// Trust & Security Report
Deep Dream Generator
by Aifnet Ltd.
AI image generator (30+ models including Flux, Stable Diffusion, DALL-E, Ideogram, SeeDream) with complementary video, music, and upscaling tools. Established 2015, serving 5M+ creators.
Certifications held
0
Maturity
Growth
Trains on your data
Unknown
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
> Show 10 unconfirmed / not-held certifications
source: deepdreamgenerator.comNo mention on vendor domain. Nudge Security profile displays badge but vendor's own privacy policy (https://deepdreamgenerator.com/privacy, last updated Dec 5, 2025) contains zero reference to SOC 2 audit or attestation.
source: deepdreamgenerator.comNo mention on vendor domain. Only third-party Stripe (payment processor) mentions SSAE18/SOC 2 Type 1/2 compliance, but that is Stripe's cert, not Deep Dream Generator's.
source: deepdreamgenerator.comNo public evidence. Vendor's privacy policy and terms do not reference ISO 27001 certification or audit.
source: deepdreamgenerator.comGDPR deletion mechanism present ('To request account and data deletion please send us an email to: contact@deepdreamgenerator.com'), but no formal GDPR compliance certification or Data Protection Impact Assessment published. Vendor subject to GDPR as they process EU user data.
source: deepdreamgenerator.comNo evidence. Consumer image generator; HIPAA (healthcare data) not applicable to product scope.
source: deepdreamgenerator.comNo public evidence. Not mentioned in privacy policy or vendor documentation.
source: deepdreamgenerator.comNo public evidence. Not mentioned in vendor documentation.
source: deepdreamgenerator.comNo public evidence. Not mentioned in vendor documentation.
source: deepdreamgenerator.comNo evidence. Not applicable; vendor is not a US federal contractor.
source: deepdreamgenerator.comNo public evidence. Not mentioned on vendor domain.
// Privacy & AI training
Trains on customer data
Not stated
Data processing agreement
Not offered
Data region
United States and other countries (explicit consent required per ToS)
Ambiguous. ToS grants vendor 'a non-exclusive, worldwide, royalty-free' license to use uploaded content 'for operating, improving, promoting, and maintaining the Service.' Does not explicitly state whether generated images or prompts are used for model training. User-generated content remains private by default unless made public.
// Security controls
Payment data handling
Processed by Stripe or another payment processor disclosed at checkout; per Terms, 'We do not store full payment card numbers.'
deepdreamgenerator.comContent moderation
Strengthened post-2025 after payment processor flagged sexual content violations. NSFW content automatically made private or removed. Account suspension/banning for repeated violations.
deepdreamgenerator.comIP rights
Users retain ownership and commercial usage rights to generated content.
deepdreamgenerator.com// Products & data scope
Data it handles: Text prompts, generated images (stored private by default, user controls public visibility)
30+ models: Flux, Stable Diffusion, DALL-E, Ideogram, SeeDream, ChatGPT 2, Artistic 2, DaVinci2. Users age 16+. Free tier with energy limits; paid subscriptions available.
Data it handles: Uploaded images or prompts, generated video frames
Models: Veo 3, Kling, Sora 2, Hailuo AI, Seedance Pro. Transforms static images into dynamic video.
Data it handles: Text prompts for music generation
Limited details provided on music capabilities.
Data it handles: Uploaded images
Claimed by 500,000+ creators. Enhances image resolution and quality.
// What to watch
- Nudge Security's profile displays SOC 2, ISO 27001, GDPR, HIPAA, FedRamp, and CSA STAR badges, but no vendor-domain documentation or audit reports back these claims. The vendor's privacy policy (updated Dec 5, 2025) makes no mention of any formal certifications.
- The vendor's blog states that its payment provider flagged the site for compliance issues because some users were able to generate sexual content, resulting in a financial penalty and a warning to strengthen filters. The blog does not name the processor (Stripe is named elsewhere as a payment processor). The vendor responded with stricter content moderation.
- No dedicated security or compliance documentation page is published.
- The vendor offers a data deletion mechanism but has no formal DPA, no published DPIA, and no GDPR certification, while processing EU user data without a documented compliance framework.
- The Terms of Service grant a license to use content for 'operating, improving...the Service' but do not explicitly state whether customer images or prompts are used for model training.
- The vendor shows growth-stage maturity (founded 2015, 5M+ users) but lacks enterprise-grade security infrastructure: no published audit reports, no SLA commitment, and no formal incident response documentation.
- Vendor identity: Aifnet Ltd., VAT BG205591406, Bulgaria. Founder: Kaloyan Chernev (public LinkedIn). Domain: deepdreamgenerator.com.
// At a glance
Pricing model
Freemium: free tier with energy-limited generations; paid subscriptions for higher limits and advanced features.
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Aifnet Ltd.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
deepdreamgenerator.com