Privacy Policy
Overview
Pretend Group LLC ("Pretend," "we," "us," "our," or "Company") operates www.gopretend.com and related websites and applications (collectively, the "Services"). We are committed to protecting your privacy and ensuring you have a positive experience on our Services. This Privacy Policy explains our data collection, use, disclosure, and your privacy rights regarding our Services.
Please read this Privacy Policy carefully. By accessing or using Pretend's Services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with any part of this Privacy Policy, please do not use our Services.
This Privacy Policy should be read together with our Terms and Conditions, which contain important legal terms governing your use of our Services.
1. Information We Collect
1.1 Information You Provide Directly
Account Registration Information
Full name
Email address
Password (hashed and encrypted)
Company or organization name (if applicable)
Phone number (optional)
Billing address
Payment information (see Section 1.2)
Project and Service Information
Details about projects you create (project name, descriptions, specifications)
Files you upload (design files, video files, images, copy, briefs)
Feedback, revisions, and communications about your projects
Project delivery preferences and deadlines
Any other information you voluntarily provide about your content or creative direction
Communication Information
Messages sent through our Services (project communications, support requests)
Email correspondence with our team
Feedback forms and survey responses
Any voluntary communications you send us (including bug reports, feature requests, complaints)
Content You Submit
Comments, reviews, testimonials, or feedback posted to interactive areas
User-generated content you authorize us to display or use (as per our Terms & Conditions Section 4.10)
1.2 Payment and Billing Information
We do not directly store your credit card information. Payment processing is handled by third-party payment processors (such as Stripe, PayPal, or similar service). When you make a purchase:
We collect: billing name, billing address, email, and transaction history
Payment processors collect: full credit card information, expiration dates, CVV
We only receive confirmation that a transaction was processed (success/failure status, transaction ID, amount, date)
Your credit card data is never transmitted to or stored on our servers. We may store a tokenized reference for recurring billing purposes.
1.3 Information Collected Automatically
Usage Data
Pages or features you access and the time spent on them
Links you click
Search queries and filters you use
Projects you create, view, or modify
Features you use (e.g., file uploads, project templates)
Device actions (scrolling, clicking, keystrokes) within our Services
Device Information
Device type, operating system, and version
Browser type and version
Device identifier (e.g., IDFA, Android Advertising ID)
Mobile network information
Device settings and capabilities
Location Information
Approximate geolocation derived from IP address
We do NOT collect precise GPS location data unless you grant permission
Log Data
IP address
Referring/exit URLs
Pages accessed
Timestamps
Server logs and error logs
Click paths through our Services
1.4 Information from Cookies and Similar Technologies
Cookies
We use both session-based and persistent cookies to:
Maintain your login session
Remember your preferences
Understand how you use our Services
Improve our Services
Types of Cookies:
Essential cookies: Required for site functionality (login, security)
Performance/Analytics cookies: Track usage patterns (Google Analytics)
Marketing cookies: Track engagement for promotional purposes
Preference cookies: Remember your settings
Other Tracking Technologies
Web beacons (tracking pixels)
Local storage/session storage
Server logs
Similar technologies used to track browsing and interactions
Cookie Management: You can control cookies through your browser settings. Disabling essential cookies may limit functionality. [See Section 8: Your Privacy Rights and Choices for more information]
1.5 Information from Third Parties
Service Providers
Payment processors (transaction data)
Analytics providers (usage data)
Customer support platforms (support tickets)
Email service providers (email engagement)
Third-Party Integration
If you connect third-party accounts (e.g., Google Drive, Dropbox, social media), we may receive limited data to facilitate that integration
Other Sources
Public records or business information
Information provided by other users (e.g., if someone mentions you in feedback)
2. How We Use Your Information
We use the information we collect for the following purposes:
2.1 Service Delivery
Create and maintain your account
Process transactions and billing
Deliver creative services you request
Track project status and deliverables
Provide customer support and respond to inquiries
Send transactional emails (confirmations, receipts, project updates)
2.2 Service Improvement
Analyze usage patterns to improve our Services
Develop new features and functionality
Conduct research and analytics
Test new versions of our Services
Diagnose technical problems and maintain system security
2.3 Communications
Send service announcements and updates
Respond to your inquiries and support requests
Send periodic newsletters (if you subscribed)
Notify you of changes to our Terms or Privacy Policy
Send promotional content (only with your consent—see Section 2.4)
2.4 Marketing and Advertising
With your consent, we may use your information to:
Send promotional emails about our services
Display targeted advertisements on our Services and third-party platforms
Conduct market research and surveys
Create aggregated statistics about our user base
You can opt-out of marketing communications at any time (see Section 8: Your Rights and Choices)
2.5 Legal Compliance and Protection
Comply with legal obligations (tax, employment, regulatory)
Enforce our Terms and other agreements
Protect against fraud, security threats, and illegal activities
Respond to legal requests (subpoenas, court orders, government requests)
Establish, exercise, or defend legal claims
Comply with content removal requests (DMCA, defamation, etc.)
2.6 Legitimate Interests
We also use information based on our legitimate business interests, including:
Fraud detection and prevention
Account security
System maintenance and troubleshooting
Aggregated analytics for business decisions
Protecting our intellectual property rights
3. Legal Basis for Processing (GDPR Compliance)
If you are located in the European Union, United Kingdom, or similar jurisdictions with GDPR-equivalent laws, we process your personal data on one of these legal bases:
Contractual Necessity: Data needed to fulfill our services agreement with you (account creation, billing, project delivery)
Consent: Where you have explicitly consented (marketing emails, optional analytics)
Legal Obligation: Data we must collect to comply with laws (tax information, DMCA takedowns)
Legitimate Interests: Data necessary for our business operations that don't override your rights (fraud detection, analytics, service improvement)
Vital Interests: Data needed to protect health, safety, or life (in emergency situations only)
4. How We Share Your Information
4.1 We DO NOT Sell Your Personal Data
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
4.2 We Share Information With:
Service Providers
We share information with trusted third-party vendors who assist us in operating our Services, including:
Payment Processors: Stripe, PayPal, or similar (payment information)
Hosting Providers: Cloud infrastructure companies (server logs, usage data)
Analytics Providers: Google Analytics, Mixpanel, or similar (usage data)
Email Service Providers: Mailchimp, SendGrid, or similar (email, contact info)
Customer Support: Zendesk, Intercom, or similar (support inquiries)
Legal/Compliance: Lawyers, accountants, and compliance vendors (as needed)
All service providers are contractually obligated to:
Use your data only as necessary to provide services to us
Maintain appropriate security and confidentiality
Not use your data for their own marketing
Comply with applicable privacy laws
Business Transfers
In the event of merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before any such transfer becomes effective.
Legal Requirements
We may disclose your information if required by law, such as:
Court orders or subpoenas
Government or law enforcement requests
Regulatory investigations
Protection of our legal rights or public safety
With Your Consent
We may share information in other ways when you explicitly consent (e.g., if you authorize us to export data to a third-party platform).
4.3 Public Information
If you post content in public or interactive areas of our Services (comments, testimonials, reviews), that information may be publicly visible and may be shared broadly.
5. Your Project Data and Content
5.1 Your Creative Work Belongs to You
We understand your projects contain valuable creative assets and intellectual property. You retain full ownership of your original content. By submitting content to our Services, you:
Grant us a license to use your content solely for providing our Services to you (Section 4.10 of our Terms)
Authorize us to display work as case studies or portfolio examples (with your permission)
Understand that the content license continues after account closure (as per Terms Section 4.10)
5.2 Data Retention for Projects
Active Projects: Retained while your account is active
After Account Closure: Projects are retained for 30 days to allow data export
Backup Systems: Your data may be retained in backup systems for 30 days before permanent deletion
Legal Requirements: We may retain project data longer if required by law
Data Export: You can request an export of all your project data at any time. See Section 8 for instructions.
5.3 Project Files and Uploads
Files you upload to Pretend (design files, images, videos, documents):
Are stored securely on our servers
Are accessible only to you and our service team (unless you explicitly share)
May be processed by our service providers to deliver your services
Are deleted 30 days after you request deletion or your subscription ends
6. Data Security and Protection
6.1 Security Measures
We implement industry-standard security practices to protect your information:
Encryption: Data in transit is encrypted using TLS/SSL protocols (https)
Data at Rest: Sensitive data is encrypted in our databases
Access Controls: Only authorized employees can access personal data
Authentication: Password hashing and optional two-factor authentication
Regular Audits: Security assessments and vulnerability testing
Incident Response: Documented procedures for security breaches
6.2 Limitations
While we maintain reasonable security, no system is completely secure. We cannot guarantee:
Complete protection against all cyberattacks
Prevention of all unauthorized access
Security of data transmitted over public internet connections
We recommend:
Using strong, unique passwords
Not sharing account credentials
Using secure networks (not public WiFi for sensitive data)
Enabling two-factor authentication if available
6.3 Your Responsibilities
You are responsible for maintaining the confidentiality of your login credentials and notifying us immediately of any unauthorized access.
6.4 Data Breach Notification
In the event of a data breach involving your personal information, we will:
Notify you without unreasonable delay (generally within 30 days)
Notify relevant regulatory authorities as required by law
Provide details about the breach and steps you should take
Provide information about our investigation
7. Your Information and Specific User Types
7.1 Children (Under 13)
Our Services are not intended for children under 13. We do not knowingly collect information from children under 13. If we discover we've collected information from a child under 13, we will delete it immediately.
7.2 Minors (Ages 13-18)
If you are between 13 and 18:
You may use our Services if you have parental/guardian consent
Your parent or guardian can request access to or deletion of your information
We will not use your information for marketing without consent
We maintain additional privacy protections for minors
Parent/Guardian Rights: Parents/guardians can contact us (see Section 11) to request information about their minor's account or request deletion.
7.3 Enterprise and Business Accounts
If you use Pretend through an enterprise account:
Your company may have contractual rights to your data
Additional data processing terms may apply (see Data Processing Agreement)
Your company IT administrators may have access to account information
We may communicate with your company about your account usage
8. Your Privacy Rights and Choices
Your privacy rights depend on your location. We describe your rights under various privacy laws below.
8.1 Rights Available to All Users
Access Your Information
You have the right to request a copy of all personal data we hold about you. You can access some information through your account dashboard, or request a comprehensive data export.
Correct Inaccurate Information
You have the right to request that we correct inaccurate or incomplete information. You can update most information in your account settings.
Delete Your Information
You have the right to request deletion of your personal data. We will delete your information within 30 days, except:
Data we must retain for legal compliance
Backup copies (which may take up to 90 days to fully purge)
Aggregated, anonymized data
Data Portability
You have the right to receive your data in a structured, commonly-used, machine-readable format and to transmit it to another service.
Opt-Out of Marketing
You can opt-out of promotional emails at any time by:
Clicking "unsubscribe" in any marketing email
Changing preferences in your account settings
Contacting us at [admin@gopretend.com]
Do Not Track Signals
While we respect Do Not Track browser signals, we currently do not have the ability to disable tracking in response to these signals. You can control tracking through cookie settings and browser preferences.
8.2 Rights Under GDPR (EU, UK, and Similar Jurisdictions)
If you are located in the European Union, United Kingdom, Switzerland, or other jurisdictions with GDPR-equivalent laws, you have these additional rights:
Right to Know (Article 15)
You have the right to request what personal data we process and obtain a copy.
Right to Rectification (Article 16)
You have the right to correct inaccurate or incomplete information.
