Privacy Policy

1. Information We Collect

Account information. When you create an account, we collect your name, email address, and authentication credentials (or receive them from Google if you use Google Sign-In).

Event and planning content.When you use the Service, we collect the event details, preferences, brand guidelines, guest information, budget parameters, and other content you provide to generate and refine event concepts ("Your Content").

Payment information. If you subscribe to a paid plan, our payment processor (Stripe) collects your payment card details, billing address, and transaction history. We do not store your full credit card number on our servers. We receive from Stripe your subscription status, plan type, and billing identifiers needed to manage your account.

Usage data. We automatically collect information about how you use the Service, including pages visited, features used, actions taken, browser type, device information, IP address, and referring URLs. We use PostHog for product analytics (see Section 4).

Communications. If you contact us at support@dreamevent.ai or interact with our marketing emails, we retain the content of those communications.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including generating AI-powered event concepts.
• Process your subscription payments and manage your account.
• Send transactional emails (account verification, password resets, billing receipts).
• Send marketing and product update emails (you can opt out at any time; see Section 7).
• Analyze usage patterns to improve the Service, fix bugs, and develop new features.
• Respond to your support inquiries and feedback.
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with legal obligations.

3. AI Data Processing

The Service uses third-party AI models (currently provided by OpenAI) to generate event concepts, refine plans, and power the AI Event Designer. When you use these features, the content you provide (event details, preferences, refinement requests) is sent to OpenAI's API for processing.

OpenAI processes this data under their API data usage policy, which states that API inputs and outputs are not used to train their models. We encourage you to review OpenAI's data usage policy for details.

We do not use Your Content to train our own AI models or any third-party models. Your event data is used solely to generate outputs for you within the Service.

4. Analytics, Cookies, and Tracking

We use PostHog for product analytics to understand how users interact with the Service. PostHog collects usage data including page views, feature interactions, and session information. PostHog may use cookies or similar technologies to identify returning visitors.

We use cookies and similar technologies for:

• Authentication: To keep you signed in and manage your session.
• Analytics: To understand usage patterns and improve the Service (PostHog).
• Preferences: To remember your settings (such as light/dark mode).

We do not use third-party advertising cookies. We do not sell your data to advertisers.

5. Third-Party Service Providers

We share information with the following categories of service providers, solely to operate the Service:

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Retention

We retain your account information and event content for as long as your account is active or as needed to provide the Service. If you cancel your paid subscription, your data is preserved on the free Starter tier. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal, tax, or audit purposes.

Usage analytics data is retained in aggregate form and may be kept indefinitely for product improvement purposes, but is not linked to identifiable individuals after account deletion.

7. Your Choices and Rights

Access and export. You can access your event data at any time through the Service. You may export your event concepts as PDFs or presentations.

Account deletion. You may request deletion of your account and associated data by contacting support@dreamevent.ai. We will process deletion requests within 30 days.

Marketing emails. You can opt out of marketing and promotional emails at any time by clicking the unsubscribe link in any marketing email or by contacting us. Transactional emails (account verification, billing receipts, security alerts) are not optional and will continue as long as you have an account.

Cookies. Most browsers allow you to control cookies through their settings. Disabling cookies may affect the functionality of the Service (for example, you may be signed out more frequently).

8. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to opt out of sale: We do not sell your personal information.
• Non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at support@dreamevent.ai.

9. European Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis: We process your data based on: (a) your consent; (b) performance of a contract (providing the Service); (c) our legitimate interests (improving the Service, security); and (d) legal compliance.
• Data subject rights: You have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to withdraw consent.
• Data transfers: Your data may be transferred to and processed in the United States. We rely on standard contractual clauses and other appropriate safeguards for international data transfers.
• Supervisory authority: You have the right to lodge a complaint with your local data protection authority.

To exercise these rights, contact us at support@dreamevent.ai.

10. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us at support@dreamevent.ai and we will promptly delete it.

11. Security

We implement reasonable technical and organizational measures to protect your data, including encryption in transit (TLS), encrypted data at rest, secure authentication (including OAuth 2.0), and access controls limiting employee access to personal data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on the Service at least 14 days before the changes take effect. The "Last updated" date at the top reflects the most recent revision.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: support@dreamevent.ai

Dream Event
San Francisco, CA