Data retention and deletion
What data does Dreamdata store?
Dreamdata stores data of all your connected sources, your website tracking events, and analysis data.
Where does Dreamdata store your data?
Dreamdata securely stores your data within the European Union using two Google Cloud services: Google Cloud Storage and BigQuery. Both services encrypt the data at rest using AES256 and offer reliable data storage solutions replicating the data across multiple data centers. This ensures that all your data is processed and stored within the European Union.
Our approach is designed to ensure GDPR compliance, meaning no information is stored or passed outside the EU unless our customers explicitly request it.
Google Cloud Storage: Dreamdata initially streams your website tracking events into Google Cloud Storage and stores daily synchronized data from all your connected sources in the same region before loading it into BigQuery. This approach ensures not only fault tolerance in tracking but also scalability and efficiency in data synchronization.
BigQuery: Dreamdata provides comprehensive data cleaning, standardization, and enrichment services for all your connected sources, facilitating in-depth analysis of marketing, content, revenue attributions, and more. Throughout this process, Dreamdata conducts most of the analyses and stores the query results in BigQuery.
Data processing within the Dreamdata app happens in Google Cloud EU and Amazon EU data centers. When we send data to your customer data warehouse (be it Google Cloud or Azure), the locations can be in both EU and US regions depending on your specific agreement.
How long does Dreamdata store data from connected sources?
Google Cloud Storage: Dreamdata automatically deletes your data stored in Google Cloud Storage 30 days after the data extraction date.
BigQuery: Dreamdata maintains a complete copy of all the data from each source connected to Dreamdata to ensure accurate analysis and reporting. If the data is deleted on your source platform, the Dreamdata App will promptly reflect the changes the following day.
When you disconnect a source from Dreamdata, all data of that source will be automatically deleted after 30 days
For accounts on the free tier, if there has been no login activity for 180 days, all associated data will be deleted.
IP address data
Dreamdata primarily collects IP address data from website tracking, which is used to enrich company, country, and city information. Our data retention policy dictates that we remove IP address data from our database within 14 days of acquisition.
The IP exclusion feature excludes events with specified IP addresses only for future occurrences.
Logs
Dreamdata's systems generate operational and audit logs, such as application, access, and error logs, which we use for security monitoring and troubleshooting. These logs are automatically deleted after 30 days.
Requests made to AI features, and the corresponding responses, are retained for 180 days. We use these records to investigate security events and quality or accuracy issues, and to evaluate and improve how the AI features interpret requests and build reports, for example, by reviewing cases where a feature produced an incorrect or incomplete result. Customer Data in these records is never used to train or fine-tune any model: improvement work changes how the feature operates (its instructions, configuration, and quality benchmarks), not what any model has learned.
The hosted Dreamdata MCP server is a data interface and does not run a language model on Dreamdata's side. Dreamdata does not retain the content of agent sessions which send requests to the MCP server. The only record kept is a technical log of which tools were called, retained under the standard log retention periods described above. Any prompts exchanged with a language model when using the MCP are handled by the agent and model you connect, outside of Dreamdata, and their retention is governed by your own provider.
All logs are stored within Dreamdata's own infrastructure in EU regions and are deleted with the rest of your Customer Data when your account is deleted. For full details of AI-related processing, see our AI Technical & Organizational Measures.
Dreamdata Tracking and Segment data retention
Dreamdata allows you to manage the retention period for your Dreamdata Tracking and Segment data. This setting will help you comply with data privacy policies. Navigate to Account -> Data Retention and choose one of the following options: 26 months, 38 months, 50 months, 62 months, 74 months or don't delete. If you choose don't delete all recorded tracking data will be kept indefinitely. This feature is only available to Admins.
Only options that are equal to or longer than your user activity history (shown as Data History in the Account page) will be available (example: if you have 3 years/36 months of user activity history you won't be able to set tracking data retention to 26 months).
Once a new retention period has been selected, any tracking data with a timestamp older than the chosen period will be permanently deleted after 30 days. Changing the retention period is a double opt-in process: after confirming your selection in the Dreamdata app, you will receive an email to confirm your choice a second time by clicking the Confirm Tracking Data Retention button. After the second confirmation, the 30 days deletion countdown starts. Once deleted, this data can’t be recovered, even if the retention settings are changed again in the future.
Account Deletion
If you want to delete your account and the data related to it, please disconnect all sources and email friends@dreamdata.io. Please make sure you remove our tracking script before making the request. We will delete your account and let you know when the deletion process starts. Thirty days after the process begins, all data is removed from Dreamdata data centers.
User Deletion Request
If you would like to request a user deletion request, please email privacy@dreamdata.io with the requested information. We will process DSAR/Right to be forgotten requests as soon as possible, max 30 days.
Dreamdata expects that you also make user deletion requests from all other sources connected to Dreamdata (such as your CRM) for a complete deletion. Dreamdata will delete all tracking history associated with the user.
Deletion process
Google Cloud Storage data: Once all sources are disconnected and the tracking scripts are removed, we will not pull any new data, and the 30-day deletion countdown starts.
BigQuery data: We will delete all data stored in BigQuery soon after receiving the request.
Account: We will delete your account after receiving your request, and you can no longer log in. This includes the users associated with the account.
API Key: We will delete your API key after receiving your request, and we will not process data you might still send, such as tracking data.
