Privacy Notice

I. What is Personal Information?

When we use the term "personal information" in this Privacy Notice, we mean any data or information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked to, directly or indirectly, a particular natural person or household or any other data or information that constitutes "personal data," "personal information," or "personally identifiable information."

II. Our Collection and Use of Personal Information

We collect personal information in a variety of ways. For example, you may provide us your personal information when you register for the Services, subscribe to our services, send us messages, use features of our Services, or interact with our AI-powered productivity tools.

We may link or combine your activities and information collected from you on our Sites with information we receive from third parties, as well as information we collect automatically through tracking technologies. This allows us to provide you with a personalized experience regardless of how you interact with us.

Personal Information Collected from You

We may collect the following categories of personal information submitted to us by you through the Services:

Contact Information, including first and last name, email address, real estate brokerage affiliation, license number (optional), phone number, your location preference if you choose to provide it, and communication preferences. We use this information to provide the Services, communicate with you directly, and send you service-related and marketing communications in accordance with your preferences.

Account Information, including Google OAuth profile data (name, email, profile picture), user ID, authentication tokens, Service usage history, subscription status, and any preferences you configure. We use this information to authenticate your access, provide personalized Services, communicate regarding your account, and for customer support purposes. We utilize Stripe, a third-party provider, to process subscription payments. In no event does dreamif.ai facilitate financial transactions or fund transfers on behalf of our users.

Google Workspace Data, including Gmail messages, attachments, metadata, headers, labels, thread IDs, and related contact, calendar, and Drive context accessed through Google APIs with your explicit consent. We process this data to provide intelligent email organization, generate AI-powered responses and summaries, analyze communication patterns for productivity insights, enable real-time email management features, and support optional calendar, contacts, and Drive workflows. Your Google Workspace data is processed in accordance with Google API Services User Data Policy, including Limited Use requirements.

AI Processing Data, including vector embeddings (mathematical representations of your email content for intelligent search and analysis), AI-generated drafts and suggestions, and usage patterns related to AI features. These records are stored securely, and your personal information is not used to train or improve general AI models without your explicit consent.

Voice and Location Preference Data, including microphone input that you choose to provide when using optional voice features, transcripts derived from that input, manually selected location preferences, and general location signals such as country-level or city-level inferences derived from IP or edge request data. We use this information to operate voice workflows, personalize certain location-aware features, and prefill settings where appropriate.

Payment Information. If you sign up for one of our Services requiring payment (i.e., productivity platform subscriptions), we collect the information provided in connection with such payment. Currently, payment processing is handled exclusively through Stripe for subscription services. We do not store credit card numbers or sensitive payment details directly. As such, we do not retain any personally identifiable financial information in connection with credit card payments, such as credit card numbers. Rather, all such information is provided directly by you to our third-party processor. The payment processor's use of your personal information is governed by their privacy notice.

Inquiry and Communications Information, including information provided in custom messages sent through the forms, in chat messages, to one of our email addresses, or via phone. This also includes contact information provided on our Services. We use this information to investigate and respond to your inquiries, to communicate with you, to enhance the services we offer to our users, and to manage and grow our organization.

Newsletter, Marketing Emails, and Blog Information, including email address and applicable interests and communication preferences. We use this information to manage our communications with you and send you information about products and services we think may be of interest to you. If you wish to stop receiving email messages from us, simply click the "unsubscribe link" provided at the bottom of the email communication. Note that you cannot unsubscribe from certain services-related email communications (e.g., account verification, confirmations of transactions, technical or legal notices).

Information Collected Through the Use of the Services, including any files, documents, videos, images, data, or information you choose to upload or transmit through your communications with us or your use of the Service (collectively, "User Content"). User Content and any information contained in the User Content, including personal information and metadata you may have included, is stored and collected as part of the Service. We use the User Content to provide you with the Service.

Feedback Information. We may collect feedback and ratings you provide relating to our Services. We use this information to communicate with you, to conduct market research, to inform our marketing and advertising activities, and to improve and grow our business.

Other Information that you provide to us online, by phone, or in person. We may use this information to respond to your request, provide you the requested services, and to inform our marketing and advertising campaigns.

