In order to better provide you with products and services offered, the Company may collect personally identifiable information, such as your:

• Email address
• We also collect and store user account information (such as username and license status), payment and transaction information, conversation history with AI characters, and basic usage data.

When you make a purchase, we collect billing information which is securely processed by our payment processor, Stripe. We do not store full credit card details on our servers. Payment information is handled in accordance with Stripe’s privacy and security standards (PCI DSS compliant).

We do not collect any personal information about you unless you voluntarily provide it to us. However, you may be required to provide certain personal information to us when you elect to use certain products or services. These may include: (a) registering for an account; (b) entering a sweepstakes or contest sponsored by us or one of our partners; (c) signing up for special offers from selected third parties; (d) sending us an email message; (e) submitting your credit card or other payment information when ordering and purchasing products and services. To wit, we will use your information for, but not limited to, communicating with you in relation to services and/or products you have requested from us. We may also gather additional personal or non-personal information in the future.

The Company collects and uses your personal information in the following ways:

• to operate and deliver the services you have requested.
• to provide you with information, products, or services that you request from us.
• to provide you with notices about your account.
• to carry out the Company's obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• to notify you about changes to our https://heypumpkin.net Hey Pumpkin or any products or services we offer or provide through it.
• to maintain the security of the Company's services and prevent fraud or misuse.
• to comply with applicable laws, regulations, legal processes, or governmental requests.
• To allow users to create accounts and interact with AI characters, process subscription payments and licenses via Stripe, manage user access and license status, send receipts, and operate and improve the Hey Pumpkin service.
• in any other way we may describe when you provide the information.
• for any other purpose with your consent.

The Company may also use your personally identifiable information to inform you of other products or services available from the Company and its affiliates.

The Company does not sell, rent, or lease its customer lists to third parties.

The Company does not sell biometric data to third parties.

The Company may share data with trusted partners to help perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to the Company, and they are required to maintain the confidentiality of your information.

The Company may disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on the Company or the site; (b) protect and defend the rights or property of the Company; and/or (c) act under exigent circumstances to protect the personal safety of users of the Company, or the public.

In connection with any personal information we may share to a third party for a business purpose, you have the right to know:

You have the right under the California Consumer Privacy Act of 2018 (CCPA) and certain other privacy and data protection laws, as applicable, to opt out of the sale or disclosure of your personal information. If you exercise your right to opt out of the sale or disclosure of your personal information, we will refrain from selling or disclosing your personal information, unless you subsequently provide express authorization for the sale or disclosure of your personal information.

The Company secures your personal information from unauthorized access, use, or disclosure. The Company uses the following methods for this purpose:

• We take reasonable measures to protect your personal information, including using secure socket layer (SSL) technology to encrypt data in transit and working with Stripe, a PCI DSS compliant payment processor, to securely handle payment information.

We strive to take appropriate security measures to protect against unauthorized access to or alteration of your personal information. Unfortunately, no data transmission over the Internet or any wireless network can be guaranteed to be 100 percent secure. As a result, while we strive to protect your personal information, you acknowledge that: (a) there are security and privacy limitations inherent to the Internet that are beyond our control; and (b) the security, integrity, and privacy of any and all information and data exchanged between you and us through this site cannot be guaranteed.

Hey Pumpkin will never ask you for your password, payment information (such as credit card details), or other sensitive account information via email, phone call, text message, or unsolicited communication.

All legitimate transactions and account updates occur exclusively through the secure checkout process on our website (heypumpkin.net) or within the authenticated application. Payments are processed securely by Stripe — we never store full credit card details on our servers.

Protect yourself from phishing and fraud:

• Always verify the URL starts with https://heypumpkin.net and look for the padlock icon in your browser.
• Do not click links or download attachments from suspicious emails claiming to be from Hey Pumpkin.
• If you receive a suspicious message asking for login credentials or personal information, please contact us directly through the official support channels in the app or website (do not reply to the suspicious message).
• Report any suspected phishing attempts to us so we can investigate and help protect the community.

Staying vigilant helps us maintain a safe environment for everyone. If you believe your account may have been compromised, contact us immediately.

Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:

• Delete your personal information from our records; and
• Direct any service providers to delete your personal information from their records.

Please note that we may not be able to comply with requests to delete your personal information if it is necessary to:

• Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, and provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
• Debug to identify and repair errors that impair existing intended functionality;
• Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
• Comply with the California Electronic Communications Privacy Act;
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
• Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
• Comply with an existing legal obligation; or
• Otherwise, use your personal information internally in a lawful manner that is compatible with the context in which you provided the information.

The Company maintains reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, acquisition, disclosure, or use. In the event of a security incident involving personal information, the Company will promptly investigate the incident and provide notice to affected individuals and, where required, to applicable regulatory authorities in accordance with applicable law.

The Company will provide any required notice in the manner and within the timeframes prescribed by applicable law.

The Company does not knowingly collect personally identifiable information from children under the age of thirteen. If you are under the age of 13, you must ask your parent or guardian for permission to use this platform.

You will be able to connect your Company account to third-party accounts. BY CONNECTING YOUR COMPANY ACCOUNT TO YOUR THIRD-PARTY ACCOUNT, YOU ACKNOWLEDGE AND AGREE THAT YOU ARE CONSENTING TO THE CONTINUOUS RELEASE OF INFORMATION ABOUT YOU TO OTHERS (IN ACCORDANCE WITH YOUR PRIVACY SETTINGS ON THOSE THIRD-PARTY SITES). IF YOU DO NOT WANT INFORMATION ABOUT YOU, INCLUDING PERSONALLY IDENTIFYING INFORMATION, TO BE SHARED IN THIS MANNER, DO NOT USE THIS FEATURE. You may disconnect your account from a third-party account at any time. When utilizing Gmail OAuth services, users may disconnect their Google account by visiting their Google Account settings, going to the Security section, and managing third-party apps that have access to their account. Users can also contact us for assistance with disconnecting third-party accounts.

From time to time, the Company may contact you via email for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys, and/or other general communication.

If you would like to stop receiving marketing or promotional communications via email from the Company, you may opt out of such communications by clicking the unsubscribe link provided in the email. They may also contact us via email to request to be removed from our mailing list.

We may store your data on servers provided by third-party hosting vendors with whom we have contracted.

The Company reserves the right to change this Policy from time to time. For example, when there are changes in our services, changes in our data protection practices, or changes in the law. When changes to this Policy are significant, we will inform you. You may receive a notice by sending an email to the primary email address specified in your account, by placing a prominent notice on our application, and/or by updating any privacy information. Your continued use of the application and/or services available after such modifications will constitute your: (a) acknowledgment of the modification of this Policy; and (b) agreement to abide and be bound by this modified Policy.