CCPA Compliance

Effective Date: October 17, 2026

1. Scope

This CCPA Compliance page supplements CreatoRain's Privacy Policy and applies solely to residents of the State of California. It describes the rights and disclosures required under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively referred to as the "CCPA"). CreatoRain is operated by Midwest AI Solution Inc., and this page covers personal information collected through our restaurant influencer marketing platform and related services.

For the purposes of this page, "personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California consumer or household, as defined by the CCPA.

2. Categories of Personal Information Collected

In the preceding twelve (12) months, CreatoRain has collected the following categories of personal information from California consumers:

  • Identifiers: Real name, alias or social media handle, email address, phone number, postal or shipping address, IP address, account name, and unique personal identifiers
  • Customer Records: Name, address, and telephone number. For creators we pay, we hold the payout details they enter in our payout form, stored with an extra layer of encryption. Payout details a creator types in an email do not get that extra layer: we keep them as ordinary message text, which our AI models may read to understand the reply. For customers, we hold the brand and last four digits of the payment card (our payment processor, Stripe, holds the full card number)
  • Characteristics of Protected Classifications: A creator's likely gender, from the influencers.club search the creator matched, from our data provider Bright Data, or from the creator's public profile (such as pronouns)
  • Commercial Information: Records of products or services purchased, obtained, or considered, including campaign history, subscription plans, and transaction records
  • Internet or Network Activity: The technical information every web request carries, such as your IP address, browser type, and device and operating system. If you submit the form on our website where you ask for a free creator list, we also record how you found us (the website or app that sent you, and any campaign tags in the link), the first page you visited and when, the page you submitted the form from, and your answer to "how did you hear about us". We record when you open our campaign emails, when you first open the campaign link we send you and how many times you open it, and what you do in our application. Our servers log each request made to our Services, with the time and the page or action requested. We do not track your browsing on other websites
  • Geolocation Data: The approximate location indicated by the IP address our servers receive with each request, and the city Google Analytics estimates from it for our visit counts. We do not use it for advertising
  • Professional or Employment-Related Information: Job title, company name, and industry, and creators' public social media profiles (bio, photos, posts, and follower and engagement counts), collected whether or not the creator uses CreatoRain
  • Audio, Electronic, or Visual Information: Photos and videos sent to us or posted for a campaign; the content of emails and text messages sent to us or through our platform; and records of video meetings with us, such as transcripts and summaries
  • Inferences: Preferences and characteristics drawn from the categories above, such as a creator's niche, city, and likely gender, and whether a reply to our email shows interest, used to match creators with restaurants and to handle replies

3. Sources of Personal Information

We collect personal information from the following categories of sources:

  • Directly from you: When you create an account, fill out forms, contact customer support, or otherwise interact with our platform
  • Automatically: Through the cookies and browser storage described in our Cookie Policy when you visit our website or use our application
  • From social media platforms: When you sign in with Google, TikTok, or Instagram, we receive the account details our Privacy Policy lists for each. We use them to sign you in, and we show your TikTok or Instagram profile details to restaurants that use our Services
  • From our business customers: Restaurant partners may provide information about their team members and authorized users. Restaurants that use our Services can also add creators' information, for example by importing a list of creators, importing their email conversations with creators, or adding a creator's email address. Creators a restaurant imports, and email addresses a restaurant adds, are added to the creator information we hold, which other restaurants that use our Services may see; the email conversations a restaurant imports stay with that restaurant's campaigns, which other restaurants cannot open
  • From third-party data providers: We may obtain business contact information and publicly available data from data enrichment services to improve our CRM and outreach efforts
  • From public sources: The public social media profiles of creators on Instagram, TikTok, and YouTube, collected through data providers such as Bright Data and influencers.club; link-in-bio pages (such as linktr.ee) linked from those profiles; and the public websites of restaurants and other businesses

4. Business Purposes for Collection

CreatoRain collects and uses personal information for the following business and commercial purposes:

  • Providing and maintaining our restaurant influencer marketing platform and services
  • Creating, managing, and authenticating user accounts
  • Matching restaurants with relevant influencers based on location, niche (such as the kinds of food a creator posts about), follower and engagement counts, and, when a restaurant chooses one, a creator's likely gender
  • Processing payments, subscriptions, and financial transactions
  • Communicating with you about your account, campaigns, and our services, including sending transactional emails and notifications
  • Providing customer support and responding to inquiries
  • Analyzing platform usage and performance to improve our services and user experience
  • Detecting, investigating, and preventing fraudulent, unauthorized, or illegal activity
  • Complying with legal obligations, including tax and financial reporting requirements
  • Marketing our services (with appropriate consent where required)
  • Conducting research and development to enhance our AI-powered influencer matching and campaign optimization features

5. Categories of Third Parties

CreatoRain may share personal information with the following categories of third parties for business purposes:

