CreatoRain Privacy Policy
시행일: 2026년 10월 17일
Policy Overview
Midwest AI Solution Inc., doing business as CreatoRain ("CreatoRain"), operates an influencer marketing platform that connects restaurants with content creators. This policy describes how we collect, use, disclose, and protect information through our Services, website, and interactions. We also email businesses for our clients' campaigns, and we text people who sign up for one of our text programs. We never sell phone numbers.
Scope of This Policy
This policy uses these five defined terms:
- Authorized Users: Individuals accessing Services on behalf of Customers
- Creators: Influencers and content creators whose information we collect or a Customer adds to our Services, including creators who have never used CreatoRain
- Customers: Entities contracted with CreatoRain for Services
- Customer End Users: Individuals whose data CreatoRain processes on Customer's behalf
- Site Visitors: Individuals visiting the website outside customer context
This policy applies to Site Visitors, Creators, prospective Customers, Customers, and Authorized Users. It also applies to anyone who signs up for one of our text programs (see Text Messages below). It does not cover Customer End Users outside those groups, whose information we process only on a Customer's behalf.
Information Collection
Direct Provisions
Users provide information when signing up, communicating with support, attending events, or contacting sales. Data collected includes:
- Names and contact information
- Business and personal details
- Usernames and passwords
- Professional roles
- Photos or videos you send us
- Transcripts and summaries of video meetings with us, if we record them with Fireflies
- Billing details, which Stripe, our payment processor, collects on its own checkout pages; we keep your plan, your payments, and the brand and last four digits of your card
- Any voluntarily provided information
Automated Collection
When you visit our website or use our application, our servers receive the technical information that every web request carries, such as your IP address (which indicates an approximate location), browser type, and device and operating system. Our website uses Google Analytics to count visits (see Analytics below) and uses no advertising trackers; our Cookie Policy lists what the website stores in your browser.
Our servers also log each request made to our Services, with your IP address, the time, and the page or action requested, and we record what you do in our application. Our apps may use Google Analytics in the same way as our website, and none of our sites use session-recording tools. Our campaign emails contain a small tracking image that tells us when an email is opened, if your mail app loads images. We also record when you first open the campaign link we send you, and how many times you open it. If you submit the form on our website where you ask for a free creator list, we also receive how you found us: the website or app that sent you and any campaign tags in the link you arrived by, the first page you viewed and when, the page you sent the form from, and your answer to "how did you hear about us".
Third-Party Sources
We collect the public social media profiles of creators on Instagram, TikTok, and YouTube through data providers such as Bright Data and influencers.club, including for creators who have never used CreatoRain. We also collect information from link-in-bio pages (such as linktr.ee) linked from those profiles. Restaurants that use our Services can add creators' information too, for example by importing a list of creators, importing their email conversations with creators, or adding a creator's email address. Creators a restaurant imports, and email addresses a restaurant adds, are added to the creator information we hold, which other restaurants that use our Services may see; the email conversations a restaurant imports stay with that restaurant's campaigns, which other restaurants cannot open. We collect business contact details of restaurant owners and managers from their businesses' websites and from business contact lists we obtain. Information may also come from affiliates, marketing vendors, and social media platforms where users interact with CreatoRain.
Information Usage
Information is used to:
- Provide and maintain Services
- Give restaurants that use our Services access to creators' profiles and contact details (see Information Sharing below)
- Find and match creators, write campaign emails, check the replies our AI drafts before we send them, and read replies to tell whether they show interest, using AI models, including DeepSeek, which processes information in China (see International Data Transfers below)
- Respond to inquiries
- Conduct analysis and research
- Suggest relevant Services
- Secure platforms and resolve issues
- Comply with legal obligations
- Defend legal rights
Aggregate or de-identified information may be used for any purpose without restrictions.
