1. Introduction
DREAMSTREAM Academy Inc. (“Dreamstream Academy,” “DREAMSTREAM,” “DREAMSTREAM Academy,” “we,” “us,” or “our”) is a Delaware corporation that operates a career-guidance platform helping students, families, and learners explore educational pathways and career opportunities. This Privacy Policy (“Policy”) describes how we collect, use, disclose, and otherwise process the personal information of users (“you” or “your”) in connection with our website, mobile applications, and related services (collectively, the “Services”). The Services are operated in the United States, and all personal information collected through the Services is processed and stored within the United States.
This Policy does not apply to information collected by third-party websites, applications, or programs, even if linked from the Services. When you click an outbound link, including any affiliate referral link, the privacy policy of the destination site governs your activity there.
Our practices and the Services we offer may evolve over time as the Services develop. We will update this Policy when we make material changes, as described in Section 15.
By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described herein, please do not use the Services.
Beta / Preview Notice. The Services are currently provided as a preview / beta release. The “Test Period” and re-acceptance requirements that apply to your use of the Services are set forth in Sections 3 and 4 of our Terms of Use. This Policy applies throughout the Test Period and, unless and until Dreamstream Academy issues a successor Privacy Policy (the “Successor Privacy Policy”) on or before GA Launch (as defined in the Terms of Use), continues to govern our handling of your personal information.
2. Children Under the Age of 13
The Services are intended for individuals who are at least thirteen (13) years of age. We do not knowingly collect, solicit, or maintain personal information from children under the age of 13. Children under 13 may not register for or use the Services. If we learn that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take prompt steps to delete such information in accordance with the Children’s Online Privacy Protection Act (COPPA).
If you are between the ages of 13 and 16 and reside in California, we will not sell or share your personal information unless you have affirmatively opted in, consistent with the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA/CPRA”).
A parent or legal guardian who believes their child under the age of 13 has provided personal information may contact us using the information in Section 16. Upon verification of the parent or legal guardian’s identity, we will delete the information as required by COPPA.
3. Eligibility
To use the Services, you must be at least 13 and a U.S. resident. Users 13 through 17 are encouraged to review this Policy with a parent or legal guardian. By using the Services, you represent that, if you are under 18, your parent or legal guardian is aware of and consents to your use.
4. Information We Collect
We collect the following categories of personal information when you use the Services.
4.1 Information You Provide
- Account and profile. Name, date of birth, email address, account credentials, and (if you choose) phone number, postal address, school or institutional affiliation, grade level, and educational and career interests.
- Educational and assessment records you upload. School transcripts, resumes, report cards, third-party assessment results, responses to assessments offered through the Services, and other educational materials you choose to provide. All such records are uploaded by you or by your parent or legal guardian; Dreamstream Academy does not receive educational records directly from schools.
- Communications. Messages, support requests, and feedback you send to us.
4.2 Information We Collect Automatically
- Device and connection. IP address, device identifiers, operating system, browser type, language preferences, and mobile carrier.
- Usage. Pages or screens viewed, links clicked, search queries, and dates and times of access.
- Approximate location. Derived from IP address; used to surface local opportunities.
- Cookies and similar technologies. Cookies, local storage, mobile app SDKs, web beacons, pixels, and similar tracking technologies used to operate the Services, remember preferences, secure the platform, and measure performance. For more information, see Section 12.
4.3 Information from Third-Party Sign-In
- If you sign in using “Sign in with Apple,” “Sign in with Google,” or a similar service, the third party shares limited identifying information with us based on the permissions you grant. The third party’s privacy policy governs its handling of your information.
4.4 Sensitive Information
Please do not submit government identification numbers, health or medical information, biometric identifiers, financial account information, or information about political opinions, religious beliefs, trade-union membership, or sexual orientation. We do not request this information and do not need it to provide the Services.
We do not intentionally collect information regarding your sex, gender, or other demographic categories as part of providing the Services. Certain third-party cookies and tracking technologies described in Section 12 may incidentally infer or collect such information based on user behavior. Dreamstream Academy does not itself use any such incidentally-collected information to make individualized decisions about you, to train artificial intelligence systems, or to profile you, and we contractually require our vendors to limit their use of such information to the purposes for which we engage them. You may further limit third-party cookie-based inferences through your browser and device settings or through our cookie consent mechanism as described in Section 12.
5. How We Use Your Information
We use the personal information we collect for the following purposes:
- Provision and improvement of the Services. To operate, maintain, and improve the Services, including to create and manage your account, authenticate you, secure the platform, provide customer support, and personalize your experience.