Personal Information from Third Parties

We also obtain personal information from third parties, which we often combine with personal information we collect either automatically or directly from an individual.

We may receive the same categories of personal information as described above from the following third parties:

dreamif.ai entities: We may receive personal information from other companies and brands owned or controlled by dreamif.ai, and other companies under common ownership with dreamif.ai.

Your Employer / Company: If you interact with our Services through your employer or company (such as a real estate brokerage), we may receive your information from your employer or company, including another representative of your employer or company. We use this information to operate, maintain, and provide to you the features and functionality of the Services.

Social Media: When an individual interacts with our Services through various social media networks, such as when someone "Likes" us on Facebook or follows us or shares our content on Google, Facebook, Twitter, or other social networks, we may receive some information about individuals that they permit the social network to share with third parties. The data we receive is dependent upon an individual's privacy settings with the social network and may include your profile information, profile picture, gender, username, user ID associated with your social media account, age range, language, country, and any other information you permit the social network to share with third parties. Individuals should always review and, if necessary, adjust their privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services. We use this information to operate, maintain, and provide to you the features and functionality of the Services, as well as to communicate directly with you, such as to send you email messages about products and services that may be of interest to you.

Service Providers: Our service providers that perform services solely on our behalf, such as survey and marketing providers and third-party payment processors, collect personal information and often share some or all of this information with us. The information may include contact information, demographic information, payment information, information about your communications and related activities, and information about your orders. We may use this information to administer and facilitate our services, your orders, and our marketing activities.

Information We Receive from Authentication Services You Connect to Our Services: Some parts of our Services may allow you to login through an authentication service such as Google. These services will authenticate your identity and provide you the option to share certain personal information with us, which could include your name, email address, address book and contacts, or other information. The data we receive is dependent on that third party's policies and your privacy settings on that third-party site. We use this information to operate, maintain, and provide to you the features and functionality of the Services. We may also send you service-related emails or messages (e.g., account verification, purchase confirmation, customer support, changes, or updates to features of the Sites, technical and security notices).

Other Sources: We may also collect Personal Information about individuals that we do not otherwise have from, for example, publicly available sources, third-party data providers, brand partnerships, or through transactions such as mergers and acquisitions. We use this information to operate, maintain, and provide to you the features and functionality of the Service, as well as to communicate directly with you, such as to send you email messages about products and services that may be of interest to you.

Through the provision of our Services, we may also process deidentified information that cannot reasonably be used to infer information about, or otherwise be linked to, a particular consumer or household. dreamif.ai commits to maintain and use the information in deidentified form and will not attempt to reidentify the information, except in instances where necessary for determining whether the deidentification process used by dreamif.ai satisfies the requirements under applicable law.

Personal Information Automatically Collected

We, through our third-party providers, automatically collect information you provide to us and information about how you access and use the Services when you visit our services, read our emails, or otherwise engage with us. We typically collect this information through a variety of tracking technologies, including (i) cookies or small data files that are stored on an individual's computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, mobile SDKs, location-identifying technologies and logging technologies (collectively, "tracking technologies") and we may use third-party partners or technologies to collect this information. Information we collect automatically about you may be combined with other personal information we collect directly from you or receive from other sources.

We, and our third-party partners, use tracking technologies to automatically collect usage and device information, such as:

