Legal
GDPR
Your rights under the General Data Protection Regulation - and equivalent rights we honor for everyone, everywhere
Your rights
Right to access
Request a copy of all personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete data.
Right to erasure
Request deletion of your personal data ('right to be forgotten') - or do it yourself instantly from Settings.
Right to portability
Receive your data in a structured, machine-readable format - download it yourself anytime from Settings → Privacy → Export your data. For anything the file does not cover (such as CV details, Member Network and Community content, and payment records), email us.
Right to restrict processing
Ask us to pause processing of your data while a request is resolved.
Right to object
Object to processing of your data for certain purposes, including profiling used for coaching insights.
Right to withdraw consent
Withdraw consent for anything based on it - such as analytics or marketing cookies - at any time, without affecting past processing.
Data controller
Master Sanker LLC, which operates Dreamaster, is the data controller responsible for deciding how and why your personal data is processed. We process data lawfully, fairly, and transparently in accordance with GDPR, and we extend the same practical rights above to users outside the EU/UK as a matter of policy, not just legal minimum.
Legal basis for processing
We process account and content data based on contract performance (providing the Service you signed up for) and legitimate interests (security, fraud prevention, keeping the Community and Messages safe, and improving the product). We keep payment records on the basis of our legal obligations (accounting and tax). Analytics and marketing cookies (Google Analytics, Meta Pixel) run only on the legal basis of your consent, collected via the cookie banner, and never load before you give it - see our Cookie Policy.
Sub-processors
We use Groq, Google, and OpenRouter (AI text generation; Groq also converts microphone recordings to text), ElevenLabs (synthetic voice), Stripe and Dodo Payments (card and other payments), NOWPayments (cryptocurrency payments), Resend (transactional email), Railway (hosting), and Backblaze (encrypted backup storage) as sub-processors, each bound by their own data protection commitments. See our Privacy Policy for the full list and what each one does with your data.
Data retention
We retain your data for as long as your account is active. Once any paid subscription is cancelled you can delete your account from Settings → Privacy, which removes your data from our live systems immediately (including Contact-page messages sent from the same email address); residual copies may persist in encrypted backups kept for disaster recovery (up to 12 months) and are overwritten as older backups are rotated out. After deletion we keep only what accounting law and our financial records require: payment records (with no name or email) and anonymous affiliate commission records. The blocked text of an automatic Community word warning is removed after 90 days. For a deleted account, 12 months is the default maximum period for any remaining copy (for example in encrypted backups) unless a legal obligation requires longer; payment and accounting records are kept for as long as the law requires, and security, fraud-prevention and audit records may be kept longer where reasonably necessary. See Section 8 of our Privacy Policy.
Contact us
For GDPR or other data-rights requests, email contact@dreamaster.app. We will respond within 30 days, sooner where local law requires. If you're in the EU/UK and unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.