Right to Erasure / "Right to Be Forgotten" (Article 17)
You have the right to request deletion of your data, except where we have a legal obligation to retain it.
Right to Restrict Processing (Article 18)
You can request that we limit how we use your information while you contest accuracy or our legal basis for processing.
Right to Object (Article 21)
You have the right to object to:
Processing based on legitimate interests
Direct marketing (including profiling)
Automated decision-making
Processing for scientific/historical research
Right to Data Portability (Article 20)
You have the right to receive your data in a portable format and transmit it elsewhere.
Rights Related to Automated Decision-Making and Profiling (Article 22)
You have the right not to be subject to decisions based solely on automated processing that produces legal/significant effects. We do not currently engage in this type of processing, but if we do in the future, you have the right to human review.
Right to Lodge a Complaint
You have the right to lodge a complaint with your local data protection authority.
How to Exercise GDPR Rights:
Submit requests to [admin@gopretend.com] or contact our Data Protection Officer (see Section 11).
All requests will be processed within 30 days (extendable to 60-90 days for complex requests). We may request verification of your identity before fulfilling requests.
8.3 Rights Under CCPA (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you these rights:
Right to Know (CCPA § 1798.100)
You have the right to know what personal information we collect, use, share, and sell.
Right to Delete (CCPA § 1798.105)
You have the right to request deletion of personal information we've collected, except where we have a legal reason to retain it.
Right to Correct (CPRA § 1798.100(d))
You have the right to request correction of inaccurate personal information.
Right to Opt-Out of Sale or Sharing (CCPA § 1798.120)
You have the right to opt-out of the sale or sharing of your personal information. We do not sell or share your personal information, so this right is not applicable.
Right to Limit Use and Disclosure (CCPA § 1798.115)
You have the right to limit how we use sensitive personal information to what's necessary to provide our Services.
Right to Non-Discrimination (CCPA § 1798.125)
We will not discriminate against you for exercising your CCPA rights through:
Denying goods or services
Charging different prices
Providing different quality of service
Retaliating against you
(Note: We may offer financial incentives for data collection if permitted by law.)
Right to Opt-Out of Targeted Advertising (CPRA § 1798.120(b))
You can opt-out of targeted advertising by:
Using the "Global Opt-Out" preference signal in your browser
Contacting us at [admin@gopretend.com]
How to Submit CCPA Requests:
Email: [admin@gopretend.com]
Mail: See Section 11 for mailing address
We will verify your identity and respond within 45 days. You may designate an authorized agent to submit requests on your behalf.
California "Shine the Light" Law:
California residents may request information about our disclosure of personal information to third parties for direct marketing purposes.
8.4 Rights Under Other State Privacy Laws
Similar rights may apply under other state privacy laws (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, etc.). We comply with all applicable state privacy laws.
9. International Data Transfers
9.1 Location of Data Storage
Pretend Group LLC is based in California, USA. Our servers and data storage are located in the United States. By using our Services, you acknowledge that your information will be stored and processed in the United States.
9.2 GDPR Adequacy and SCCs
For users in the European Union, United Kingdom, or other jurisdictions with adequacy requirements:
The US is not deemed adequate under GDPR
We rely on Standard Contractual Clauses (SCCs) as the legal mechanism for transfers
Our Data Processing Agreement includes SCCs
We implement Supplementary Measures to protect your data (encryption, limited access, etc.)
Users have the right to request a copy of our SCCs. Contact [admin@gopretend.com] to request this document.
