Privacy Policy

Last updated 31 March 2026

Last updated 31 March 2026

Overview

Pretend Group LLC ("Pretend," "we," "us," "our," or "Company") operates www.gopretend.com and related websites and applications (collectively, the "Services"). We are committed to protecting your privacy and ensuring you have a positive experience on our Services. This Privacy Policy explains our data collection, use, disclosure, and your privacy rights regarding our Services.

Please read this Privacy Policy carefully. By accessing or using Pretend's Services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with any part of this Privacy Policy, please do not use our Services.

This Privacy Policy should be read together with our Terms and Conditions, which contain important legal terms governing your use of our Services.

1. Information We Collect

1.1 Information You Provide Directly

Account Registration Information

  • Full name

  • Email address

  • Password (hashed and encrypted)

  • Company or organization name (if applicable)

  • Phone number (optional)

  • Billing address

  • Payment information (see Section 1.2)

Project and Service Information

  • Details about projects you create (project name, descriptions, specifications)

  • Files you upload (design files, video files, images, copy, briefs)

  • Feedback, revisions, and communications about your projects

  • Project delivery preferences and deadlines

  • Any other information you voluntarily provide about your content or creative direction

Communication Information

  • Messages sent through our Services (project communications, support requests)

  • Email correspondence with our team

  • Feedback forms and survey responses

  • Any voluntary communications you send us (including bug reports, feature requests, complaints)

Content You Submit

  • Comments, reviews, testimonials, or feedback posted to interactive areas

  • User-generated content you authorize us to display or use (as per our Terms & Conditions Section 4.10)

1.2 Payment and Billing Information

We do not directly store your credit card information. Payment processing is handled by third-party payment processors (such as Stripe, PayPal, or similar service). When you make a purchase:

  • We collect: billing name, billing address, email, and transaction history

  • Payment processors collect: full credit card information, expiration dates, CVV

  • We only receive confirmation that a transaction was processed (success/failure status, transaction ID, amount, date)

Your credit card data is never transmitted to or stored on our servers. We may store a tokenized reference for recurring billing purposes.

1.3 Information Collected Automatically

Usage Data

  • Pages or features you access and the time spent on them

  • Links you click

  • Search queries and filters you use

  • Projects you create, view, or modify

  • Features you use (e.g., file uploads, project templates)

  • Device actions (scrolling, clicking, keystrokes) within our Services

Device Information

  • Device type, operating system, and version

  • Browser type and version

  • Device identifier (e.g., IDFA, Android Advertising ID)

  • Mobile network information

  • Device settings and capabilities

Location Information

  • Approximate geolocation derived from IP address

  • We do NOT collect precise GPS location data unless you grant permission

Log Data

  • IP address

  • Referring/exit URLs

  • Pages accessed

  • Timestamps

  • Server logs and error logs

  • Click paths through our Services

1.4 Information from Cookies and Similar Technologies

Cookies

We use both session-based and persistent cookies to:

  • Maintain your login session

  • Remember your preferences

  • Understand how you use our Services

  • Improve our Services

Types of Cookies:

  • Essential cookies: Required for site functionality (login, security)

  • Performance/Analytics cookies: Track usage patterns (Google Analytics)

  • Marketing cookies: Track engagement for promotional purposes

  • Preference cookies: Remember your settings

Other Tracking Technologies

  • Web beacons (tracking pixels)

  • Local storage/session storage

  • Server logs

  • Similar technologies used to track browsing and interactions

Cookie Management: You can control cookies through your browser settings. Disabling essential cookies may limit functionality. [See Section 8: Your Privacy Rights and Choices for more information]

1.5 Information from Third Parties

Service Providers

  • Payment processors (transaction data)

  • Analytics providers (usage data)

  • Customer support platforms (support tickets)

  • Email service providers (email engagement)

Third-Party Integration

  • If you connect third-party accounts (e.g., Google Drive, Dropbox, social media), we may receive limited data to facilitate that integration

Other Sources

  • Public records or business information

  • Information provided by other users (e.g., if someone mentions you in feedback)

