Privacy Policy

GuruCloudAI, LLC ("Company", "we", "us") operates DreamScape, an AI-powered 3D scene creation platform. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use DreamScape ("Service").

1. Data Controller

GuruCloudAI, LLC
A Puerto Rico limited liability company
Email: privacy@gurucloudai.com

2. Data We Collect

Category	Data	Legal Basis (GDPR)
Account	Email address, display name, account preferences	Contract performance
Payment	Billing name, address, last 4 digits of card (via Stripe — we never store full card numbers)	Contract performance
Content	3D scenes, scripts, assets you upload or create	Contract performance
AI Interaction	Voice inputs, text prompts, AI agent responses during sessions	Consent / Contract
Technical	IP address, browser type, device, operating system	Legitimate interest
Usage	Session activity, feature usage, scene interactions	Legitimate interest
Cookies	Session cookies (PAT tokens), preference cookies	Consent (non-essential) / Necessary

3. How We Use Your Data

• Service Delivery: Operating your account, hosting scenes, processing payments, enabling multiplayer collaboration
• AI Features: Processing voice and text inputs via third-party AI providers (OpenAI, Anthropic) to generate responses and scene modifications
• Security: Fraud prevention, abuse detection, enforcing our Terms of Service
• Service Improvement: Analyzing aggregated (non-individual) usage patterns to improve the platform
• Communication: Sending service emails, billing receipts, security alerts, and (with consent) product updates

4. Third-Party Service Providers

We share data with the following sub-processors solely as needed to operate the Service:

Provider	Purpose	Data Shared
Google Cloud Platform	Hosting, storage, compute	All service data
Stripe	Payment processing	Payment and billing data
OpenAI / Anthropic	AI voice chat and scene agents	Voice inputs, text prompts
Redis Cloud	Real-time session state	Session metadata

We do not sell your personal data. We do not share your data with third parties for their own marketing purposes.

5. Cookies

5.1 Essential Cookies

Required for the Service to function. Includes session cookies and PAT (Personal Access Token) cookies for authentication. These cannot be disabled.

5.2 Analytics Cookies

Used to understand usage patterns and improve the Service. These are only set with your consent.

5.3 Managing Cookies

You can manage cookie preferences through the cookie consent banner displayed on first visit, or through your browser settings.

6. Your Rights

6.1 GDPR Rights (EU/EEA Users)

If you are located in the EU or EEA, you have the right to:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your data ("right to be forgotten")
• Restriction — Request restriction of processing
• Data Portability — Receive your data in a structured, machine-readable format
• Objection — Object to processing based on legitimate interest
• Withdraw Consent — Withdraw consent at any time for consent-based processing
• Complaint — Lodge a complaint with your local data protection authority

6.2 CCPA Rights (California Users)

If you are a California resident, you have the right to:

• Know — Know what personal data we collect and how it is used
• Delete — Request deletion of your personal data
• Opt-Out — Opt out of the sale or sharing of personal data (we do not sell your data)
• Non-Discrimination — Not be discriminated against for exercising your rights

6.3 Exercising Your Rights

To exercise any of these rights, email us at privacy@gurucloudai.com. We will respond within 30 days (or shorter if required by law).

7. Data Retention

• Account data: Retained while your account is active, plus 30 days after deletion
• Scene content: Retained while your account is active; deleted 30 days after account termination
• Payment records: Retained for 7 years for tax and legal compliance
• Voice recordings: Processed in real-time for AI interactions; not stored long-term
• Usage logs: Retained for 90 days for security and debugging, then aggregated

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS 1.3)
• Encryption at rest for stored data
• Access controls and authentication for internal systems
• Regular security reviews

No system is 100% secure. If we discover a data breach that poses a risk to your rights, we will notify you and relevant authorities as required by law.

9. International Data Transfers

Your data may be transferred to and processed in the United States. For users in the EU/EEA, we protect these transfers using Standard Contractual Clauses (SCCs) as approved by the European Commission, and ensure our sub-processors maintain adequate safeguards.

10. Children's Privacy

DreamScape is not intended for users under 13 years old (or 16 in the EU/EEA). We do not knowingly collect personal data from children. If we discover that a child has provided us with personal data, we will promptly delete it. If you believe a child is using the Service, please contact us at privacy@gurucloudai.com.

11. Do Not Track

DreamScape does not currently respond to "Do Not Track" browser signals, as there is no industry-standard implementation. You can control tracking through cookie preferences.

12. Changes to This Policy

We may update this Privacy Policy periodically. For material changes, we will provide notice via email at least 30 days in advance. The "Last Updated" date at the top will reflect the most recent revision.

13. Contact

For questions about this Privacy Policy or to exercise your data rights:

GuruCloudAI, LLC
Email: privacy@gurucloudai.com
Website: www.gurucloudai.com