Privacy Notice
Date of Revision: 06 February 2026
This Privacy Notice explains how the DZMM project team ("DZMM", "we", "us", or "our"), the operator of dzmm.io, collects, uses, discloses, and protects your personal data when you use our services at dzmm.io and any associated websites, platforms, or applications (the "Services").
The Services are an online platform that uses artificial intelligence to generate virtual, fictional characters ("AI Characters") with whom you can interact through text, images, voice, and other media. Some features may require a user account and/or a paid subscription.
This Privacy Notice is provided in compliance with applicable data protection laws, including the European Union General Data Protection Regulation (EU GDPR), the UK GDPR and Data Protection Act 2018, and other applicable data protection legislation.
For cookie-related information, see our Cookies Notice.
By using the Services, you acknowledge that you have read and understood this Privacy Notice.
1. Definitions
- Content: Information you provide to register and/or while using the Services, including your personal data, inputs to AI Characters, and outputs received from them.
- Consent: Any freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data.
- Personal Data: Any information relating to an identified or identifiable natural person.
- Processing: Any operation performed on personal data, whether automated or not, such as collection, storage, use, disclosure, or deletion.
- User / "you": Any person who visits or uses the Services.
2. Data We Collect and Why
Account Creation and Management
| Data Collected | Purpose | Legal Basis |
|---|---|---|
| Email address, encrypted password, display name | Account registration and authentication | Contract performance |
| Country (detected from IP), currency | Localization and billing | Legitimate interest (providing localized service) |
| Sign-in timestamps, IP addresses, sign-in count | Security and account management | Legitimate interest (platform security) |
| Credit balance, subscription status | Service delivery | Contract performance |
Provision of Services
| Data Collected | Purpose | Legal Basis |
|---|---|---|
| AI Character preferences and configurations | Customization of your experience | Contract performance |
| Messages, prompts, and interactions with AI Characters | Generating responses and delivering the service | Contract performance |
| AI-generated content (text, images, voice) | Service delivery | Contract performance |
Service Improvement
| Data Collected | Purpose | Legal Basis |
|---|---|---|
| Interaction data (may include your Content as defined in our Terms of Service) | Training and improving AI models, content moderation systems, and service quality. Where feasible, data is de-identified before use. You may object to this processing; see Section 8. | Legitimate interest (improving AI quality and safety) |
| Platform usage patterns (aggregated) | Analytics and performance monitoring | Legitimate interest (understanding usage) |
| Server log files (user-IDs, timestamps, request metadata) | Debugging and security; retained for 30 days then automatically deleted | Legitimate interest (platform security and stability) |
Payment Processing
| Data Collected | Purpose | Legal Basis |
|---|---|---|
| Payment method details (processed by third-party payment providers) | Processing subscriptions, credit purchases, and refunds | Contract performance |
| Transaction metadata (date, amount, currency, status) | Record-keeping and fraud prevention | Contract performance; legal obligation |
We do not directly store your full payment card details. Payment processing is handled by third-party payment service providers.
Safety and Moderation
| Data Collected | Purpose | Legal Basis |
|---|---|---|
| Flagged content and associated account data | Ensuring compliance with our Policies; detecting and reporting illegal activity | Legal obligation; legitimate interest |
| Content metadata (timestamps, IP addresses) | Investigation of policy violations | Legitimate interest |
3. Marketing
We may send you marketing communications about our Services if you have opted in. You can unsubscribe at any time by:
- Clicking the "Unsubscribe" link in any marketing email; or
- Contacting us at the address below.
We will not share your personal data with third parties for their marketing purposes without your explicit consent.
4. Data Sharing
We may share your information with:
- Service providers: Payment processors, hosting providers, email service providers, and other vendors necessary to deliver the Services;
- Professional advisers: Lawyers, accountants, or consultants where necessary;
- Legal authorities: Where required by applicable law or regulation;
- Successors: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred, subject to this Privacy Notice.
We will not sell your personal data to third parties.
Referral Program
If you participate in our referral program, we process the following additional data:
| Data Collected | Purpose | Legal Basis |
|---|---|---|
| Referral link usage (referrer ID, invitee registration) | Attributing referral rewards | Contract performance |
| Anti-fraud signals (account creation patterns, IP correlation) | Detecting referral abuse | Legitimate interest (fraud prevention) |
See our Referral Program Terms for details.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Services.
After account closure:
- Account data is retained for up to 3 years to address potential inquiries (unless you request earlier deletion);
- Financial/transactional data is retained for up to 7 years in accordance with tax and accounting obligations;
- Marketing data is retained until you withdraw consent or for 2 years after your last interaction.
Retention periods may be extended where required by law or in connection with legal proceedings.
6. Minors
The Services are intended for adults aged 18 or older (or the age of majority in your jurisdiction). We do not knowingly collect personal data from minors. If we learn that a minor has provided us with personal data, we will delete it promptly and block the account. See our Underage Policy.
7. Third-Party Links
The Services may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review their privacy notices.
8. Your Rights (GDPR)
If you are subject to the GDPR or similar data protection laws, you have the following rights:
- Access: Request a copy of your personal data.
- Rectification: Request correction of inaccurate data.
- Erasure: Request deletion of your data (subject to legal retention requirements).
- Restriction: Request that we suspend processing in certain circumstances.
- Portability: Request your data in a structured, machine-readable format.
- Withdraw Consent: Withdraw consent at any time (without affecting the lawfulness of prior processing).
- Object: Object to processing based on legitimate interests.
- Object to Marketing: Opt out of direct marketing at any time.
To exercise any of these rights, contact us at [email protected].
You also have the right to lodge a complaint with your local supervisory authority.
9. Automated Decision-Making
We use automated content moderation systems to detect potential violations of our Policies. These systems may automatically restrict content or flag accounts for review. Such processing is necessary for the performance of our contract with you and for our legitimate interests in maintaining platform safety.
You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. If you believe an automated decision has been made about you in error, you may contact us to request human review.
10. International Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area, the United Kingdom, or Switzerland — including the United States and Singapore. Where such transfers occur, we rely on one or more of the following safeguards:
- Standard Contractual Clauses (SCCs) approved by the European Commission;
- The data recipient's compliance with an adequate level of data protection;
- Your explicit consent, where applicable.
You may request a copy of the applicable transfer safeguards by contacting us.
11. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure.
12. Changes to This Notice
We may update this Privacy Notice from time to time. Material changes will be communicated through the Services. Your continued use of the Services after such changes constitutes acceptance of the updated Privacy Notice.
13. Contact
If you have questions about this Privacy Notice or wish to exercise your data protection rights, contact us at:
Email: [email protected]