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Service Delivery

  • Create and maintain your account

  • Process transactions and billing

  • Deliver creative services you request

  • Track project status and deliverables

  • Provide customer support and respond to inquiries

  • Send transactional emails (confirmations, receipts, project updates)

2.2 Service Improvement

  • Analyze usage patterns to improve our Services

  • Develop new features and functionality

  • Conduct research and analytics

  • Test new versions of our Services

  • Diagnose technical problems and maintain system security

2.3 Communications

  • Send service announcements and updates

  • Respond to your inquiries and support requests

  • Send periodic newsletters (if you subscribed)

  • Notify you of changes to our Terms or Privacy Policy

  • Send promotional content (only with your consent—see Section 2.4)

2.4 Marketing and Advertising

  • With your consent, we may use your information to:

  • Send promotional emails about our services

  • Display targeted advertisements on our Services and third-party platforms

  • Conduct market research and surveys

  • Create aggregated statistics about our user base

You can opt-out of marketing communications at any time (see Section 8: Your Rights and Choices)

2.5 Legal Compliance and Protection

  • Comply with legal obligations (tax, employment, regulatory)

  • Enforce our Terms and other agreements

  • Protect against fraud, security threats, and illegal activities

  • Respond to legal requests (subpoenas, court orders, government requests)

  • Establish, exercise, or defend legal claims

  • Comply with content removal requests (DMCA, defamation, etc.)

2.6 Legitimate Interests

We also use information based on our legitimate business interests, including:

  • Fraud detection and prevention

  • Account security

  • System maintenance and troubleshooting

  • Aggregated analytics for business decisions

  • Protecting our intellectual property rights

3. Legal Basis for Processing (GDPR Compliance)

If you are located in the European Union, United Kingdom, or similar jurisdictions with GDPR-equivalent laws, we process your personal data on one of these legal bases:

  1. Contractual Necessity: Data needed to fulfill our services agreement with you (account creation, billing, project delivery)

  2. Consent: Where you have explicitly consented (marketing emails, optional analytics)

  3. Legal Obligation: Data we must collect to comply with laws (tax information, DMCA takedowns)

  4. Legitimate Interests: Data necessary for our business operations that don't override your rights (fraud detection, analytics, service improvement)

  5. Vital Interests: Data needed to protect health, safety, or life (in emergency situations only)

4. How We Share Your Information

4.1 We DO NOT Sell Your Personal Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 We Share Information With:

Service Providers

We share information with trusted third-party vendors who assist us in operating our Services, including:

  • Payment Processors: Stripe, PayPal, or similar (payment information)

  • Hosting Providers: Cloud infrastructure companies (server logs, usage data)

  • Analytics Providers: Google Analytics, Mixpanel, or similar (usage data)

  • Email Service Providers: Mailchimp, SendGrid, or similar (email, contact info)

  • Customer Support: Zendesk, Intercom, or similar (support inquiries)

  • Legal/Compliance: Lawyers, accountants, and compliance vendors (as needed)

All service providers are contractually obligated to:

  • Use your data only as necessary to provide services to us

  • Maintain appropriate security and confidentiality

  • Not use your data for their own marketing

  • Comply with applicable privacy laws

Business Transfers

In the event of merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before any such transfer becomes effective.

Legal Requirements

We may disclose your information if required by law, such as:

  • Court orders or subpoenas

  • Government or law enforcement requests

  • Regulatory investigations

  • Protection of our legal rights or public safety

With Your Consent

We may share information in other ways when you explicitly consent (e.g., if you authorize us to export data to a third-party platform).

4.3 Public Information

If you post content in public or interactive areas of our Services (comments, testimonials, reviews), that information may be publicly visible and may be shared broadly.

