DEEDREAMS LIMITED DATA PROCESSING POLICY
OVERVIEW
DeeDreams Limited (DeeDreams, we, us, our) complies with the Privacy Act 2020 (Act) when dealing with personal information. Personal information is information about an identifiable individual (a natural person).
This Data Processing Policy applies to our processing of personal information contained in media assets (images, audio, and likenesses) provided to us by our B2B clients (Clients) in the course of providing our AI recalibration and animation services.
1. Characterisation of Role (The Agency/Agent Split)
To the extent client-provided media assets contain personal information, DeeDreams acts strictly as the agent of the Client for the purposes of the Act. Under the Act, the Client remains the agency responsible for the legal collection, authorisation, and notification of this data.
2. Privacy Consents and Notices
The Client is responsible for obtaining all necessary consents from, and providing all necessary notices to, individuals (staff, customers, or third parties) whose likeness is being provided to us for AI-driven creative production. DeeDreams relies on the Client to obtain such consents and provide such notices.
3. Biometric Protocols & Proportionality
Purpose: We process facial and vocal data solely to create "biometric templates" necessary for visual consistency and high-fidelity animation in the Client’s requested deliverables.
Consent: The Client must obtain express, informed consent from all individuals whose biometric data is processed, satisfying the requirements of the Biometric Processing Privacy Code 2025.
Unintentional Likeness (AI Coincidence): We do not intentionally collect data from third parties not provided by the Client. Any coincidental resemblance to real-world individuals is a technical limitation of generative AI and does not constitute a "collection" of personal information.
The 90-Day Purge: All raw biometric templates and client-provided source media are permanently deleted from our primary infrastructure within 90 days of project completion.
4. Sub processors
We utilise enterprise-grade infrastructure (e.g., Google Gemini, Suno AI, Google Workspace and Google Flow). While data is processed through these platforms, we utilise "Enterprise/Non-Training" settings to ensure your data is not used to train public AI models.
5. Security
We utilise business-grade encryption and encrypted Google Workspace environments to maintain a secure chain of title for your assets.
