Legal
Privacy
The platform runs on your hardware and we do not receive your clients' data. This page says exactly what we do receive.
The short version
We hold ten fields about your usage and the details you gave us to buy. No client names, no hostnames, no addresses, no estate detail, no telemetry, no analytics.
What we receive from the platform
A signed usage record per calendar month, containing exactly ten fields — deployment id, licence id, period start and end, peak assets, p95 assets, count basis, schema version, signature and timestamp.
The full contract is published on the security page, and you can read the record before it is sent.
The platform cannot send more than this. The field list is enforced in code on both sides — a record carrying an eleventh field is rejected rather than trimmed.
What we hold about you
| Data | Why | Kept |
|---|---|---|
| Name, company, email | To sell you a licence and support you | While you are a customer, then 7 years for tax |
| Billing details | Held by our payment processor, not by us | Per their retention |
| Support correspondence | To resolve your issue and improve documentation | 3 years |
| Usage records | To invoice you | 7 years for tax |
What we never do
- Sell, rent or share your data
- Use your data to train a model
- Access your platform, remotely or otherwise — there is no mechanism
- Track you across other websites
- Serve advertising
Prospect data
If you run an assessment on a prospect's environment, that data stays on your hardware and we never see it. You are the controller for it, and the platform holds prospect records separately from client records with their own retention and deletion so you can honour a deletion request when a sale does not happen.
Your rights
Access, correction, deletion, portability and objection. Email support and we will action it within thirty days.
There is very little to action, which is the point.
Cookies
The website uses no tracking cookies, no analytics and no third-party scripts beyond the font provider. Checkout sets a session cookie because it must.
Last updated 7 August 2026. Controller: Dream-Genie AI, Yellowknife, Northwest Territories, Canada.
Who holds your data, and where to write
Dream-Genie AI is the data controller for the ten fields a deployment sends and for anything you send us directly. Your clients' data is never in scope, because it never leaves your network.
Dream-Genie AI
Yellowknife, Northwest Territories, Canada
hello@dream-genie.ai
A registered address for correspondence is available on request and will be published here once the business address is separate from the operator's home. Saying that is better than publishing a home address or pretending to have an office.
Two different things, kept apart on purpose
People conflate these and we would rather you did not, because reading one as the other misleads you in both directions.
| The ten fields | Continuous, for the life of a paying deployment. Ten fields and a signature, which is what the bill is calculated from. No client names, no hostnames, no content. This is the one that runs forever. |
| The evaluation summary | Once, at the end of a thirty-day evaluation, and never again. Counts of findings, consequence figures, the asset and coverage counts, the dates. Nothing about any of your clients, and no field one could live in. |
Neither carries a client name, and the reason is the same in both cases — it is not about you. Your clients never agreed to anything with us, and the fact that their MSP runs or evaluates our software is not their consent to be in our records.
The evaluation findings report itself is produced by your own deployment and never leaves it. We could not write it — we do not have your data.