5. Your Project Data and Content

5.1 Your Creative Work Belongs to You

We understand your projects contain valuable creative assets and intellectual property. You retain full ownership of your original content. By submitting content to our Services, you:

  • Grant us a license to use your content solely for providing our Services to you (Section 4.10 of our Terms)

  • Authorize us to display work as case studies or portfolio examples (with your permission)

  • Understand that the content license continues after account closure (as per Terms Section 4.10)

5.2 Data Retention for Projects

  • Active Projects: Retained while your account is active

  • After Account Closure: Projects are retained for  30 days to allow data export

  • Backup Systems: Your data may be retained in backup systems for 30 days before permanent deletion

  • Legal Requirements: We may retain project data longer if required by law

Data Export: You can request an export of all your project data at any time. See Section 8 for instructions.

5.3 Project Files and Uploads

Files you upload to Pretend (design files, images, videos, documents):

  • Are stored securely on our servers

  • Are accessible only to you and our service team (unless you explicitly share)

  • May be processed by our service providers to deliver your services

  • Are deleted 30 days after you request deletion or your subscription ends

6. Data Security and Protection

6.1 Security Measures

We implement industry-standard security practices to protect your information:

  • Encryption: Data in transit is encrypted using TLS/SSL protocols (https)

  • Data at Rest: Sensitive data is encrypted in our databases

  • Access Controls: Only authorized employees can access personal data

  • Authentication: Password hashing and optional two-factor authentication

  • Regular Audits: Security assessments and vulnerability testing

  • Incident Response: Documented procedures for security breaches

6.2 Limitations

While we maintain reasonable security, no system is completely secure. We cannot guarantee:

  • Complete protection against all cyberattacks

  • Prevention of all unauthorized access

  • Security of data transmitted over public internet connections

We recommend:

  • Using strong, unique passwords

  • Not sharing account credentials

  • Using secure networks (not public WiFi for sensitive data)

  • Enabling two-factor authentication if available

6.3 Your Responsibilities

You are responsible for maintaining the confidentiality of your login credentials and notifying us immediately of any unauthorized access.

6.4 Data Breach Notification

In the event of a data breach involving your personal information, we will:

  • Notify you without unreasonable delay (generally within 30 days)

  • Notify relevant regulatory authorities as required by law

  • Provide details about the breach and steps you should take

  • Provide information about our investigation

7. Your Information and Specific User Types

7.1 Children (Under 13)

Our Services are not intended for children under 13. We do not knowingly collect information from children under 13. If we discover we've collected information from a child under 13, we will delete it immediately.

7.2 Minors (Ages 13-18)

If you are between 13 and 18:

  • You may use our Services if you have parental/guardian consent

  • Your parent or guardian can request access to or deletion of your information

  • We will not use your information for marketing without consent

  • We maintain additional privacy protections for minors

Parent/Guardian Rights: Parents/guardians can contact us (see Section 11) to request information about their minor's account or request deletion.

7.3 Enterprise and Business Accounts

If you use Pretend through an enterprise account:

  • Your company may have contractual rights to your data

  • Additional data processing terms may apply (see Data Processing Agreement)

  • Your company IT administrators may have access to account information

  • We may communicate with your company about your account usage

8. Your Privacy Rights and Choices

Your privacy rights depend on your location. We describe your rights under various privacy laws below.

8.1 Rights Available to All Users

Access Your Information

You have the right to request a copy of all personal data we hold about you. You can access some information through your account dashboard, or request a comprehensive data export.

Correct Inaccurate Information

You have the right to request that we correct inaccurate or incomplete information. You can update most information in your account settings.

Delete Your Information

You have the right to request deletion of your personal data. We will delete your information within 30 days, except:

  • Data we must retain for legal compliance

  • Backup copies (which may take up to 90 days to fully purge)

  • Aggregated, anonymized data

Data Portability

You have the right to receive your data in a structured, commonly-used, machine-readable format and to transmit it to another service.

Opt-Out of Marketing

You can opt-out of promotional emails at any time by:

  • Clicking "unsubscribe" in any marketing email

  • Changing preferences in your account settings

  • Contacting us at [admin@gopretend.com]

Do Not Track Signals

While we respect Do Not Track browser signals, we currently do not have the ability to disable tracking in response to these signals. You can control tracking through cookie settings and browser preferences.

