Privacy Policy

Last updated: February 18, 2026

1. Introduction

HomeDream ("we," "our," or "us") operates the HomeDream website and services. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service, in compliance with the Republic of Korea's Personal Information Protection Act (PIPA), the EU General Data Protection Regulation (GDPR), and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, and profile picture (when registering via email or OAuth providers such as Google or GitHub)
  • Payment Information: Billing details processed securely by our third-party payment processors (Lemon Squeezy / Stripe). We do not store your credit card numbers.
  • Communications: Information you provide when contacting support

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, download history, and interaction patterns
  • Device Information: Browser type, operating system, device identifiers, and screen resolution
  • Log Data: IP address, access times, referring URLs, and server logs
  • Cookies: See our Cookie Policy for details

3. How We Use Your Information

We use your personal information for the following purposes:

  • To provide, maintain, and improve the Service
  • To process subscriptions, payments, and transactions
  • To send transactional emails (account confirmation, payment receipts, subscription updates)
  • To respond to your support inquiries
  • To detect, prevent, and address fraud, abuse, or security issues
  • To enforce our Terms of Service and License Agreement
  • To analyze usage patterns and improve user experience
  • To comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the EEA/UK, we process personal data based on:

  • Contract Performance: Processing necessary to provide the Service you subscribed to
  • Legitimate Interests: Fraud prevention, security, analytics, and service improvement
  • Consent: Where you have given explicit consent (e.g., marketing communications)
  • Legal Obligation: Compliance with applicable laws and regulations

5. Sharing Your Information

We share your information only with:

  • Payment Processors: Lemon Squeezy and Stripe for payment processing
  • Cloud Infrastructure: Vercel (hosting), Supabase (database and storage)
  • Authentication Providers: NextAuth.js with Google and GitHub OAuth
  • Analytics: Anonymous usage analytics to improve the Service
  • Legal Requirements: When required by law, court order, or to protect our rights

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. International Data Transfers

Your data may be transferred to and processed in countries outside of your residence. We use cloud services hosted globally (primarily in the United States and Asia-Pacific). For transfers from the EEA/UK, we rely on Standard Contractual Clauses or other lawful transfer mechanisms. For Korean users, we obtain consent for overseas transfers as required by PIPA.

7. Data Retention

  • Account Data: Retained for the duration of your account, plus 30 days after deletion request
  • Transaction Records: Retained for 5 years for tax and legal compliance
  • Server Logs: Retained for 90 days
  • Analytics Data: Retained in anonymized form indefinitely

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data we hold
  • Rectify inaccurate or incomplete data
  • Delete your personal data ("right to be forgotten")
  • Restrict processing of your data
  • Data Portability — receive your data in a structured, machine-readable format
  • Object to processing based on legitimate interests
  • Withdraw Consent at any time where processing is based on consent

To exercise these rights, please contact us at support@homedream.dev. We will respond within 30 days.

9. Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL), secure authentication, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on the Service at least 14 days before taking effect. We encourage you to review this policy periodically.

12. Contact Us

For privacy-related inquiries, data requests, or complaints, please contact us at:

HomeDream Privacy Team
Email: support@homedream.dev

EEA/UK users may also lodge a complaint with your local data protection authority.