- Matching, recommendations, and assessment scoring. To match you to educational pathways, programs, and opportunities; generate personalized recommendations; and produce assessment results, including by surfacing local opportunities.
- Artificial intelligence (“AI”) and machine learning (“ML”). We use advanced AI models (including large language models) to power features such as personalized matching, recommendations, and assessment scoring. We may update or change the underlying models or model providers from time to time to improve performance, cost, or capabilities. All AI/ML service providers act as our sub-processors under contractual obligations to protect your information, use it only on our instructions, and apply security and confidentiality standards consistent with this Policy. Model training is performed only on de-identified and aggregated data; identifiable educational records, assessment responses, and assessment-derived inferences are used solely to provide the individual user with personalized matching and recommendations.
- Communications. To send you service-related notices, respond to your inquiries, and (only where you have provided consent or where otherwise permitted by law) send you promotional communications. You may opt out of promotional communications at any time by following the unsubscribe instructions, replying “STOP” to marketing text messages, or disabling push notifications through your device settings. Service-related messages will continue while your account is active.
- Legal compliance and protection. As necessary to comply with applicable laws, respond to lawful requests from public authorities, enforce our terms of service, prevent fraud and abuse, and protect the rights, property, or safety of Dreamstream Academy, our users, or others.
5.1 Assessment Inferences
Assessments offered through the Services may produce inferences about your career interests, aptitude, or personality and behavioral traits. These inferences are used solely to display your own results, power personalized matching for you, and improve our algorithms using only de-identified and aggregated data. They are not sold, shared with affiliate networks, used for advertising, or used to make consequential decisions about your access to opportunities. You may request deletion of assessment-derived inferences at any time.
5.2 No Consequential Decisions
AI-generated outputs are informational suggestions. Dreamstream Academy does not use AI outputs to make decisions that produce legal or similarly significant effects on your access to education, employment, financial services, housing, healthcare, or insurance. Without limiting the foregoing, AI-generated outputs are not used by Dreamstream Academy to admit, deny, rank, or screen users for any educational program, employment opportunity, financial product, or other opportunity. We do not transmit AI-generated profiles or assessment-derived inferences to third parties for use in admissions, hiring, lending, or similar decisions.
AI-generated outputs are intended as starting points for your exploration, not as substitutes for advice from qualified counselors, educators, or other professionals. AI outputs may be inaccurate or incomplete and do not constitute professional advice. You are responsible for independently verifying any information you intend to rely on. Use of AI-generated outputs is at your discretion, and Dreamstream Academy does not direct, schedule, or commit to any outcome based on AI outputs.
6. Data Processing Location
The Services are intended for users located in the 50 United States and the District of Columbia, and we do not offer the Services in the European Economic Area, the United Kingdom, Switzerland, or other jurisdictions outside the United States. All personal information collected through the Services is processed and stored within the United States. By using the Services, you acknowledge and consent to the processing and storage of your personal information in the United States. If you nonetheless access the Services from outside the United States, please be aware that your personal information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those of your jurisdiction.
7. Disclosure of Personal Information
We may disclose your personal information to the following categories of recipients:
- Service providers and sub-processors. Vendors that perform services on our behalf, including hosting, infrastructure, analytics, customer support, communications, authentication, and AI/ML processing as described in Section 5, under contracts that require them to protect your information and use it only for our purposes.
- Legal and regulatory authorities. We may disclose personal information to law enforcement agencies, courts, regulatory bodies, or other governmental authorities where required or permitted by applicable law, court order, or other legal process, or to protect the rights, property, or safety of Dreamstream Academy, our users, or the public.
- Business transfers. In the event of a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your personal information may be transferred as part of such transaction, subject to commitments consistent with this Policy. We will notify you of any such change in ownership or control of your personal information.
- With your consent. We may disclose your personal information to other third parties where you have provided your prior consent to such disclosure.
- De-identified and aggregated information. May be shared without restriction.
No sharing of subscriber data with partners. Notwithstanding any other provision of this Policy, Dreamstream Academy does not pass, transmit, or otherwise make available any name, email address, educational records, assessment data, assessment-derived inferences, or other identifiable subscriber profile data to third-party entities, including our affiliate or program partners. If you wish to use the services of any Dreamstream Academy partner, you must create a separate account and profile directly on the partner’s website without using any personal, financial, or account data from Dreamstream Academy. Dreamstream Academy does not maintain technology-based connections to the registration or data platforms of its partners, and no subscriber data is shared through any such integration.