8.2 Rights Under GDPR (EU, UK, and Similar Jurisdictions)

If you are located in the European Union, United Kingdom, Switzerland, or other jurisdictions with GDPR-equivalent laws, you have these additional rights:

Right to Know (Article 15)

You have the right to request what personal data we process and obtain a copy.

Right to Rectification (Article 16)

You have the right to correct inaccurate or incomplete information.

Right to Erasure / "Right to Be Forgotten" (Article 17)

You have the right to request deletion of your data, except where we have a legal obligation to retain it.

Right to Restrict Processing (Article 18)

You can request that we limit how we use your information while you contest accuracy or our legal basis for processing.

Right to Object (Article 21)

You have the right to object to:

  • Processing based on legitimate interests

  • Direct marketing (including profiling)

  • Automated decision-making

  • Processing for scientific/historical research

Right to Data Portability (Article 20)

You have the right to receive your data in a portable format and transmit it elsewhere.

Rights Related to Automated Decision-Making and Profiling (Article 22)

You have the right not to be subject to decisions based solely on automated processing that produces legal/significant effects. We do not currently engage in this type of processing, but if we do in the future, you have the right to human review.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority.

How to Exercise GDPR Rights:

Submit requests to [admin@gopretend.com] or contact our Data Protection Officer (see Section 11).

All requests will be processed within 30 days (extendable to 60-90 days for complex requests). We may request verification of your identity before fulfilling requests.

8.3 Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you these rights:

Right to Know (CCPA § 1798.100)

You have the right to know what personal information we collect, use, share, and sell.

Right to Delete (CCPA § 1798.105)

You have the right to request deletion of personal information we've collected, except where we have a legal reason to retain it.

Right to Correct (CPRA § 1798.100(d))

You have the right to request correction of inaccurate personal information.

Right to Opt-Out of Sale or Sharing (CCPA § 1798.120)

You have the right to opt-out of the sale or sharing of your personal information. We do not sell or share your personal information, so this right is not applicable.

Right to Limit Use and Disclosure (CCPA § 1798.115)

You have the right to limit how we use sensitive personal information to what's necessary to provide our Services.

Right to Non-Discrimination (CCPA § 1798.125)

We will not discriminate against you for exercising your CCPA rights through:

  • Denying goods or services

  • Charging different prices

  • Providing different quality of service

  • Retaliating against you

(Note: We may offer financial incentives for data collection if permitted by law.)

Right to Opt-Out of Targeted Advertising (CPRA § 1798.120(b))

You can opt-out of targeted advertising by:

  • Using the "Global Opt-Out" preference signal in your browser

  • Contacting us at [admin@gopretend.com]

How to Submit CCPA Requests:

  • Email: [admin@gopretend.com]

  • Mail: See Section 11 for mailing address

We will verify your identity and respond within 45 days. You may designate an authorized agent to submit requests on your behalf.

California "Shine the Light" Law:

California residents may request information about our disclosure of personal information to third parties for direct marketing purposes.

8.4 Rights Under Other State Privacy Laws

Similar rights may apply under other state privacy laws (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, etc.). We comply with all applicable state privacy laws.

9. International Data Transfers

9.1 Location of Data Storage

Pretend Group LLC is based in California, USA. Our servers and data storage are located in the United States. By using our Services, you acknowledge that your information will be stored and processed in the United States.

9.2 GDPR Adequacy and SCCs

For users in the European Union, United Kingdom, or other jurisdictions with adequacy requirements:

  • The US is not deemed adequate under GDPR

  • We rely on Standard Contractual Clauses (SCCs) as the legal mechanism for transfers

  • Our Data Processing Agreement includes SCCs

  • We implement Supplementary Measures to protect your data (encryption, limited access, etc.)

Users have the right to request a copy of our SCCs. Contact [admin@gopretend.com] to request this document.

9.3 Lawful Transfer Mechanisms

Where applicable, we may use other lawful transfer mechanisms:

  • Binding Corporate Rules (BCRs)

  • Contractual Clauses in our Data Processing Agreement

  • Your explicit consent to the transfer

10. Cookies and Tracking

10.1 Cookie Types and Purposes

Essential Cookies (Always Active)

  • Session IDs for login persistence

  • CSRF protection tokens

  • Security verification

  • Required for basic functionality

Analytics Cookies

  • Google Analytics: Track page views, user behavior, traffic sources

  • Purpose: Understand how users interact with our Services

  • Retention: 14 months

Marketing/Advertising Cookies

  • Facebook Pixel: Retargeting for promotional purposes

  • Google Ads: Conversion tracking

  • Purpose: Show relevant ads and measure campaign effectiveness

  • Retention: Varies by provider (typically 90-180 days)

Preference Cookies

  • Remember your language, theme, and display preferences

  • Improve your user experience

10.2 Third-Party Cookies

Third parties may place cookies on your device through our Services:

  • Google (Analytics, Ads)

  • Facebook (Pixel)

You can review their privacy policies:

10.3 Cookie Management

Browser Controls

Most browsers allow you to:

  • View and delete cookies

  • Block certain cookies or all cookies

  • Set preferences for cookie acceptance

Disable Cookies:

  • Chrome: Settings > Privacy and security > Cookies

  • Safari: Preferences > Privacy > Cookies

  • Firefox: Preferences > Privacy > Cookies

  • Edge: Settings > Privacy > Cookies

Note: Disabling essential cookies may limit site functionality.

Third-Party Opt-Out:

10.4 Cookie Consent

On your first visit, we display a cookie consent banner. Your choices are:

  • Accept all cookies

  • Reject non-essential cookies

  • Customize cookie preferences

Your preference is saved in your browser. You can change settings anytime in [Account Settings > Privacy Preferences].

11. Contact Us / Data Protection Officer

11.1 General Privacy Inquiries

Email: [admin@gopretend.com]

Mailing Address:

Pretend Group LLC

630 Alta Vista Dr, Suite 106

Vista, CA 92084

United States

We will respond to inquiries within 10 business days.

11.2 Data Protection Officer (DPO)

For users in jurisdictions requiring a DPO, our Data Protection Officer can be reached at:

Email: [admin@gopretend.com]

11.3 Privacy Requests

To submit a privacy request (access, deletion, correction, portability):

Email: [admin@gopretend.com] with subject line "Privacy Request"

Mail:

Pretend Group LLC

630 Alta Vista Dr, Suite 106

Vista, CA 92084

Include:

  • Your name and email address

  • Account username (if applicable)

  • Type of request (access, delete, correct, port)

  • Specific information requested (if applicable)

11.4 Dispute Resolution

If you have a complaint about our privacy practices:

  1. Contact Us First: Send details to [admin@gopretend.com]

  2. Appeal Process: We will investigate and respond within 30 days

  3. Regulatory Complaint: You may file a complaint with:

  • Your local data protection authority (for GDPR/UK GDPR users)

  • California Attorney General (for CCPA users)

  • Your state's attorney general

12. Changes to This Privacy Policy

12.1 Policy Updates

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. Updates will be identified with a "Last Updated" date at the top of this policy.

12.2 Material Changes

For material changes that restrict your rights or increase our use of your information, we will:

  • Notify you via email (at the email address in your account) at least 30 days before the change takes effect

  • Require your explicit consent before the change becomes effective

  • Allow you to opt-out or cancel your account without penalty

12.3 Continued Use

Your continued use of our Services after changes become effective constitutes acceptance of the updated Privacy Policy.

13. Additional Information

13.1 California Residents - Additional Disclosures

Categories of Personal Information Collected

  • Identifiers (name, email, IP address, account number)

  • Commercial information (products/services purchased, transaction history)

  • Internet activity (browsing history, clicks, search history)

  • Geolocation data (approximate location from IP)

  • Professional information (company name, job title)

  • Biometric information (none collected)

  • Sensory information (project files, communications)

  • Inferences (preferences, interests derived from usage)

Sources of Information

  • Directly from you

  • Automatically from your interactions

  • From service providers

  • From public sources (if applicable)

Business Purposes for Use

  • Providing Services

  • Authentication and security

  • Service improvement

  • Marketing (with consent)

  • Legal compliance

  • Fraud prevention

Categories Shared with Third Parties

  • Service providers (payment, hosting, analytics, support)

  • Legal authorities (when required)

  • Business transfer recipients (merger/acquisition)

  • With consent (as specified by you)

Sensitive Personal Information

We do not intentionally collect "sensitive personal information" as defined by CPRA, except:

  • Payment card information (processed by third parties, not stored by us)

  • Health information (if you voluntarily provide it in project briefs, which we treat as project data)

Retention

We retain personal information for the duration of your account plus an additional 30-90 days, except where required by law.