• Information About the Computer, Tablet, Smartphone, or Other Device You Use, such as your IP address, browser type, Internet service provider, device type/model/manufacturer, operating system, date and time stamp, and a unique ID that allows us to uniquely identify your browser, mobile device, or your account (including, for example, a persistent device identifier or an Ad ID), and other such information. We may also work with third-party partners to employ technologies, including the application of statistical modeling tools, which permit us to recognize and contact you across multiple devices.
• Information About the Way You Access and Use Our Services, for example, the site from which you came and the site to which you are going when you leave our Services, how frequently you access the Services, whether you open emails or click the links contained in emails, whether you access the Services from multiple devices, and other browsing behavior and actions you take on the Sites.
• Information About How You Use the Services, such as the pages you visit, the links you click, the ads you view and click on, the videos you watch, and other similar actions. We may also use third-party tools to collect information you provide to us or information about how you use the Services and may record your mouse movements, scrolling, clicks, and keystroke activity on the Services and other browsing, search, or purchasing behavior. These tools may also record information you enter when you interact with our Services or engage in chat features through our Services.
• Information About Your Location, such as general geographic location that we or our third-party providers may derive from your IP address or edge request data. We may use this information to support security, fraud prevention, and country-level or city-level location prefills when you have not yet provided a location preference.
• Analytics Information. We may collect analytics data or use third-party analytics, visitor-identification, and logging tools, including PostHog, RB2B, and Axiom, to help us measure traffic and usage trends for the Services, understand how users interact with our Services, identify business visitors and marketing attribution signals, troubleshoot issues, and improve product performance.

All of the information collected automatically through these tools allows us to improve your customer experience. For example, we may use this information to enhance and personalize your user experience, to monitor and improve our Sites and Services, and to improve the effectiveness of our Services, offers, advertising, communications, and customer service. We may also use this information and the data collected through tracking technologies to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the site; (b) provide custom, personalized content and information, including targeted content and advertising; (c) identify you across multiple devices; (d) provide and monitor the effectiveness of our Services; (e) monitor aggregate metrics such as total number of visitors, traffic, usage, and demographic patterns on our website; (f) identify business visitors and marketing attribution signals through service providers acting on our behalf; (g) diagnose or fix technology problems; and (h) otherwise to plan for and enhance our Services.

If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies; however, doing so may negatively impact your experience using the Services, as some features and services may not work properly. You may also set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and performed certain functions with it.

Additional Uses of Personal Information

We may use personal information we collect to:

• Fulfill or meet the reason the information was provided, such as to fulfill our contractual obligations, to deliver the Services you have requested, and to process transactions;
• Manage our organization and its day-to-day operations;
• Verify your identity and entitlement to products or Services when you contact us or access our Services;
• Register you for and provide you access to events and webcasts;
• Communicate with individuals, including via email, text message, social media, and/or telephone calls;
• Request that individuals complete surveys about our organization, organizations we partner with, and Services;
• For marketing and advertising purposes, including to market to you or offer you through email, phone, or text message information and updates on products or services we think that you may be interested in (where applicable, we may send you marketing messages if you have given us your consent to do so);
• Administer, improve, and personalize our Services, including by recognizing an individual and remembering their information when they return to our Services;
• Process payment for our Services;
• Facilitate customer benefits and services, including customer support;
• Identify and analyze how individuals use our Services;
• Conduct research and analytics on our customer and user base and our Services;
• Improve and customize our Services to address the needs and interests of our user base and other individuals we interact with;
• Test, enhance, update, and monitor the Services, or diagnose or fix technology problems;
• Help maintain the safety, security, and integrity of our property and Services, technology assets, and business;
• Enforce our Terms of Use to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third parties;
• Prevent, investigate, or provide notice of fraud or unlawful or criminal activity;
• Comply with contractual and legal obligations and requirements;
• Fulfill any other purpose for which you provide personal information; and
• For any other lawful purpose, or other purpose that you consent to.

Where you choose to contact us, we may need additional information to fulfill the request or respond to inquiries. We may provide you with additional privacy-related information where the scope of the inquiry/request and/or personal information we require fall outside the scope of this Privacy Notice. In that case, the additional privacy notice will govern how we may process the information provided at that time.

III. Our Disclosure of Personal Information

We may share personal information with third parties only as follows:

dreamif.ai entities: We may share personal information with other companies owned or controlled by dreamif.ai, and other companies under common ownership with dreamif.ai, which also includes our subsidiaries (i.e., any organization we own or control) or our ultimate holding company (i.e., any organization that owns or controls us) and any subsidiaries it owns, particularly when we collaborate in providing the Services.

Brokerage Organizations: If you use the Services through a real estate brokerage account or organization-managed account, we may share usage information and statistics with authorized administrators, subject to applicable confidentiality obligations.

