications (typically opt-out where lawful): feature updates, tips, and product notices related to your use.
    • Marketing communications (promotions): only sent with opt-in where required. Where lawful “soft opt-in” rules apply (typically for existing customers and similar products/services), we will provide a clear opt-out at collection (where required) and in every message.

    EU/UK note. In the EU/UK, promotional marketing to new signups who have not purchased typically requires opt-in consent. We separate required service emails from optional product/marketing emails, and you can unsubscribe from promotional emails at any time.

  • Legal and compliance, including complying with law, responding to lawful requests, and establishing/exercising/defending legal claims.

5. Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we rely on the following legal bases to process your personal data:

  • Contract performance: to provide the Service you requested (account, jobs, subscriptions, delivery of outputs).
  • Legitimate interests: to secure the Service, prevent abuse, improve reliability, and communicate product updates where permitted.
  • Consent: where required by law (e.g., non-essential cookies; some marketing; and biometric/likeness processing where explicit consent is required).
  • Legal obligations: for tax/accounting/regulatory obligations and lawful requests.

6. Cookies and Similar Technologies

We use cookies and similar technologies to operate and secure the Service and, where enabled, to understand how it is used and to measure marketing performance. Please see our Cookie Policy for details, including categories (essential, preferences, analytics, and marketing) and controls. Where required by law (for example EU/EEA/UK), we will request your opt-in consent before placing or using non-essential cookies/trackers.

Policy vs implementation alignment: If we do not display a cookie banner in your region, we operate the Service using essential cookies only and do not deploy non-essential analytics/marketing cookies or trackers.

7. How We Share Your Information

We share information with third parties only as described in this Policy or with your consent.

7.1 Service providers and subprocessors

We use vendors (“subprocessors”) to help operate the Service. Depending on configuration and region, these may include:

  • Cloud & hosting: Amazon Web Services (AWS), Google Cloud (GCP) (where used).
  • Compute / AI job execution: RunPod, fal.ai (where used for specific workloads).
  • CDN / security: Cloudflare, Bunny CDN.
  • Payments: Stripe.
  • Analytics: PostHog, Google Analytics, Cloudflare Analytics (where enabled and where legally permitted).
  • Advertising / measurement: Google Ads conversion tracking, Meta Pixel / Conversions API (where enabled and where legally permitted).
  • Email / support tooling: providers used for transactional email delivery and customer support (where applicable).

These providers are authorized to process your information only as necessary to provide services on our behalf, subject to contractual protections where appropriate. We require subprocessors to process data only on our instructions under contractual protections (for example, DPAs) and we use transfer safeguards where required. We may update vendors over time and may publish an up-to-date subprocessor list in the Service or on our website.

7.2 Public sharing and marketing use of your content

Private by default: We do not share your User Content, Custom Models, or Outputs publicly by default. We will only make content public or use it in public-facing marketing if you provide additional explicit permission (for example, by opting in per asset via a “Showcase/public” control or by providing written permission).

7.3 Business transfers

We may share information in connection with a merger, acquisition, reorganization, sale of assets, or similar transaction. If your information is transferred, we will take reasonable steps to ensure the receiving entity honors this Policy.

7.4 Legal and safety

We may disclose information to comply with applicable law, legal process, or governmental requests; to enforce our Terms and Policies; and to protect the rights, property, or safety of DreamDive, VideoExpander, ImagineMe, our users, or others.

8. International Data Transfers

The Service may be operated from and data may be stored or processed in multiple countries, including outside your own. Where required by law for cross-border transfers (for example from the EEA/UK), we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs) or equivalent mechanisms, and we take additional measures where appropriate.

9. Data Retention

We retain personal data for as long as reasonably necessary to provide the Service, fulfill the purposes described in this Policy, and comply with legal obligations. Retention may vary by data type and context.

  • Account data (email, subscription status): retained while your account is active and for a reasonable period thereafter for compliance and dispute handling.
  • Training images / datasets: retained until you delete them or delete your account; if your subscription ends, we may delete training datasets and related artifacts after a reasonable grace period.
  • Custom Models: retained until you delete them or delete your account; we may remove inactive models after extended inactivity or account closure.
  • Generated outputs: retained until you delete them or delete your account, subject to technical limitations.
  • Shared account data: because DreamDive, VideoExpander, and ImagineMe use a shared account system, deleting your account may affect access to all three products.
  • Biometric identifiers/information (where applicable): deleted when the initial purpose has been satisfied (for example, when you delete the relevant model/training data) or within a legally required period, generally no later than three (3) years after your last interaction with the biometric feature, whichever occurs first, unless retention is required by law or for legal claims.
  • Logs and security data: generally retained for a limited period for security, debugging, and abuse prevention. Where implemented, certain request/security logs may be retained up to 90 days, unless longer retention is required for legal or security reasons.
  • Backups: deleted data may persist in backups for a limited time and will be overwritten or deleted on a scheduled basis.

10. Data Security

We implement technical and organizational measures designed to protect your information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission or storage is completely secure.

Security incidents. We maintain incident response processes and will provide notifications of certain security incidents where required by applicable law. You are responsible for keeping your credentials secure and notifying us promptly if you suspect unauthorized access.

11. Your Choices and Rights

11.1 Your Choices

  • Account information: You may update certain account information through your account settings, where available.
  • Deleting your account: You may delete your account and associated data through in-product controls (where available).
  • Emails: You can opt out of promotional marketing emails via the unsubscribe link. You may also be able to opt out of product communications where offered. We may still send essential service communications.
  • Cookies: You can manage cookies via your browser and (where available) our consent/preference controls.

11.2 Rights for EEA/UK and Similar Jurisdictions

Depending on your location and applicable law, you may have rights such as access, rectification, erasure, restriction, portability, objection (including to direct marketing), and withdrawal of consent.

To exercise rights, contact us at [email protected]. We may need to verify your identity.

11.3 U.S. State Privacy Rights (e.g., California)

If you are a resident of California or another U.S. state with specific privacy laws, you may have additional rights to know, access, delete, or opt out of certain processing. We will honor such rights where they apply.

11.4 “Sale” / “Share” (CPRA) and targeted advertising

We do not sell personal information for money. However, if we use marketing/advertising cookies or similar technologies (for example, Google Ads or Meta measurement), that may be considered “sharing” for cross-context behavioral advertising under some laws. Where applicable, you may opt out by adjusting cookie preferences (where available) or by contacting us at [email protected] with the subject “Do Not Sell/Share”.

12. AI-Generated Content and Limitations

The Service uses AI to generate content based on your inputs. AI outputs may be inaccurate, incomplete, biased, offensive, or otherwise unexpected. We do not guarantee that any output is correct, lawful, or appropriate for any particular purpose.

13. Children's Privacy

The Service is not directed to children, and we do not knowingly collect personal data from children under the age required by applicable law. If we become aware that a child has provided us personal data without appropriate consent, we will take steps to delete it.

14. Contact Information

If you have questions, concerns, or wish to exercise privacy rights, contact us:

Email: [email protected]
Postal address: Latysocles Studio, Zegenstraat 42, 3082XV, Rotterdam, The Netherlands

If you are located in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority, but we encourage you to contact us first so we can try to resolve your concerns.

15. Changes to This Policy

We may update this Policy from time to time. When we make changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.