  • Cloud infrastructure and hosting providers (e.g., Amazon Web Services)
  • Payment processors (e.g., Stripe) for processing financial transactions
  • Email and text-message delivery services (Amazon Web Services and Claw Messenger)
  • AI model providers (e.g., Google, DeepSeek, OpenAI, and Anthropic) for matching creators, reading replies, and drafting and checking campaign messages, and in software tools our staff use
  • Creator data, website data, and email verification services (e.g., Bright Data, influencers.club, Zyte, and ZeroBounce)
  • Error monitoring services (Sentry) for finding and fixing problems with the platform
  • Meeting transcription services (Fireflies)
  • Email, calendar, and issue-tracking tools our staff use (e.g., Google Workspace and Atlassian Jira)
  • Restaurants and other businesses that use our Services, which can access the creator information we hold, including public profile details, email address, likely gender, and, where a creator has given them, phone number and shipping address. They can export creators' profile details, city and state, and email addresses as a spreadsheet, and send that spreadsheet or a share link (which shows the email addresses of the top 10 creators) to anyone they choose. Exports do not include phone numbers or shipping addresses
  • Anyone who asks for a free creator list on our website, who receives creators' public profile information and our estimate of each creator's likely gender, but not the email addresses, phone numbers, or shipping addresses we hold for creators. A creator's bio is shown as written, including any contact details the creator posted in it publicly
  • The payment service a creator chooses to be paid through (PayPal, Venmo, Cash App, or Zelle, or bank transfer where we offer it), which receives the creator's name, handle or account, and the amount
  • Professional advisors, including lawyers, auditors, and accountants, as necessary for legal and compliance purposes
  • Law enforcement and government authorities, when required by law or to protect our legal rights

6. Consumer Rights

Under the CCPA, California residents have the following rights regarding their personal information:

Right to Know

You have the right to request that CreatoRain disclose the categories of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purposes for collecting the information, the categories of third parties with whom we share the information, and the specific pieces of personal information we have collected about you. You may submit up to two (2) verifiable requests within a twelve-month period.

Right to Delete

You have the right to request that CreatoRain delete any personal information we have collected from you, subject to certain exceptions. We may deny your deletion request if retaining the information is necessary for us or our service providers to complete a transaction, provide a requested service, detect security incidents, comply with legal obligations, or engage in research in the public interest, among other exceptions permitted by the CCPA.

Right to Correct

You have the right to request that CreatoRain correct inaccurate personal information that we maintain about you. Upon receiving a verifiable request, we will use commercially reasonable efforts to correct the inaccurate information, taking into account the nature of the personal information and the purposes for which it is processed.

Right to Opt-Out of Sale or Sharing

Restaurants pay to use our Services, and our Services give them access to the creator information we hold, including contact details, as Section 5 describes. Anyone who asks for a free creator list on our website gives us their contact details and receives creators' public profile information and our estimate of each creator's likely gender, as Section 5 also describes. Apart from these, we do not sell personal information, and we do not share it for cross-context behavioral advertising. If our practices change in the future, we will update this disclosure and provide a "Do Not Sell or Share My Personal Information" link on our website.

Right to Limit Use of Sensitive Personal Information

To the extent that CreatoRain collects sensitive personal information (your account login details, and any bank account details a creator gives us for payment), we use this information only as necessary to perform the services you request. Payout details a creator types into an email are kept as ordinary messages, which our AI models may read to understand and answer that email. You have the right to limit our use and disclosure of sensitive personal information to what is necessary for the purposes for which it was collected.

Right to Non-Discrimination

CreatoRain will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices or rates, provide you with a different level or quality of service, or suggest that you may receive a different price, rate, or quality of service because you exercised a CCPA right.

7. How to Submit Requests

California residents may submit requests to exercise their CCPA rights by email to privacy@creatorain.com, with the subject line "CCPA Request" and a description of the right you wish to exercise.

Please provide sufficient information to allow us to verify your identity and process your request. We will acknowledge receipt of your request within 10 business days and provide a substantive response within 45 calendar days. If additional time is needed, we will notify you of the extension and the reason for it, for a maximum total response period of 90 calendar days.

8. Verification Process

To protect your privacy and security, CreatoRain must verify your identity before processing a CCPA request. Our verification process may include:

  • Matching at least two pieces of personal information you provide in your request with information we already maintain about you
  • For requests for specific pieces of personal information, matching at least three pieces of personal information and obtaining a signed declaration under penalty of perjury
  • If you have a CreatoRain account, asking you to send the request from the email address on that account
  • If we cannot verify your identity to the required degree of certainty, we will notify you and explain what additional information is needed

9. Authorized Agent Requests

You may designate an authorized agent to submit a CCPA request on your behalf. To do so, the authorized agent must:

  • Provide a written authorization signed by you (the consumer) permitting the agent to act on your behalf
  • Provide proof of the agent's identity
  • If the authorized agent does not provide a power of attorney under California Probate Code sections 4000 to 4465, we may require you to verify your own identity directly and confirm that you authorized the agent to act on your behalf

10. Financial Incentives Disclosure

CreatoRain does not offer any financial incentives, price differences, or service differences in exchange for the retention, sale, or sharing of your personal information. If we introduce any such programs in the future, we will provide advance notice and obtain your opt-in consent before enrolling you in any financial incentive program.

11. Shine the Light (California Civil Code Section 1798.83)

Under California Civil Code Section 1798.83 ("Shine the Light"), California residents who have an established business relationship with CreatoRain may request information about whether we have disclosed personal information to third parties for their direct marketing purposes during the preceding calendar year. CreatoRain does not give personal information to third parties so that they can market their own products to you. Restaurants that use our Services may contact creators about campaigns.

If you are a California resident and would like to make a Shine the Light request, please contact us at privacy@creatorain.com with "Shine the Light Request" in the subject line.

12. Changes to This Disclosure

CreatoRain reserves the right to amend this CCPA Compliance page at any time. When we make material changes, we will post the updated version on our website and update the effective date. We encourage you to review this page periodically to stay informed of your rights and our practices.

13. Contact Information

If you have questions or concerns about this CCPA Compliance page or your California privacy rights, please contact us: