Data Retention Policy

Effective Date: October 17, 2026

1. Purpose and Scope

This Data Retention Policy describes how CreatoRain (operated by Midwest AI Solution Inc.) retains, manages, and deletes personal data and other information collected through our restaurant influencer marketing platform. This policy applies to all data processed by CreatoRain, including data collected from restaurant partners, influencers, and visitors to our website.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. This policy is designed to ensure that we handle data responsibly and in accordance with applicable data protection laws, including the GDPR, CCPA, and other relevant regulations.

2. Retention Periods by Data Category

The following are our standard retention periods for each category of data we collect and process. When a period ends, the data is deleted as Section 3 describes, unless a legal hold, regulatory requirement, or other exception applies.

Account Data

Personal information associated with your CreatoRain account, including your name, email address, phone number, company information, and account preferences. This data is kept while your account is open and for 30 days after it is closed, so that you can reopen the account or export your data. It is then deleted as described in Section 3.

Campaign Data

Information related to influencer marketing campaigns, including campaign briefs, deliverables, performance metrics, restaurant-influencer matching data, content submissions, and approval workflows. While your account is open, campaign data is kept for 3 years after each campaign ends, so that you and the creators you worked with can look back at past campaigns and resolve any dispute. When your account is closed, your campaign data is deleted with the rest of your account data, 30 days after closure.

Influencer Analytics

Aggregated and individual analytics about creators, built from their public profiles and the campaigns they join. This covers follower counts, engagement metrics, and the location, niche, interests, and likely gender listed in our Data Processing Agreement. Influencer analytics data is retained for 2 years from the date of collection. This period allows for trend analysis, benchmarking, and the continuous improvement of our influencer matching algorithms.

Payment Records

Financial transaction records, invoices, payment confirmations, refund records, and tax-related documentation. Payment records are retained for 7 years from the date of the transaction. This retention period is required to comply with applicable tax, accounting, and financial reporting laws and regulations.

Communication Logs

Records of communications between CreatoRain and its users, including in-app messages between restaurants and influencers, campaign emails exchanged with creators, and notifications. Emails to our support team are covered under Support Tickets below. Communication logs are kept for 1 year from the date of the communication, to help resolve disputes and answer support questions, and are deleted sooner if the account they belong to is closed and its data deleted.

Website Analytics

Our website uses Google Analytics to count visits. Google keeps that visit data for 14 months and then deletes it; it holds no name or email address. Our Cookie Policy lists what the website stores in your browser.

Support Tickets

Support emails and related correspondence. Support records are kept for 2 years after each request is resolved, or until the account they belong to is closed and its data deleted, if that comes first. This period allows us to reference past interactions for improved support, identify recurring issues, and maintain quality assurance standards.

3. Data Deletion Process

Data is deleted from our production systems within 30 days after its retention period ends, including data that belongs to no account. When an account is closed, all of its data is deleted 30 days after closure, even where a retention period above has not yet ended. Three kinds of data are kept after that:

  • Aggregated or anonymized data that cannot be used to identify individuals, which may be kept indefinitely for statistical and analytical purposes
  • Payment records, which are kept for the 7 years that tax law requires, even after an account is closed
  • Data under a legal hold, which is kept until the hold is released, and is then deleted at its normal deletion time under this section, or within 30 days after the release, whichever is later (Section 6)

Copies in backups are removed as described in Section 5.

4. Right to Deletion

You have the right to request the deletion of your personal data at any time, subject to certain exceptions required by law. To submit a deletion request, please follow these steps:

  • Send an email to privacy@creatorain.com with the subject line "Data Deletion Request"
  • Include your full name, the email address associated with your CreatoRain account, and a description of the data you wish to have deleted
  • We will verify your identity before processing the request to protect against unauthorized deletion
  • We will acknowledge your request within 5 business days and complete the deletion within 30 days
  • If we are unable to fulfill your request due to legal obligations or other exceptions, we will notify you and explain the reason

Please note that certain data may be exempt from deletion requests, including data required for compliance with legal obligations, data necessary to complete a pending transaction, and data required for the establishment, exercise, or defense of legal claims.

5. Backup Retention

CreatoRain keeps encrypted backups of its production database so that the platform can be recovered after a failure. When data is deleted from the production systems:

  • Automated database backups are kept for 35 days, so deleted data is gone from them within 35 days after it is deleted from the production systems
  • CreatoRain also keeps occasional manual snapshots of the production database for disaster recovery. Data that was in the database when a snapshot was taken stays in that snapshot until the snapshot is deleted. Manual snapshots are kept on a rolling 12-month basis: once a newer snapshot exists, a snapshot more than 12 months old is deleted. Snapshots are used only to restore the platform
  • During the backup retention period, deleted data will not be actively used or accessed unless required for disaster recovery
  • If the platform is ever restored from a backup or snapshot, any previously deleted data that comes back with it is deleted again promptly
  • Backups and snapshots are encrypted at rest, like the production database

6. Legal Hold Exceptions

In certain circumstances, CreatoRain may be required to retain data beyond the standard retention periods outlined in this policy. These exceptions include:

  • Data subject to an active legal hold in connection with litigation, regulatory investigation, or government inquiry
  • Data required to comply with a valid legal obligation, subpoena, court order, or regulatory requirement
  • Data necessary for the establishment, exercise, or defense of legal claims
  • Data retained at the request of a law enforcement authority or regulatory body

When a legal hold is in effect, the affected data will be retained until the hold is released. The data is then deleted at its normal deletion time under Section 3, or within 30 days after the release, whichever is later. CreatoRain will notify affected users of a legal hold to the extent permitted by law.

7. Review Schedule

CreatoRain reviews this Data Retention Policy at least once a year, and sooner when we change how we store data or when the law changes. We notify affected users of any material change before it takes effect.

8. Contact Information

If you have questions about this Data Retention Policy or wish to exercise your data deletion rights, please contact us: