CAPCUT DREAMINA PRIVACY POLICY

Worth Knowing

Dreamina Drops the USDS Wrapper, Effective Date Unchanged
CapCut Dreamina CapCut Dreamina — Privacy Policy

The Dreamina privacy policy tripled in size this week. The effective date didn't move.

The biggest shift is at the top. The prior version named "TikTok USDS Joint Venture LLC" as the operating entity — the US Data Security structure stood up to satisfy CFIUS-related national-security requirements during the 2024–25 TikTok divestiture negotiations. The new version names "Bytedance Pte. Ltd." in Singapore. The "US" was also dropped from the document's title. The reference to "Executive Order 14352" — the September 2025 order addressing TikTok's US operations — is gone, replaced with generic Corporate Group language. Interesting...

The new document adds six jurisdiction-specific supplements (Australia, Brazil, Canada, EEA/UK/Switzerland, Indonesia, and more), an EEA legal-bases table, GDPR Representatives in London and Dublin, and a new International Data Transfers section confirming storage in the United States, Singapore, and Malaysia. In the EEA legal-bases table, Dreamina now asserts a legitimate interest in processing user data to "train and improve our technology, such as our machine learning models and algorithms." We didn't see a standalone opt-out for that in the captured text.

The updated policy still points to a separate "Dreamina US Privacy Policy" for US users. We don't have that one in tracking yet.

Why this matters: A platform that used to sit inside TikTok's USDS structure is now controlled out of Singapore by ByteDance, with the effective date unchanged. Anyone whose Dreamina compliance posture was built around the USDS containment is now operating on out-of-date assumptions.

In human terms: A production company is preparing the data-handling addendum for a TV pilot. The compliance team needs to confirm where each AI tool stores user data. Last month, Dreamina's answer was "US joint venture, US data residency, EO 14352 compliance." This week, the answer is "Singapore, Bytedance Pte. Ltd., storage split across the US, Singapore, and Malaysia." The producer asks when this changed. There's no easy way to tell — the effective date on the document is the same as it was in April.

This originally appeared in Vol. 26, No. 12, Adobe Content Credentials Get Some Teeth

View Full Issue →

Sign up for The Ledger Newsletter