We do not sell your personal information for monetary consideration, as the term “sell” is defined under the CCPA/CPRA. We do not share your personal information for cross-context behavioral advertising purposes.
8. Affiliate Programs and Outbound Links
Dreamstream Academy participates in affiliate marketing programs. The Services are currently provided without charge. When you click certain outbound links to programs or partners, you may be directed to a third-party site. If you make a qualifying purchase or take a qualifying action there, we may receive a commission at no additional cost to you. Where we receive affiliate compensation, we provide disclosures consistent with the U.S. Federal Trade Commission’s Endorsement Guides at or near the relevant links or recommendations within the Services.
To enable referral tracking, our affiliate-network partners, such as CJ Affiliate, ShareASale/Awin, PartnerStack, Rakuten and other similar networks, may use cookies, click identifiers, tracking pixels, and server-to-server postbacks. Information shared for attribution is limited to a unique click or transaction identifier, the date and time of the click, the originating page, general device and browser information, and conversion data sent back to us when you complete a qualifying action. We do not share your name, email address, educational records, assessment data, or assessment-derived inferences with affiliate networks.
Characterization under state privacy laws. To the extent any affiliate-related sharing could be characterized as a “sale” or “sharing” for cross-context behavioral advertising under California, Colorado, Connecticut, Virginia, or other state privacy laws, you may opt out as described in Section 10. We do not use shared affiliate data to build advertising profiles or to target advertising back to you on third-party sites.
Once you click an affiliate link and leave the Services, the privacy policy and terms of the destination site apply. Dreamstream Academy is not responsible for those third-party sites.
9. Data Retention
We retain your personal information only for as long as is necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. In determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, and applicable legal and regulatory requirements.
When your personal information is no longer required for any legitimate business or legal purpose, we will securely delete or anonymize it. If immediate deletion is not technically possible (for example, because information has been stored in backup archives or is subject to ongoing legal hold), we will delete it as soon as commercially reasonable, taking into account technical constraints and applicable legal obligations.
Retention Through and After the Test Period. Your personal information will be retained through and after the Test Period. End of the Test Period or transition to GA Launch (each as defined in the Terms of Use) does not automatically trigger deletion of your account, your User Content, or your personal information. Your deletion, export, and other rights set forth in Section 10 continue to apply. We retain such information solely for the continued purposes described in Section 5 and only for as long as it remains necessary for those purposes; the retention principle in this Section 9 (necessity, with secure deletion or anonymization when no longer required) continues to apply.
To enable referral tracking, our affiliate-network partners, such as CJ Affiliate, ShareASale/Awin, PartnerStack, Rakuten and other similar networks, may use cookies, click identifiers, tracking pixels, and server-to-server postbacks. Information shared for attribution is limited to a unique click or transaction identifier, the date and time of the click, the originating page, general device and browser information, and conversion data sent back to us when you complete a qualifying action. We do not share your name, email address, educational records, assessment data, or assessment-derived inferences with affiliate networks.
Characterization under state privacy laws. To the extent any affiliate-related sharing could be characterized as a “sale” or “sharing” for cross-context behavioral advertising under California, Colorado, Connecticut, Virginia, or other state privacy laws, you may opt out as described in Section 10. We do not use shared affiliate data to build advertising profiles or to target advertising back to you on third-party sites.
Once you click an affiliate link and leave the Services, the privacy policy and terms of the destination site apply. Dreamstream Academy is not responsible for those third-party sites.
10. Your Privacy Rights
Subject to applicable law and verification of your identity, you may have the following rights with respect to your personal information:
- Know. Know what personal information we hold about you and how we use it, including the categories and specific pieces collected, the categories of sources, the business or commercial purposes for which it was collected, and the categories of third parties with whom we share it.
- Access. Access a copy of your personal information.
- Correct. Correct inaccurate or incomplete personal information.
- Delete. Delete personal information we have collected about you, subject to certain exceptions under applicable law.
- Portability. Receive a portable copy of certain personal information you provided.
- Opt out of sale or sharing. Opt out of any processing characterized as “sale” or “sharing” for cross-context behavioral advertising under your state’s law. As noted in Sections 7 and 8, we do not sell personal information for monetary consideration and do not share personal information for cross-context behavioral advertising.
- Limit sensitive personal information. Where applicable, limit the use and disclosure of your sensitive personal information.
