Privacy Policy

1. Who we are

Dreams Engine ("Dreams Engine", "we", "us") operates dreamsengine.com. We are the data controller (responsable) for the personal data described in this policy.

Address: Miraflores 221, Insurgentes San Borja, Benito Juárez, 03100 Ciudad de México, CDMX, Mexico.
Contact: lab@dreamsengine.com

2. What we collect

We keep collection to the minimum the site needs:

• Booking requests. When you request a call, we collect your name, work email, company (optional), the service you are interested in, your project description, and your language and scheduling preferences.
• Technical data. Our infrastructure processes your IP address to prevent abuse (stored only as a truncated, salted hash for rate limiting), your country code, and the result of an anti-bot verification (Cloudflare Turnstile).
• Correspondence. If you email us, we keep the exchange.

We do not use advertising cookies or advertising pixels on this site. Analytics cookies are set only if you consent (see "Analytics" below). The other cookies present are those strictly necessary for Cloudflare's security services to function.

Analytics

We measure site traffic with two privacy-conscious approaches:

• A cookieless analytics service that is always on. It records aggregate visit data (page views, referrers, country, and performance metrics) with no cookies, no cross-site tracking, and no information that identifies you personally.
• A consent-based analytics service that runs only if you accept. When you first visit, a banner lets you accept or decline. If you decline, or until you choose, it runs in a cookieless mode and sets no cookies. If you accept, it sets analytics cookies to measure how the site is used. You can withdraw consent at any time by clearing your browser storage for this site, and no analytics cookies will be set again unless you accept once more.

3. Why we process it

• To respond to your booking request and schedule the call you asked for.
• To send you a confirmation email and, if you become a client, related business correspondence.
• If you use the optional "Refine with AI" feature, the text you wrote is sent to a third-party AI provider to produce a clearer version. Use of this feature is voluntary. Do not include confidential or sensitive personal information in the description field.
• To protect the site against bots and abuse.
• To comply with legal obligations.

We do not sell your personal data, and we do not share it for advertising purposes.

4. Who receives it

We use a small number of service providers acting on our instructions: a cloud infrastructure and security provider (hosting, storage, and anti-bot verification), an email delivery provider (booking notifications and confirmations), and an AI text-processing provider (only when you use the optional refine feature). Each receives only what its function requires.

5. International transfers

Our providers process data in the United States and the Asia-Pacific region. Where data leaves your jurisdiction, we rely on contractual safeguards with our providers. By submitting the booking form you acknowledge these transfers; where a specific consent is legally required (for example under Japanese law for cross-border provision), submitting the form after reading this policy constitutes that consent.

6. Retention

Booking requests are kept for as long as needed to respond and for a reasonable business record period afterwards. Rate-limiting hashes expire automatically within 24 hours. Email correspondence follows our ordinary retention practices.

7. Security

Data is encrypted in transit, access is restricted, credentials are held in managed secret storage, and our AI features ship with rate limiting and prompt-injection defences.

8. Your rights

Mexico (LFPDPPP)

You have the rights of access, rectification, cancellation, and opposition (ARCO), and the right to revoke consent. Send requests to lab@dreamsengine.com with your name, a copy of an official ID, and a description of the request; we respond within the statutory terms. If unsatisfied, you may contact the INAI (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales). Este aviso se pone a disposición en cumplimiento de la Ley Federal de Protección de Datos Personales en Posesión de los Particulares.

United States (including California)

You may request to know, correct, or delete the personal information we hold about you. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of under the CCPA/CPRA. We will not discriminate against you for exercising your rights.

Japan (APPI)

You may request disclosure, correction, or cessation of use of your retained personal data under the Act on the Protection of Personal Information. Requests go to lab@dreamsengine.com; we handle them without undue delay. Section 5 describes cross-border provision.

EEA and United Kingdom

Where GDPR or UK GDPR applies, our legal bases are: taking steps at your request prior to a contract (booking requests), legitimate interests (site security), and consent (the optional AI refine feature). You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to complain to your supervisory authority.

9. Children

This site is directed at businesses and professionals, not at children. We do not knowingly collect data from anyone under 16.

10. Changes

We will post any changes on this page with an updated date. Material changes to how we use booking data will be communicated to affected contacts where feasible.

11. Contact

Questions and rights requests: lab@dreamsengine.com, or by post to the address in section 1.