Privacy Policy

This Policy explains how the operator of TabDream (“TabDream,” “we,” or “us”) handles personal information when you visit tabdream.com, use our AI creative services, make a purchase, or contact us. The TabDream operator is responsible for deciding how information is used for these purposes. For privacy questions and requests, email support@tabdream.com.

This Policy covers features actually provided through TabDream. It does not describe a third party's separate website or promise that every feature, model, or integration mentioned on a preview page is available. Our Terms of Service describe the rules for using the service. Reading this Policy or accepting those Terms does not by itself provide consent for every optional use of information.

1. Information used to run your account and creations

We receive information from you, from the browser and network you use, and from providers involved in login, generation, payment, or support. Depending on your use, this includes:

• Account and login information: email address, display name, profile image, internal account identifier, login and verification records, session information, and credentials or authorization data needed for the login method you choose. A third-party login provider may return your identifier and profile details with your authorization.
• Creation content: reference images and other supported materials you upload, prompts or instructions you provide, settings, generated images and videos, and file metadata that accompanies an upload. A file can contain personal information about you or someone else.
• Task records: template and model identifiers, template versions, generation parameters, timestamps, provider task identifiers, progress, result locations, errors, and credit deductions or restorations. These records help display your history and resolve incomplete tasks.
• Purchase information: selected product, price, currency, order and subscription identifiers, transaction status, renewal or cancellation information, refunds, and credit records. The payment provider handles payment credentials; we retain transaction information it returns, rather than collecting full card details in creative prompts or uploads.
• Support information: messages, attachments, contact details, and information you send with a billing question, rights report, or privacy request.
• Technical and usage information: IP address, browser and device information, language, approximate country or region, referring pages and campaign parameters, page and feature interactions, and diagnostic or security records, as collected by the site and any tools actually enabled.

We do not need identity documents, account passwords for other services, financial credentials, health records, or confidential files in your creation content. Please leave out unnecessary personal information and obtain permission before submitting information about another person.

2. Why we process information

We use the information needed to authenticate accounts, execute generation requests, store and deliver results, maintain task history, calculate credits, process purchases and subscriptions, and answer support requests.

We also use relevant records to investigate failed tasks, prevent fraud and abuse, enforce usage restrictions, protect service security, handle rights reports and disputes, and comply with legal, accounting, and tax requirements. Usage measurements and feedback help us understand and improve the service; improving the service is not a blanket authorization to train AI models on your content.

Where applicable law requires a legal basis, we rely on performance of our agreement for requested services, legal obligations for required records, and legitimate interests in operating and securing the service where that basis is recognized and appropriate. Optional processing that legally requires consent depends on that consent. You may withdraw consent without affecting processing that was lawful before withdrawal or processing necessary on another legal basis.

3. AI processing, portraits, and training

When you submit a generation task, we send the materials, prompts, parameters, and task references needed for the request to the configured AI service. The current template workflow can use OpenRouter or fal, which may in turn pass the request to the model provider. We also receive generated content, task status, and error or usage information from those providers.

Portraits and other identifiable images may be analyzed or transformed to produce the requested result, including analysis of visual features by a model. TabDream does not use uploaded portraits as an identity-verification method for logging into your account. Do not assume that a creative model performs no face-related processing, or that image metadata has been automatically removed before upload.

TabDream does not use your uploads or generated results to train its own general-purpose AI models. We do not take permission to use them in advertising merely because you create an account or use a template. Any new optional training or promotional use would require a separate notice and any necessary permission.

The gateway, underlying model provider, and storage provider can have different logging, retention, safety-review, and training rules. Those rules also depend on the model and applicable service configuration or agreement. We do not make a universal zero-retention or no-training promise on their behalf. You may ask support about processing for a particular model before uploading sensitive materials.

Relevant provider information is available in OpenRouter's Privacy Policy, OpenRouter's data-collection documentation, fal's Privacy Policy, and fal's API Services Terms. These notices supplement information about our processing; they do not replace TabDream's obligations to you.

4. Who receives information

Information is disclosed as needed for the functions you use:

• AI and media providers receive the content and task details needed to generate, process, or check a result, as described above.
• Hosting, storage, and content-delivery providers store application records and media and deliver pages and files. The current generation workflow uses Cloudflare R2 for reference images and saved outputs. See Cloudflare's Privacy Policy.
• Login, email, and support providers handle authentication, service messages, or conversations where those integrations are enabled and used.
• Payment providers receive the transaction and billing information needed to process and administer your purchase. The provider shown at checkout may also have independent fraud-prevention and legal obligations under its own privacy notice.
• Analytics and advertising providers, if enabled, receive relevant browsing, device, or event information as explained in Section 6. They do not receive a license from us to use your uploaded references or outputs as advertising content.

Authorized personnel may access relevant account, content, and task records to provide support, investigate safety or security issues, or meet legal obligations. We may disclose necessary information to comply with a valid legal request, protect people and rights, or resolve a dispute. A transfer of the business may involve related records, subject to applicable notice and protection requirements.

We do not sell your uploaded creation materials or generated results. Advertising-related disclosures of browsing information can be treated as “sale,” “sharing,” or targeted advertising under some laws; applicable choices are described below rather than covered by a blanket claim that no such disclosure can occur.