Service Providers: We share personal information with third-party service providers who perform services on our behalf, including:

• Google (OAuth authentication and Gmail API access)
• OpenAI (AI processing for intelligent features - your data is not used for model training by default)
• Stripe (payment processing)
• Supabase (secure database and authentication infrastructure)
• Vercel (application hosting and delivery)
• Railway (backend hosting and infrastructure)
• PostHog (product analytics)
• RB2B (website visitor identification and marketing attribution)
• Axiom (logging and monitoring)

Human Review and Support Access: We may permit limited access to personal information by dreamif.ai personnel when reasonably necessary to provide support, troubleshoot issues, investigate fraud or abuse, maintain the internal operations of the Services, protect security, or comply with applicable law.

Customer Service and Communication Providers: We share personal information with third parties who assist us in providing our customer services and facilitating our communications with individuals that submit inquiries.

Business Transaction or Reorganization: We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose personal information to a third party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal information may also be disclosed in the event of insolvency, bankruptcy, or receivership.

Legal Obligations and Rights: We may disclose personal information to third parties, such as legal advisors and law enforcement:

• in connection with the establishment, exercise, or defense of legal claims;
• to comply with laws or to respond to lawful requests and legal process;
• to protect our rights and property and the rights and property of others, including to enforce our agreements and policies;
• to detect, suppress, or prevent fraud;
• to protect the health and safety of us and others; or
• as otherwise required by applicable law.

With Your Consent: We may disclose personal information about an individual to certain other third parties or publicly with their consent or direction. For example, with an individual's consent or direction we may post their testimonial on our Sites or service-related publications.

IV. Google API Services and Data Protection

Limited Use Compliance

dreamif.ai's use and transfer to any other app of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements. We will only use access to read, write, modify, or control Gmail message bodies (including attachments), metadata, headers, and settings to provide our email productivity features and will not transfer this Gmail data to others unless necessary to provide and improve these features, comply with applicable law, or as part of a merger, acquisition, or sale of assets. Human review of this data is limited to circumstances such as support, debugging, fraud or abuse investigation, security, legal compliance, or other permitted internal operations.

No Advertisement Use

We do not use Google Workspace or Gmail data for serving advertisements, do not sell Google Workspace or Gmail data, and do not use Google Workspace or Gmail data to train or improve generalized AI or machine learning models.

OAuth Scope

Depending on the features you choose to use, we may request Google account permissions for basic profile information, Gmail read and modify access, Gmail sending, Google Drive read access, Google Calendar access, and Google Contacts read access. You may revoke this access at any time through your Google Account settings.

V. AI and Machine Learning

AI Model Usage

The Service uses third-party AI models to create vector embeddings of your email content, enabling intelligent search and organization. We may also use AI models to generate email drafts and responses at your request.

No Training on Your Data

Your personal information and email content are never used to train or improve general AI models. AI providers process your data solely to deliver the requested Service features.

Data Minimization

We only send the minimum necessary data to AI providers to deliver requested features. Vector embeddings are stored in our secure database using enterprise-grade security technology.

Your Control

AI features are optional and can be disabled in your account settings. You maintain full control over any AI-generated content before it is sent.

VI. Control Over Your Information

You may control your information in the following ways:

Optional Permissions and Device Access. You may control optional permissions through your browser, device, and connected account settings. For example, you can manage microphone access for voice features, disconnect Google integrations, revoke Google permissions through your Google Account settings, or update a manually selected location preference within the Services.

Email Communications Preferences. You can stop receiving promotional email communications from us by clicking on the "unsubscribe" link provided in such communications. You may not opt-out of service-related communications (e.g., account verification, transactional communications, changes/updates to features of the Services, technical and security notices).

Modifying, Exporting, or Deleting Your Information. If you have questions about reviewing, correcting, exporting, or deleting your information, you can contact us directly at legal@dreamif.ai for privacy requests or support@dreamif.ai for general support. We may not be able to modify, export, or delete your information in all circumstances, and we may need to verify your identity before fulfilling a request.

Cookies: If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies; however, doing so may negatively impact your experience using the services, as some features and services may not work properly. You may also set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and performed certain functions with it.