Legal Bases for Processing
Processing occurs when:
- Performing contractual obligations
- Pursuing legitimate interests
- Complying with legal requirements
- Operating under user consent
Analytics and Advertising
Analytics
We use Google Analytics, a service from Google LLC, to see how many people visit, which pages they read, how they found us (the site that sent them and any campaign tags in the link), and which buttons they press, such as booking a demo. Google receives your IP address, which it uses to estimate your city, and your device and browser details; we never send it your name, email address or what you type into our forms. Google Analytics stores a random ID in two cookies on your device, and Google keeps the visit data for 14 months. Its advertising features and Google signals are turned off. In the European Economic Area, the United Kingdom and Switzerland, Google Analytics loads only after you press Accept on our banner; elsewhere it is on unless your browser sends a Global Privacy Control signal. You can change your choice at any time with "Cookie settings" at the bottom of every page, or with Google's opt-out add-on at tools.google.com/dlpage/gaoptout. If you allow analytics and then send one of our forms, we keep that random Analytics ID with your request, so we can tell which visit it came from. Some content on our pages loads from other companies, and your browser then sends that company your IP address and browser details. Our website's typeface comes from Google Fonts. Stock photos on our city guides and blog load from Pexels. Pictures of creators may load straight from Instagram, TikTok, or YouTube. Some of our emails show images stored with Google or ImgBB. Images inside an email a creator sends you through our app's inbox load from wherever the sender stored them.
Online Advertising
We do not work with advertising partners, and no advertising cookies are set on our website. Google Analytics runs with its advertising features turned off. Our campaign emails contain a small image that tells us when an email is opened.
Do Not Track
Our website treats a Global Privacy Control (GPC) signal as a choice not to use Google Analytics. It does not respond to Do Not Track (DNT) signals.
Information Sharing
Data sharing occurs with:
- Service providers for operational support, listed on our Subprocessors page
- Restaurants and other businesses that use or try our Services, which see creators' information as described below
- The public, through our city guides, which show creators' names, handles, and follower counts
- The payment service a creator chooses, when we pay that creator
- Tencent, if you contact us on WeChat
- Affiliates and subsidiaries
- User's employer (for Authorized Users)
- Third parties for legal compliance or safety
- Parties involved in mergers or acquisitions
- Aggregate or de-identified data with partners
- Third parties with user consent
Creator Information Shown to Restaurants
Restaurants that use our Services can access the creator information we hold, including public profile details, email address, likely gender, and, where a creator has given them, phone number and shipping address. Restaurants can export creators' profile details, city and state, and email addresses as a spreadsheet, and can send that spreadsheet or a share link (which shows the email addresses of the top 10 creators) to anyone they choose. Exports do not include phone numbers or shipping addresses.
Anyone who asks for a free creator list on our website receives, for the creators that match, their name, handles, profile photo, profile links, bio, a short summary of their content, hashtags, likely gender, niche, city, state, and country, and their follower, following, like, post, view, and engagement figures. They also receive a spreadsheet of the top matches with each creator's name, handles, profile link, city, state, country, niche, and counts. They do not receive the email addresses, phone numbers, or shipping addresses we hold for creators, but each creator's bio is shown as written, including any contact details the creator posted in it publicly.
Payments to Creators
When we pay a creator, the payment goes through the service the creator picks: PayPal, Venmo, Cash App, or Zelle, or bank transfer where we offer it. That service receives the creator's name, handle or account, and the amount.
Text Messages
If you sign up for one of our text programs, we use your mobile number only to run that program: to send you the messages described in that program's SMS terms and to answer your texts. The texts come from CreatoRain, in our name, and we answer your replies. The sharing described in the list above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties, except the aggregators and providers that deliver our text messages. We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. To stop the texts, reply STOP to any of them.
Data Retention
Information is retained only as long as necessary for stated purposes or to comply with legal requirements.
User Rights and Choices
Legal Rights
Users can request access to, correction of, deletion of, or restriction on their information, or ask us to stop contacting them. To make any of these requests, email privacy@creatorain.com. We answer each request by hand. Processing timelines follow applicable law.
Marketing Communications
Users can opt out of marketing emails by contacting us or following unsubscribe instructions in emails. Transactional communications cannot be opted out.
Third-Party Links and OAuth Authentication
We are not responsible for third-party websites or their privacy practices.
Google OAuth
Name and email address are collected for authentication purposes.
TikTok OAuth
We receive your username, display name, profile picture, bio, and follower, following, like, and video counts. We use them to sign you in and to show your profile to restaurants that use our Services.
Instagram OAuth
We receive your username, name, profile picture, and follower, following, and post counts. We use them to sign you in and to show your profile to restaurants that use our Services.
International Data Transfers
Our production systems run in the United States, on Amazon Web Services. Some of our service providers process your information in other countries. We use DeepSeek's AI models to write campaign emails and replies, to check the replies our AI drafts before we send them, and to help find and match creators. DeepSeek is also a backup for our other AI features, such as reading replies. DeepSeek processes this information in China, and providers such as Google may process it in any country where they operate. Our staff may also access it from outside the United States. Our Subprocessors page lists the service providers that process personal data for us, what each does, and where it is based. Our Chinese-language pages show a WeChat QR code. If you contact us on WeChat, Tencent, which runs WeChat, processes those messages in China. The privacy laws of those countries may protect your information less than the laws where you live. Our GDPR page explains how we handle information from Europe and the United Kingdom.
Security Measures
We employ technical and organizational measures to protect information from loss, misuse, and unauthorized access, though no transmission is completely secure.
California Privacy Rights
CCPA Categories
In the past 12 months we have collected these categories of personal information:
- Identifiers and contact details: name, username or social media handle, email address, phone number, postal or shipping address, IP address, and account ID
- Login details: your email address and password, or the Google, TikTok, or Instagram account you sign in with
- Payment and billing records: your plan, payments, and the brand and last four digits of your card (Stripe, our payment processor, holds the full card number); for creators we pay, the payout details they enter in our payout form, which we store with an extra layer of encryption. Payout details a creator types in an email are kept as ordinary message text, without that extra layer, and our AI models may read them to understand the reply
- Commercial information: campaigns, reservations, content delivered, and amounts paid
- Professional details: job title, company, and industry
- Creators' public social media information: name, handle, bio, profile photo, posts and captions, follower and engagement counts, city, and an email address for the creator, collected from Instagram, TikTok, and YouTube through data providers and from link-in-bio pages linked from those profiles, including for creators who have never used CreatoRain
- Messages: the content of emails and text messages sent to us or through our platform
- Meeting records: transcripts and summaries of video meetings with us, made with Fireflies
- Photos and videos: content you send us or post for a campaign
- Device and online activity: the technical information every web request carries (IP address, browser, device), a log of each request made to our Services, how you found our website if you submit the form where you ask for a free creator list, when you open our campaign emails and campaign links, and what you do in our apps
- Approximate location: from your IP address, and a creator's city or region, from the creator's profile or from the influencers.club search the creator matched
- Inferences: what we work out from the information above, such as a creator's niche and fit for a restaurant, whether a reply to our email shows interest, and a creator's likely gender, from the influencers.club search the creator matched, from our data provider Bright Data, or from the creator's public profile (such as pronouns)
- Other information you choose to give us
Your login details, and any bank account details a creator gives us for payment, are "sensitive personal information" under California law. We use them only to sign you in and to pay creators. Payout details a creator types into an email are kept as ordinary messages, which our AI models may read to understand and answer that email.
Selling and sharing: Restaurants pay to use our Services, and our Services give them access to the creator information we hold, including contact details, as described under Information Sharing above. Anyone who asks for a free creator list on our website gives us their contact details and receives creators' public profile information and our estimate of each creator's likely gender, as that section also describes. Apart from these, we do not sell personal information, and we do not share it for cross-context behavioral advertising.
California Consumer Rights
Our California Privacy Rights page lists the rights California residents have and how to use them.
To make a request, email privacy@creatorain.com. We will verify identity before responding and may request additional information.
Shine the Light
California residents can ask whether we have shared personal information with third parties for their direct marketing. We do not give personal information to other companies so that they can market their own products to you. Restaurants that use our Services may contact creators about campaigns.
Policy Changes
We reserve the right to amend this policy. Changes are reflected on the Services, with the "Effective Date" indicating updates. Material changes receive appropriate notice per legal requirements.
Contact Information
For questions or concerns: privacy@creatorain.com
Address: 30 5th St NE, 2nd Floor, Atlanta, GA 30308