9.3 Lawful Transfer Mechanisms
Where applicable, we may use other lawful transfer mechanisms:
Binding Corporate Rules (BCRs)
Contractual Clauses in our Data Processing Agreement
Your explicit consent to the transfer
10. Cookies and Tracking
10.1 Cookie Types and Purposes
Essential Cookies (Always Active)
Session IDs for login persistence
CSRF protection tokens
Security verification
Required for basic functionality
Analytics Cookies
Google Analytics: Track page views, user behavior, traffic sources
Purpose: Understand how users interact with our Services
Retention: 14 months
Marketing/Advertising Cookies
Facebook Pixel: Retargeting for promotional purposes
Google Ads: Conversion tracking
Purpose: Show relevant ads and measure campaign effectiveness
Retention: Varies by provider (typically 90-180 days)
Preference Cookies
Remember your language, theme, and display preferences
Improve your user experience
10.2 Third-Party Cookies
Third parties may place cookies on your device through our Services:
Google (Analytics, Ads)
Facebook (Pixel)
You can review their privacy policies:
10.3 Cookie Management
Browser Controls
Most browsers allow you to:
View and delete cookies
Block certain cookies or all cookies
Set preferences for cookie acceptance
Disable Cookies:
Chrome: Settings > Privacy and security > Cookies
Safari: Preferences > Privacy > Cookies
Firefox: Preferences > Privacy > Cookies
Edge: Settings > Privacy > Cookies
Note: Disabling essential cookies may limit site functionality.
Third-Party Opt-Out:
Google Analytics Opt-Out: Google Analytics Opt-Out Browser Add-on
Network Advertising Initiative Opt-Out: NAI Opt-Out
Digital Advertising Alliance Opt-Out: DAA Opt-Out
10.4 Cookie Consent
On your first visit, we display a cookie consent banner. Your choices are:
Accept all cookies
Reject non-essential cookies
Customize cookie preferences
Your preference is saved in your browser. You can change settings anytime in [Account Settings > Privacy Preferences].
11. Contact Us / Data Protection Officer
11.1 General Privacy Inquiries
Email: [admin@gopretend.com]
Mailing Address:
Pretend Group LLC
630 Alta Vista Dr, Suite 106
Vista, CA 92084
United States
We will respond to inquiries within 10 business days.
11.2 Data Protection Officer (DPO)
For users in jurisdictions requiring a DPO, our Data Protection Officer can be reached at:
Email: [admin@gopretend.com]
11.3 Privacy Requests
To submit a privacy request (access, deletion, correction, portability):
Email: [admin@gopretend.com] with subject line "Privacy Request"
Mail:
Pretend Group LLC
630 Alta Vista Dr, Suite 106
Vista, CA 92084
Include:
Your name and email address
Account username (if applicable)
Type of request (access, delete, correct, port)
Specific information requested (if applicable)
11.4 Dispute Resolution
If you have a complaint about our privacy practices:
Contact Us First: Send details to [admin@gopretend.com]
Appeal Process: We will investigate and respond within 30 days
Regulatory Complaint: You may file a complaint with:
Your local data protection authority (for GDPR/UK GDPR users)
California Attorney General (for CCPA users)
Your state's attorney general
12. Changes to This Privacy Policy
12.1 Policy Updates
We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. Updates will be identified with a "Last Updated" date at the top of this policy.
12.2 Material Changes
For material changes that restrict your rights or increase our use of your information, we will:
Notify you via email (at the email address in your account) at least 30 days before the change takes effect
Require your explicit consent before the change becomes effective
Allow you to opt-out or cancel your account without penalty
12.3 Continued Use
Your continued use of our Services after changes become effective constitutes acceptance of the updated Privacy Policy.
13. Additional Information
13.1 California Residents - Additional Disclosures
Categories of Personal Information Collected
Identifiers (name, email, IP address, account number)
Commercial information (products/services purchased, transaction history)
Internet activity (browsing history, clicks, search history)
Geolocation data (approximate location from IP)
Professional information (company name, job title)
Biometric information (none collected)
Sensory information (project files, communications)
Inferences (preferences, interests derived from usage)
Sources of Information
Directly from you
Automatically from your interactions
From service providers
From public sources (if applicable)
Business Purposes for Use
Providing Services
Authentication and security
Service improvement
Marketing (with consent)
Legal compliance
Fraud prevention
Categories Shared with Third Parties
Service providers (payment, hosting, analytics, support)
Legal authorities (when required)
Business transfer recipients (merger/acquisition)
With consent (as specified by you)
Sensitive Personal Information
We do not intentionally collect "sensitive personal information" as defined by CPRA, except:
Payment card information (processed by third parties, not stored by us)
Health information (if you voluntarily provide it in project briefs, which we treat as project data)
Retention
We retain personal information for the duration of your account plus an additional 30-90 days, except where required by law.
