VoxelDreamer
← Back to Legal

Privacy Policy

Last updated: 21 September 2026

1. Controller and scope

Aleksandr Shiian, sole proprietor (Einzelunternehmer), Welserstraße 3, 87463 Dietmannsried, Germany, operates VoxelDreamer ("we", "us", "our"). Contact details are in our Imprint. This Privacy Policy explains how we process personal data when you use our website and Service.

2. Information we collect

We follow data-minimisation principles and collect information needed to provide, secure, and improve the Service.

A. Account and Service data

  • Authentication and identity data: Authentication is managed by Clerk. We do not directly store your password. We store the user ID supplied by Clerk and may receive your email address for account management and communication.
  • Generation data: We store the prompts and configurations you submit, together with generated house structures associated with your user ID.
  • Optional marketing preferences: If you choose to subscribe to marketing email inside VoxelDreamer, we record the verified primary email supplied by Clerk, your subscription status, the version of the consent wording you accepted, consent and withdrawal timestamps, prompt-dismissal history, and the status of synchronization with our email provider. We do not record an IP address as part of this consent evidence. Existing accounts are not treated as subscribed merely because they have an email address.
  • Cancellation and security data: When you use the public cancellation route, we process the billing email, a short-lived one-time verification record, the contract selected, the cancellation declaration, its date and time, and delivery status for the confirmation. To limit automated abuse, we temporarily store keyed, non-plain-text fingerprints derived from the billing email and requesting network address, together with request timestamps, and we use automated bot verification. The fingerprint is used for rate limiting and is not used to reconstruct the original network address.

B. Payment and transaction data

The payment provider depends on the transaction. We do not receive or store full payment-card details.

Purchases processed through Paddle

Paddle acts as the authorised reseller and Merchant of Record for purchases processed through Paddle. Paddle independently collects and processes the personal, payment, billing, tax, fraud-prevention, and transaction information needed to complete that purchase. Paddle may share limited buyer and transaction data with us when needed to fulfil the VoxelDreamer product, manage access, prevent fraud, process an order, or support you.

Paddle and VoxelDreamer act as independent controllers for the personal data each processes in connection with the relevant buyer relationship; Paddle is not described here as a processor acting solely on VoxelDreamer’s instructions. For information about Paddle’s processing and your rights with Paddle, see the current Paddle Privacy Notice.

Purchases processed through Stripe

<!-- TODO(billing-migration): Keep this Stripe-transition disclosure while Stripe subscriptions or payments remain active; remove it only once the business owner confirms their migration or termination. -->

Stripe remains an active payment processor for Stripe purchases and subscriptions during the billing migration. Stripe processes the payment information and transaction data required for those transactions. We retain only the subscription status and customer or transaction references needed to manage VoxelDreamer access and support. Stripe’s processing is described in the current Stripe Privacy Policy.

3. How we use information

We use personal data to:

  • provide, maintain, secure, and improve the Service;
  • process generations using AI providers;
  • manage your account, access rights, purchases, and subscriptions;
  • respond to questions and support requests; and
  • prevent misuse or fraud and comply with legal obligations.

Optional marketing email

With your consent under Article 6(1)(a) GDPR, we may send product news, feature updates, tips, and occasional offers. Marketing consent is optional, is not required to use VoxelDreamer, and is separate from necessary security, billing, account, support, and operational Service email.

Our marketing messages are sent from news@updates.voxeldreamer.com. Replies and privacy requests may be directed to contact@voxeldreamer.com.

You can withdraw marketing consent at any time in Email preferences on your dashboard or through the unsubscribe link in a marketing email. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal. We do not use an authentication or Google sign-up alone as marketing consent.

4. Sharing and service providers

We do not sell personal data. We share data only as necessary with:

  • Clerk, for identity management and authentication;
  • Paddle, as independent Merchant of Record and controller for Paddle transactions, as described above;
  • Stripe, as payment processor for Stripe transactions, as described above;
  • Google Cloud, Vercel, and Neon, for hosting, database, and computing infrastructure;
  • PostHog, for product analytics only where you consent through our Cookie Policy, and Vercel Analytics, for cookie-free aggregate traffic insights;
  • Resend, acting as our email-delivery processor for necessary cancellation verification and confirmation messages and, separately, for optional marketing subscriptions and marketing email;
  • AI providers, which receive text prompts and build configurations to generate structures; we do not intentionally send direct personal identifiers with those prompts; and
  • Inngest, for background processing such as lengthy generation tasks.

5. Retention

We keep account references and generated houses while your account is active, unless a longer period is needed for legal claims, security, or record-keeping obligations. You may request deletion of your account and associated data at any time. Each payment provider retains transaction data under its own notice and legal obligations.

We retain marketing-consent and withdrawal records for as long as reasonably necessary to demonstrate the choices made, resolve complaints, and meet legal obligations. When you unsubscribe, we retain the minimum suppression and consent evidence needed to respect that choice and avoid sending further marketing. Provider identifiers and synchronization records are removed or anonymised when they are no longer needed for those purposes.

Short-lived public-cancellation verification links expire after 15 minutes. Verification, abuse-prevention, and cancellation-declaration records are retained only as long as reasonably necessary to protect accounts, demonstrate receipt and handling of the request, resolve disputes, and meet legal record-keeping obligations.

6. International transfers

Some providers and infrastructure, including Resend, may process data outside your country of residence, including in the United States. Where applicable, we rely on an adequacy decision or use appropriate safeguards such as the European Commission’s Standard Contractual Clauses and supplementary measures as required by applicable data-protection law. Paddle and Stripe describe their own international-transfer practices in their privacy notices.

7. Your GDPR rights

If GDPR applies to you, you may have rights of access, rectification, erasure, restriction, objection, and data portability, as well as the right to withdraw consent at any time and lodge a complaint with a supervisory authority. Contact contact@voxeldreamer.com to exercise rights relating to VoxelDreamer’s processing. For a Paddle or Stripe transaction, you may also need to contact the relevant provider directly for data it independently controls.

8. Contact

For privacy questions or requests about VoxelDreamer, contact contact@voxeldreamer.com.