5. File visibility and local browser materials

Your task history is account-restricted, but media URLs are not private access credentials. Task lists, details, and the in-app download endpoint check the account's permissions. Uploaded reference images and saved results currently have publicly accessible media URLs, however, and someone with the URL may retrieve the file without an account. A random or hard-to-guess URL does not make a file confidential.

Using a template does not automatically publish your result as an official template or authorize a marketing showcase. Nevertheless, sharing a file link can expose the underlying file, and we cannot recall copies someone else has downloaded. Avoid uploading confidential materials.

Some previews and drafts exist only in your browser, including in local storage or IndexedDB, until you actively upload them. Clearing browser data or changing devices can remove those local materials; they are different from reference files and results already saved by the generation service.

6. Cookies, analytics, and advertising choices

TabDream uses cookies or similar browser storage for sign-in, security, language and appearance preferences, consent choices, and local drafts. Examples include the PARAGLIDE_LOCALE language cookie and, when the consent feature is enabled, the cookie_consent choice cookie.

Depending on site configuration, optional integrations may include Google Analytics, Plausible, Google AdSense, and customer-service tools such as Crisp or Tawk. These tools can process browsing events, device or network information, cookie identifiers, or messages you choose to send. Not every supported integration is necessarily active.

When a Cookie settings control or consent banner is provided, you can use it to accept or reject optional cookies and revisit your choice. You can also manage cookies and site storage through your browser. Blocking necessary storage can prevent login or other requested features from working.

A cookie preference does not necessarily stop all network requests or cookie-free measurements. For example, Google Consent Mode may send limited cookie-free signals, and cookie-free analytics and necessary security logs may still operate. A refusal of optional cookies is not a promise of complete anonymity.

Where law requires consent or an opt-out for optional tracking or targeted advertising, the applicable processing is subject to those requirements. You may contact support@tabdream.com to ask which tools are active or to exercise applicable objection, advertising opt-out, or sale/sharing opt-out rights.

7. Retention and what deletion means

Account information and saved creation records are generally retained while needed to provide your account, history, and requested storage. Transaction and credit records may need to remain for accounting, fraud prevention, refunds, or legal claims. Diagnostic and support information is retained according to its purpose and applicable requirements. Retention depends on the type of record, ongoing tasks, legal obligations, and deletion requests; we do not promise one fixed period for all data.

Deleting a task in the materials page currently hides its record from your accessible history; it does not immediately delete the underlying reference images, output files, provider copies, or backups. An upload token's expiry is also not a promise that the uploaded file has been erased.

To request deletion of media files, account information, or your account itself, email support and identify the relevant account and, where possible, the tasks or files. We will verify the request as needed, explain any legal or technical retention limits, and process it under applicable law. Necessary records may be retained for legal obligations, security, or disputes, and provider or backup copies may follow separate deletion cycles. We cannot erase copies independently downloaded by others.

Before requesting closure, download results you want to keep and cancel any recurring subscription separately. Closing an account or removing a task is not itself a cancellation of billing.

8. International processing

Our infrastructure and providers may process information in countries other than where you live, including where the selected AI or payment service operates. This Policy does not promise storage exclusively in your country or a particular data center.

Where a transfer requires safeguards, a specific notice, or consent under applicable law, we will apply the relevant requirements. You may contact support for information about transfers and applicable safeguards for your use of the service.

9. Security

We use measures appropriate to the service, including authenticated access to account records, permission checks, transport safeguards, and controls against unauthorized requests and abuse. The public accessibility of media URLs described above remains a separate limitation; account authentication does not encrypt or make those URLs private.

No system eliminates every security risk. Protect your login and resource links, use secure devices, and contact support if you believe your account or content has been exposed. We will handle a personal-data breach in accordance with applicable notification and response obligations.

10. Your privacy requests

Depending on where you live, you may have rights to obtain information about processing, access or correct your data, receive a copy, request deletion, restrict or object to certain processing, withdraw consent, or opt out of certain advertising disclosures. You may also have a right to complain to your local data-protection authority or challenge a refusal of a request.

Send requests to support@tabdream.com. Tell us what you want to request and the account or content involved. We may request proportionate information to confirm your identity or authority; do not send passwords or full payment details. We respond within the deadlines required by applicable law and explain any lawful refusal or limit. Exercising a privacy right will not by itself result in unlawful discrimination.

Profile settings and available download controls let you manage some information directly, but they do not provide a complete self-service export or erasure of all service data. Support remains the contact for requests that the interface cannot complete.

11. Age restrictions

TabDream is intended for adults aged 18 and over and is not directed to children. If you believe a child has provided us with personal information or created an account, contact support so we can investigate and take appropriate action, including deletion where required. Uploading another person's image requires the appropriate rights and permissions regardless of age.

12. Updates and contact

We will update the date above when this Policy changes. Material changes to data use will receive additional notice where required, and a new use that requires consent will not be authorized simply by changing this page.

For privacy requests, concerns about a portrait or other uploaded material, or questions about a provider, contact support@tabdream.com. Support tickets are also available when enabled. The English and Chinese versions are intended to describe the same practices.