- Withdraw consent. Withdraw any consent you previously gave for optional processing.
- Authorized agent. Designate an authorized agent to act on your behalf, subject to verification of the agent’s authority.
- Appeal. Appeal a privacy-request decision where applicable law provides.
- Non-discrimination. Be free from discrimination for exercising any of these rights.
Rights under the CCPA/CPRA (California residents). If you are a California resident, the rights above apply as set forth in the CCPA/CPRA. We will respond to verified requests within forty-five (45) days, extendable by an additional forty-five (45) days where reasonably necessary, with notice to you of any such extension.
Rights under other state privacy laws. If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Tennessee, or another state with a comprehensive consumer privacy law, you may have certain rights with respect to your personal information, including the right to confirm whether we are processing your personal information; access, correct, or delete the personal information we maintain about you; opt out of certain uses (including any sale, targeted advertising, or profiling that produces legal or similarly significant effects); and, where applicable, data portability. The specific scope and exercise procedures vary by jurisdiction.
Global Privacy Control (GPC). Where required by applicable law, we honor opt-out preference signals such as the Global Privacy Control (GPC). Because we do not sell personal information for monetary consideration and do not share personal information for cross-context behavioral advertising, the practical effect of a GPC signal is to confirm preferences we already apply to all users.
To exercise any of the rights described above, please contact us using the information in Section 16. Upon receipt of a verified request, we will respond within the timeframe required by applicable law. We may extend the response period as permitted by applicable law where reasonably necessary, and will notify you of any such extension. We may decline to act on requests we cannot reasonably verify or that are unverifiable, frivolous, or duplicative.
11. Data Security
We implement and maintain technical, organizational, and administrative safeguards appropriate to the nature, sensitivity, and volume of the personal information we process and to our size and stage of development. These may include encryption of personal information in transit, access controls limiting access to authorized personnel, vendor security review, contractual obligations imposed on our service providers and sub-processors to maintain comparable security standards, and periodic assessment of our practices.
You are responsible for keeping your account credentials confidential and for promptly notifying us at [email protected] of any unauthorized access to your account.
Despite our efforts, no method of transmission over the internet or method of electronic storage is entirely secure, and we cannot guarantee the absolute security of your personal information. In the event of a data breach that triggers a notification obligation under applicable U.S. state breach notification laws or other applicable law, we will notify affected individuals in accordance with those laws.
12. Cookies and Tracking Technologies
We use cookies, local storage, mobile app SDKs, web beacons, pixels, and similar tracking technologies to collect usage information, operate the Services, remember preferences, secure the platform, and measure performance. You can manage your cookie preferences through your browser or device settings, or through our cookie consent mechanism when you first access the Services. Please note that disabling cookies may affect the functionality of the Services.
13. Third-Party Links
The Services may contain links to third-party websites, services, or applications that are not operated by us. This Policy does not apply to any third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services before providing your personal information.
14. Mobile Application Disclosures
If and when we make a mobile application available through the Apple App Store or the Google Play Store, the following disclosures apply. The application may request the following permissions, which you may grant or revoke through your device settings:
- Notifications. To send you account, service, and (if you opt in) marketing communications.
- Location services. If granted, used to refine local opportunity matching. Not shared with third parties for advertising.
- Camera and photo library. If granted, used solely to enable upload of educational records, resumes, or profile photos that you choose to share.
- Storage. To store cached data and uploaded files locally on your device.
15. Changes to This Privacy Policy
We may update this Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The date of last revision is at the top of this Policy. When we make material changes, we will notify users with an account by email and, where appropriate, post a notice in the Services. Where required by applicable law, we will provide additional notice or obtain your consent before implementing material changes. Your continued use of the Services after the effective date of any revised Policy constitutes your acceptance of the updated terms.
Re-Acceptance at GA Launch. As described in our Terms of Use, the Services are currently in a Test Period. At GA Launch, we expect to issue a Successor Privacy Policy. Your continued access to the Services after GA Launch will require affirmative re-acceptance of the Successor Privacy Policy (alongside the Successor Terms of Use) via a click-through modal presented on your next sign-in after GA Launch.
16. Contact Information
If you have any questions or concerns about this Policy or our privacy practices, or if you wish to exercise any of your rights under applicable law, please contact us at:
Privacy questions, requests, and complaints: [email protected].
General support: [email protected].
Mailing address:
DREAMSTREAM Academy Inc.
Attn: Privacy Team
9893 Georgetown Pike
#177
Great Falls, VA 22066