13.2 International Users
Data Protection Authority
If you are in the EU/UK and wish to file a complaint:
Contact your national data protection authority
List of DPAs: EDPB Member Authorities
13.3 Compliance Certifications
[ ] SOC 2 Type II Certified
[ ] ISO 27001 Certified
[ ] GDPR Compliant
[ ] CCPA Compliant
[ ] Privacy Shield Compliant (if applicable)
14. Specific Processing Activities
14.1 Email Communications
What we collect: Email address, email engagement (opens, clicks)
How we use it: Transactional emails, product updates, marketing (with consent)
Legal basis: Contract, legitimate interest, consent
Retention: Active subscription + 90 days, then deleted
Third parties: Email service provider (Mailchimp/SendGrid/similar)
14.2 Analytics
What we collect: Page views, clicks, session duration, referrer, user device
How we use it: Improve Services, understand user behavior, measure feature performance
Legal basis: Legitimate interest, consent
Retention: 14 months aggregate, older data deleted
Third parties: Google Analytics
14.3 Payment Processing
What we collect: Name, billing address, transaction amount, transaction ID
How we use it: Process transactions, detect fraud, send receipts
Legal basis: Contract, legal obligation
Retention: 7 years (for tax/accounting purposes)
Third parties: Payment processor (Stripe/PayPal/similar)
Note: We never see credit card numbers; they go directly to processor.
14.4 Project Communications
What we collect: All messages, feedback, file uploads related to projects
How we use it: Deliver Services, provide project updates, improve Services
Legal basis: Contract, legitimate interest
Retention: Duration of project + 90 days after project closure
Third parties: None (unless you explicitly authorize integration with third-party services)
14.5 Customer Support Interactions
What we collect: Support tickets, emails, chat logs, account information
How we use it: Respond to inquiries, resolve issues, improve support
Legal basis: Contract, legitimate interest
Retention: 3 years after resolution (for dispute resolution)
Third parties: Support platform provider (Zendesk/Intercom/similar)
15. Glossary
"Anonymized Data" – Data that cannot be linked to an identifiable individual, even when combined with other data.
"Cookie" – A small text file stored on your device that contains information about your browsing activity.
"Data Controller" – The entity that determines the purposes and means of data processing. For Pretend, this is Pretend Group LLC.
"Data Processor" – An entity that processes data on behalf of the controller (e.g., hosting provider, payment processor).
"Data Subject" – The individual to whom personal data relates.
"GDPR" – General Data Protection Regulation; EU privacy law.
"Personal Data" – Any information relating to an identified or identifiable individual.
"Processing" – Any operation performed on personal data (collection, use, storage, deletion, etc.).
"Sensitive Personal Information" – Data about race, ethnicity, religious beliefs, genetic information, biometric data, health, sex life, etc. (under GDPR and CPRA).
"Third Party" – Any entity other than you and Pretend.
Appendix A: Data Processing Agreement (DPA)
For users in the EU/UK or those subject to GDPR, a Data Processing Agreement is available upon request. This document:
Outlines our role as a Data Processor (if applicable) or Data Controller
Includes Standard Contractual Clauses (SCCs)
Details sub-processors and data security measures
Specifies data subject rights and compliance obligations
To Request DPA: Contact [admin@gopretend.com]
Appendix B: Cookie Consent Form
Presented on first visit. Users can:
Accept all
Reject non-essential
Customize preferences