VII. Data Retention

We retain your personal information only as long as necessary to provide the Services and fulfill the purposes described in this Privacy Notice. Specifically:

Active Accounts: We retain your Gmail data, vector embeddings, and account information while your account remains active.

Account Deletion: Upon account deletion, we immediately remove your access and begin deleting or deidentifying personal information associated with your account in accordance with our operational processes, legal obligations, and backup retention practices. Some records, backups, security logs, or anonymized operational records may persist for a limited period before deletion or overwrite.

Backups: Secure backups are maintained on a 30-day rolling basis and are purged automatically.

Operational and Security Records: We may retain security logs, audit trails, abuse-prevention records, and certain redacted or deidentified operational records for as long as reasonably necessary to protect the Services, investigate misuse, maintain internal operations, and comply with legal obligations.

Legal Obligations: We may retain certain information longer if required by law, legal proceedings, or regulatory requirements.

De-identified Data: We may retain de-identified, aggregated data for analytics and Service improvement purposes indefinitely.

To determine the appropriate duration of the retention of personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting and other applicable obligations.

Once retention of the personal data is no longer necessary for the purposes outlined above, we will either delete or deidentify the personal data or, if this is not possible (for example, because personal data has been stored in backup archives), then we will securely store the personal data and isolate it from further processing until deletion or deidentification is possible.

VIII. Children's Personal Information

dreamif.ai does not knowingly collect Personal Information from individuals under the age of 18 years (or the age of majority in your province or territory for Canadian users). Our Sites are not intended for use by anyone under the age of 18 years. If we become aware that an individual under the age of 18 years has provided us Personal Information, we will take steps to delete such Personal Information without undue delay.

IX. Canadian Privacy Rights

PIPEDA Compliance

For Canadian users, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. You have the right to:

• Access your personal information
• Request corrections to inaccurate data
• Withdraw consent for processing (subject to legal obligations)
• File complaints with the Privacy Commissioner of Canada

Quebec Residents

Additional rights under Law 25 include:

• Data portability in structured formats
• Opposition to automated decision-making
• Enhanced consent requirements
• Private right of action for privacy violations

To exercise these rights, contact our Privacy Officer at legal@dreamif.ai.

X. Embedded Links to Third-Party Websites or Services

Our Services may include links to third-party websites, plug-ins, and applications. Except where we post, link to, or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to, and we are not responsible for, any personal information practices of third-party websites and online services or the practices of other third parties. To learn about the personal information practices of third parties, please visit their respective privacy notices.

XI. Updates to This Privacy Notice

We may update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify individuals by email to their registered email address, by prominent posting on our Services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.

XII. Contact Us

If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please contact:

JCKY Projects, Inc. d/b/a dreamif.ai
185 Channel St., San Francisco, CA 94158, USA
Privacy requests: legal@dreamif.ai
General support: support@dreamif.ai
Privacy Officer (for Canadian inquiries): legal@dreamif.ai

XIII. State-Specific Disclosures

We may choose or be required by law to provide different or additional information relating to the processing of personal information about residents of certain countries, regions or states. Please refer below for additional information that may be applicable to you:

CALIFORNIA

Shine the Light Disclosure. The California "Shine the Light" law gives residents of California the right under certain circumstances to request information from us regarding the manner in which we share certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes.

CCPA/CPRA Rights. California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to:

• Know what personal information we collect, use, disclose, and sell
• Delete personal information (subject to exceptions)
• Opt-out of the sale or sharing of personal information (we do not sell personal information)
• Non-discrimination for exercising privacy rights
• Correct inaccurate personal information
• Limit use and disclosure of sensitive personal information

To exercise these rights, email legal@dreamif.ai.

NEVADA

Nevada residents may opt-out of the sale of personal information by emailing legal@dreamif.ai. We do not currently sell personal information.

VIRGINIA, COLORADO, CONNECTICUT, UTAH

Residents of these states have similar rights to access, delete, correct, and opt-out of certain processing of personal information under their respective privacy laws. To exercise these rights, email legal@dreamif.ai.