Privacy Policy

Last updated: March 2026

1. Introduction

Welcome to Optimage (“we”, “our”, or “us”), a service operated by Dream Intrepid Ltd. We are committed to protecting your privacy and ensuring your data is handled in compliance with the General Data Protection Regulation (GDPR) and the Nigeria Data Protection Regulation (NDPR).

2. Data Controller vs. Data Processor

When you use our Image Compression or AI Media tools: We act as the Data Controller for your account information and the direct usage data generated.

When you use our Client Gallery Delivery: You (the photographer/creator) are the Data Controller for the media you upload and the email addresses of the clients you share galleries with. Optimage acts solely as a Data Processor. We do not use, sell, or independently contact your clients.

3. Information We Collect

• Account Information: Name, email address, and authentication data when you register.
• Ephemeral Processing Data (Compression & AI): Files uploaded for standard optimization or AI transcription are processed on edge nodes. Processed files are automatically purged from our servers within 30 minutes. We do NOT use your uploads to train any AI models.
• Persistent Gallery Data: Media uploaded to Client Galleries is securely stored via Supabase and Cloudinary until you delete the gallery or the gallery expires.
• Payment Information: We do not store full credit card details. Subscriptions and payments are securely processed by Paystack (our sub-processor).
• Usage & Analytics: Anonymized telemetry regarding file sizes, processing times, and feature usage to maintain platform health.

4. Third-Party Sub-Processors

To provide our services, we utilize industry-standard sub-processors, binding them to strict data processing agreements:

• Supabase: Database and authentication services.
• Cloudinary: Content Delivery Network (CDN) and secure media storage for active galleries.
• Paystack: Secure payment processing.
• OpenAI: Strict zero-retention API processing for audio/video transcription.

5. Your NDPR & GDPR Rights

Under applicable data protection laws, you possess the right to:

• Right of Access & Portability: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate personal data via your dashboard.
• Right to Erasure (“Right to be Forgotten”): Request immediate deletion of your account and all associated persistent gallery data.
• Right to Restrict Processing: Pause the use of your data for specific operations.

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

6. Data Security

We implement strict access controls, row-level security (RLS) policies, and encryption at rest to protect your data. PIN-protected client galleries use cryptographic hashing to ensure unauthorized parties cannot access your protected work.

7. Contact Us

For privacy inquiries or to exercise your rights, please contact our Data Protection Officer at privacy@dreamintrepid.com.