13.2 International Users

Data Protection Authority

If you are in the EU/UK and wish to file a complaint:

13.3 Compliance Certifications

  • [ ] SOC 2 Type II Certified

  • [ ] ISO 27001 Certified

  • [ ] GDPR Compliant

  • [ ] CCPA Compliant

  • [ ] Privacy Shield Compliant (if applicable)

14. Specific Processing Activities

14.1 Email Communications

What we collect: Email address, email engagement (opens, clicks)

How we use it: Transactional emails, product updates, marketing (with consent)

Legal basis: Contract, legitimate interest, consent

Retention: Active subscription + 90 days, then deleted

Third parties: Email service provider (Mailchimp/SendGrid/similar)

14.2 Analytics

What we collect: Page views, clicks, session duration, referrer, user device

How we use it: Improve Services, understand user behavior, measure feature performance

Legal basis: Legitimate interest, consent

Retention: 14 months aggregate, older data deleted

Third parties: Google Analytics

14.3 Payment Processing

What we collect: Name, billing address, transaction amount, transaction ID

How we use it: Process transactions, detect fraud, send receipts

Legal basis: Contract, legal obligation

Retention: 7 years (for tax/accounting purposes)

Third parties: Payment processor (Stripe/PayPal/similar)

Note: We never see credit card numbers; they go directly to processor.

14.4 Project Communications

What we collect: All messages, feedback, file uploads related to projects

How we use it: Deliver Services, provide project updates, improve Services

Legal basis: Contract, legitimate interest

Retention: Duration of project + 90 days after project closure

Third parties: None (unless you explicitly authorize integration with third-party services)

14.5 Customer Support Interactions

What we collect: Support tickets, emails, chat logs, account information

How we use it: Respond to inquiries, resolve issues, improve support

Legal basis: Contract, legitimate interest

Retention: 3 years after resolution (for dispute resolution)

Third parties: Support platform provider (Zendesk/Intercom/similar)

15. Glossary

"Anonymized Data" – Data that cannot be linked to an identifiable individual, even when combined with other data.

"Cookie" – A small text file stored on your device that contains information about your browsing activity.

"Data Controller" – The entity that determines the purposes and means of data processing. For Pretend, this is Pretend Group LLC.

"Data Processor" – An entity that processes data on behalf of the controller (e.g., hosting provider, payment processor).

"Data Subject" – The individual to whom personal data relates.

"GDPR" – General Data Protection Regulation; EU privacy law.

"Personal Data" – Any information relating to an identified or identifiable individual.

"Processing" – Any operation performed on personal data (collection, use, storage, deletion, etc.).

"Sensitive Personal Information" – Data about race, ethnicity, religious beliefs, genetic information, biometric data, health, sex life, etc. (under GDPR and CPRA).

"Third Party" – Any entity other than you and Pretend.

Appendix A: Data Processing Agreement (DPA)

For users in the EU/UK or those subject to GDPR, a Data Processing Agreement is available upon request. This document:

  • Outlines our role as a Data Processor (if applicable) or Data Controller

  • Includes Standard Contractual Clauses (SCCs)

  • Details sub-processors and data security measures

  • Specifies data subject rights and compliance obligations

To Request DPA: Contact [admin@gopretend.com]

Appendix B: Cookie Consent Form

Presented on first visit. Users can:

  • Accept all

  • Reject non-essential

  • Customize preferences

End of Privacy Policy

Credit Calculator
Estimate your monthly request cost

Estimator only. You're not placing an order. Buy credits first, then submit requests in the Queue.