Privacy Policy
Last updated: 2026-08-08.
1. Who we are
Somnovis (somnovis.com) is operated by FOP Artem Maliuha, a private sole proprietor registered in Ukraine (“Somnovis”, “we”, “us”). Registered address: Ukraine, 03113, Kyiv, vul. Druzhkivska 4, apt. 8. Tax ID (ІПН): 3128710556. For any privacy question, contact support@somnovis.com.
2. What this policy covers
This policy explains what personal data Somnovis collects when you browse the site or purchase a personal dream reading, why we collect it, the legal basis for each purpose, who we share it with, and how long we keep it.
3. Data collected while browsing
We do not require an account to read articles on Somnovis.
Cookie and similar technologies fall into these categories:
Strictly necessary — needed to load the page, remember your consent choice (via Google’s CMP where active), and run security features. These do not require consent.
Analytics — Google Analytics (GA4) records usage statistics (pages viewed, general location, device type) to help us understand which content is useful.
Advertising — Google AdSense may show advertising and use cookies or similar identifiers for ad delivery and, where permitted, personalization.
We use Google Consent Mode. Storage of analytics and advertising cookies is denied by default for every visitor. For visitors in the EEA, UK, and Switzerland, Google’s consent-management platform (Funding Choices) is intended to show a cookie banner; analytics and ad cookies are only stored after you consent through that banner. You can withdraw consent by reopening the banner or clearing your cookies. Even before consent, Google’s scripts may load in a cookieless or restricted mode for Consent Mode signalling — that is not the same as storing analytics or advertising cookies.
4. Legal bases for processing
Where the GDPR or UK GDPR applies, we process personal data on these bases:
Contract (Art. 6(1)(b)): creating your order, generating the reading and/or image you purchased, emailing the result, and showing it on your result page.
Consent (Art. 6(1)(a)): analytics and advertising cookies/identifiers in the EEA/UK/Switzerland, via the cookie banner. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
Legitimate interests (Art. 6(1)(f)): keeping minimal transaction records (order id, amount, date, currency, and a record that you agreed to the Terms/Refund Policy) for accounting, fraud prevention, and defending legal claims; securing the site.
Legal obligation (Art. 6(1)(c)), where applicable: retaining or disclosing records when required by tax or other law.
5. Data collected for the personal dream reading feature
When you start or complete a personal AI dream reading purchase, we collect:
The dream description you type; which options you selected; a timestamp and policy-version stamp recording that you ticked the checkout consent checkbox (immediate delivery and agreement to the Terms and Refund Policy); your email address, obtained from Paddle after a successful purchase, used to send you the finished reading and for support lookups by order number; and the AI-generated text and/or image produced for you.
Sensitive content. A dream description can incidentally include special-category data (for example information about health, sex life, religious or philosophical beliefs). We do not ask for that information and do not need it to provide the service. Please do not include it. If you still choose to include it, you are voluntarily providing it so we can generate the reading you ordered; we process it only for that purpose and delete it on the same schedule as other dream-reading content. Do not submit other people’s special-category data.
6. Who we share it with
Paddle.com Market Limited acts as the Merchant of Record for all payments — they process your payment, handle VAT/sales tax, and are the seller in the purchase contract with you. See Paddle’s own privacy policy for how they handle payment data.
OpenRouter (OpenRouter, Inc.) routes your dream description to the language model that generates the text reading. We send paid-reading requests with zero-data-retention enforcement and pin them to Mistral as the only allowed provider, so the text is not retained for training or routed to other model hosts. OpenRouter’s Data Processing Agreement is incorporated into their terms (openrouter.ai/terms).
Mistral AI (Mistral AI, France) receives your dream description via OpenRouter and generates the text reading. Mistral is an EU company; see their privacy documentation for how they process API inputs.
fal.ai (Features & Labels, Inc.) receives a short, AI-derived visual description (not your original text verbatim) to generate your personal illustration, if purchased. fal.ai may process that description outside the EEA/UK. Their Data Processing Addendum at fal.ai/legal/data-processing-addendum is incorporated into their terms.
Resend is used to email you the finished reading (including the image as an attachment when purchased). Resend acts as our processor under their Data Processing Addendum at resend.com/legal/dpa.
Google receives data as described in section 3 when you consent to analytics or ads. We never sell your personal data.
7. How long we keep it
Your dream description, the generated reading(s)/image, and your email address are kept for 90 days after the order was created, then permanently deleted from our systems (the image file is deleted too). The same 90-day clock applies to unfinished checkouts (orders created but never paid): the dream text you typed is deleted on that schedule even if you did not complete payment.
Minimal transaction records (order id, amount, date, currency, status, payment reference, and the consent timestamp/policy version) may be kept longer for accounting and to show that a withdrawal-right waiver was obtained — without the dream text, generated content, or email.
Analytics data is retained per Google Analytics’ own retention settings once consent has been given.
8. Access to your result page
Your finished reading is shown at a private result URL that contains an unguessable identifier. There is no login. Anyone who has that link can view the dream text and the generated reading/image while they still exist. Treat the link like a password: do not post it publicly. We also email you the full reading so you have a copy if you lose the link.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your data, or to object to or restrict certain processing. Contact support@somnovis.com from the email address used at checkout and include your order number. Where the GDPR or UK GDPR applies, we will respond without undue delay and within one month (extendable as permitted by law for complex requests). You can also lodge a complaint with your local data protection authority.
10. Children
Somnovis is not directed at children under 16, and we do not knowingly collect data from them.
11. Changes
We may update this policy from time to time; the “Last updated” date above reflects the most recent revision.