Data Confidentiality & Non-Disclosure Agreement

1. Parties & Scope

This Data Confidentiality & Non-Disclosure Agreement ("Agreement") is entered into between DreamCraft Inc. ("DreamCraft," "we," "us," or "our") and the user ("Client," "you," or "your") of any DreamCraft service, including but not limited to the Project Scope Builder, AI Project Manager, and all associated project management tools.

This Agreement applies to all information, data, communications, project details, business plans, technical specifications, and any other material disclosed by you through any DreamCraft platform feature or service (collectively, "Confidential Information").

2. Definition of Confidential Information

For the purposes of this Agreement, "Confidential Information" includes, without limitation:

• All project descriptions, ideas, business plans, and conceptual information shared during the scoping process
• All conversations, messages, and data exchanged with the AI Project Manager
• Technical specifications, feature requirements, architecture designs, and roadmaps generated or discussed
• Financial information, budgets, timelines, and resource allocations
• Any files, documents, images, or attachments uploaded to DreamCraft
• User account information, preferences, and project configurations
• Third-party integration credentials and repository information

3. Non-Disclosure Obligations

DreamCraft agrees to the following binding obligations regarding your Confidential Information:

4. AI Project Manager & Scoping Data

All information shared with the AI Project Manager during project scoping, planning, and management is subject to the same confidentiality protections as any other Confidential Information. Specifically:

• AI conversations are processed in real-time and are not stored in shared or public datasets
• AI-generated project scopes, roadmaps, and recommendations are your exclusive intellectual property
• Your inputs to the AI system are not used to improve, train, or fine-tune any AI models used by DreamCraft or third parties
• AI processing occurs in isolated, secure environments with no cross-client data contamination

5. Data Security Measures

DreamCraft employs industry-standard security measures including but not limited to:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Role-based access control (RBAC) with project-level isolation
• Regular security audits and penetration testing
• Secure, SOC 2-compliant cloud infrastructure (Supabase, Vercel)
• Automated data retention and deletion policies

6. Data Retention & Deletion

Your Confidential Information is retained only for the duration necessary to provide DreamCraft services. Upon project completion or account termination, you may request the complete deletion of all associated data. DreamCraft will comply with such requests within 30 business days and provide written confirmation of deletion.

7. Exceptions

The obligations set forth in this Agreement shall not apply to information that:

• Was publicly available at the time of disclosure or becomes publicly available through no fault of DreamCraft
• Was already known to DreamCraft prior to your disclosure, without obligation of confidentiality
• Is required to be disclosed by law, regulation, or valid court order, provided DreamCraft gives you prompt notice and cooperates in seeking protective measures
• Is independently developed by DreamCraft without use of or reference to your Confidential Information

8. Duration

This Agreement shall remain in effect for the duration of your use of DreamCraft services and for a period of five (5) years following the termination of your account or the conclusion of your last active project, whichever is later.

9. Breach & Remedies

In the event of a breach of this Agreement, the affected party shall be entitled to seek injunctive relief and any other remedies available at law or in equity. DreamCraft shall promptly notify you of any known or suspected breach of your Confidential Information and take immediate steps to mitigate any potential harm.

10. Governing Law

This Agreement shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of laws principles.