YOUR CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have the right to:

Right to Know: Request disclosure of personal information we've collected about you in the past 12 months, including:

   - Categories of information collected

   - Sources of information

   - Business purpose for collection

   - Categories of third parties we share with

   - Specific pieces of information collected

Right to Delete: Request deletion of your personal information (with certain exceptions)

Right to Opt-Out: We DO NOT sell your personal information. If this changes, you will have the right to opt-out.

Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

Data Retention

- Active member data: Retained for duration of membership plus 1 year

- Inactive/former member data: Retained for 2 years, then deleted unless legally required

- Financial records: Retained for 7 years per tax law requirements

- Email communications: Retained for 3 years

- Prayer requests/community posts: Deleted upon request or account closure

Third-Party Service Providers

Circle (Community Platform)

- Purpose: Community hosting, member management

- Data shared: Name, email, profile information, activity data

- Their privacy policy: [link to Circle's privacy policy]

Stripe (Payment Processing)

- Purpose: Processing membership payments

- Data shared: Payment information, email, name

- Their privacy policy: https://stripe.com/privacy

Website Hosting Squarespace

- Purpose: Website operation

- Data shared: All website data

- Their privacy policy: https://www.squarespace.com/privacy

Email Service Provider Airtable

- Purpose: Community communications

- Data shared: Email, name, preferences

- Their privacy policy: https://www.airtable.com/company/privacy

We conduct due diligence on all service providers and require them to protect your data.

Children's Privacy

DreamScripted is not intended for individuals under 18. We do not knowingly collect

information from minors. If we discover we've collected information from someone under

18, we will delete it immediately. Parents who believe their child has provided

information should contact us at connect@dreamscripted.com

Do Not Track Signals Our website does not currently respond to "Do Not Track" browser signals. We use cookies and analytics as described in this policy regardless of DNT settings.

Cookies and Tracking Technologies We use the following types of cookies: Essential Cookies - Purpose: Website functionality, login sessions - Duration: Session-based or up to 1 year - Cannot be disabled without affecting site functionality Analytics Cookies - Provider: [Google Analytics, etc.] - Purpose: Understanding site usage, improving experience - Duration: Up to 2 years - Can be disabled in browser settings Third-Party Cookies - Circle platform cookies for community features - Stripe cookies for payment processing

Data Breach Response In the event of a data breach affecting your personal information, we will: - Notify affected members within 72 hours of discovery - Provide details about what information was compromised - Offer guidance on protective measures - Report to appropriate authorities as required by law

User-Generated Content Content You Post: - You retain ownership of prayer requests, testimonies, and posts you share - By posting, you grant DreamScripted a non-exclusive license to display, store, and moderate your content - Other members may see your posts according to community privacy settings - You can request deletion of your posts at any time Content Moderation: - We reserve the right to remove content violating community guidelines - Deleted content is permanently removed from our servers within 30 days - Some content may be retained for legal compliance

Our Privacy Commitment Privacy is built into DreamScripted from the ground up: - We collect only information necessary for community functionality - We don't sell or rent your data to third parties - We give you control over your information - We're transparent about our practices - We continuously review and improve our privacy protections

To exercise these rights, contact us at connect@dreamscripted.com.

We will respond within 45 days. You may designate an authorized agent to make requests

on your behalf.