Privacy Policy

1. Who we are

Creating In AI LLC (“AIAM,” “we,” “us”) is the controller of your personal information under the EU and UK General Data Protection Regulations, and the business responsible for it under California and other U.S. state privacy laws.

2. Notice at collection (summary)

• What we collect: identifiers and contact details, professional and portfolio information, account and security records, the content you submit, and (for Roster and Signed artists) engagement and payout records. If we contact your business about our services, the business details you or your company published. Section 3 has the full list.
• Why: to review applications, run the marketplace, productions and your account, keep the Service secure, and meet legal obligations. See Section 4.
• Never used for anyone’s marketing. We don’t give personal information to anyone for their marketing or sales purposes, and we don’t use it for targeted advertising.
• No third-party trackers. No analytics, advertising pixels or third-party cookies. We use a few first-party cookies and browser storage the site needs, note which tagged link brought you here, and record whether our own business emails are opened and their links followed. See Section 7.
• How long: only as long as needed, with fixed periods for each category in Section 8.
• Your rights: access, correction, deletion, portability and more, for everyone. See Sections 11 and 12.

3. What we collect

4. How we use it, and our legal bases

If you are in the EU, EEA, UK or Switzerland, the law requires a legal basis for each use. For everyone, this is the complete list of what we use personal information for.

Where we rely on legitimate interests, we have weighed them against your rights, and you can object (Section 11). The information marked as required on our forms is needed to review an application or provide the Service; without it we cannot do so. Everything else is optional.

5. AI and your data

• No training on you. We do not use your personal information or your content to train AI models, and we do not sell or license it to anyone who would.
• The AI terminal. The terminal on our home page is an automated AI assistant. What you type is sent to OpenRouter, Inc. (United States), which routes it to a third-party AI model provider to generate the answer. Those providers may be located outside the United States and may retain inputs under their own policies, and depending on the model may use them to improve their services. We do not store your question or link it to your account. Please don’t type personal or confidential information into it.
• Production tools. When a production uses third-party AI generation tools, the prompts and reference material for that project, which may include the likeness of a performer who has consented, are processed by those tools under that project’s agreements.

6. Who we share it with

We never give personal information to anyone for their marketing or sales purposes, and we don’t use it for targeted advertising. The providers above handle it only to do work for us.

7. Cookies and tracking

That is all. We use no analytics, advertising pixels, social-media trackers or third-party cookies, and we do not track you across other websites. Nothing above is used for advertising or shared with anyone, so we don’t show a cookie banner; if that ever changes, we will ask for your consent first where the law requires it.

Because we do no cross-site tracking, a browser “Do Not Track” signal has nothing to switch off. We treat a Global Privacy Control (GPC) signal as a valid request to opt out of any sale or sharing of your personal information.

8. How long we keep it

We keep information longer only where the law requires it or where we need it for an active legal claim, and then only for that purpose.

9. Security

We protect personal information with measures appropriate to the risk, including encryption in transit (TLS) and at rest by our providers; passwords and security answers stored only as bcrypt hashes and one-time tokens as SHA-256 hashes; sessions that expire every 12 hours, are limited to three devices and can be revoked server-side; and access restricted by role. No system is completely secure. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires, including within 72 hours to a supervisory authority where the GDPR applies.

10. International transfers

We are based in the United States, and your information is stored and processed primarily there. Some providers, such as AI model providers used by the terminal, may process it in other countries. When personal information from the EU, EEA, UK or Switzerland is transferred to a country without an adequacy decision, we rely on safeguards our providers offer, such as the European Commission’s Standard Contractual Clauses (with the UK Addendum) or certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. You can ask us for details of the safeguard that applies.

11. Your rights

12. How to exercise your rights

• Send a request to privacy@aiartists.media with the subject “Privacy request,” saying what you would like us to do. If you have an account, you can instead use Request my data or Close my account on your account page, where you can also update most profile details yourself.
• Verification. We confirm your identity before acting, usually by confirming control of the email on your account, and for Roster and Signed artists we may also ask your security questions. A request made from your account page while you are signed in is already verified. We only use what you give us for verification to verify you.
• Authorized agents. Someone can make a request for you with your signed permission. We may still ask you to verify your identity directly.
• Timing. We acknowledge requests within 10 business days and respond within 45 days (or within one month where the GDPR applies). If we need longer, we will tell you why, up to the further period the law allows. Requests are free unless they are manifestly unfounded or excessive.
• If we can’t fully agree. We will explain why, for example because the law requires us to keep a record. You can appeal by replying with the subject “Appeal” within 60 days. Someone not involved in the original decision will respond within 45 days. If you are still unhappy, you can contact your state Attorney General or your data-protection authority.

13. California (CCPA/CPRA) disclosures

In the past 12 months we have collected the following categories of personal information, as defined by the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the “CCPA”). For each, the sources are described in Section 3, the purposes in Section 4, and how long we keep it in Section 8. We have disclosed each category for a business purpose only to the recipients described, and we have not sold or shared any of them.

This table lists what we have actually collected in the past 12 months. If we start a feature described in Section 3 (“Features we may add”) that collects another category, we will add it here.

14. Other U.S. state disclosures

• Sale, targeted advertising and profiling. We do not sell personal data, process it for targeted advertising, or profile consumers in furtherance of decisions with legal or similarly significant effects, as those terms are defined in the Colorado, Connecticut, Virginia and similar state laws.
• Sensitive data. We do not process sensitive data as those laws define it, except a consenting performer’s voice or likeness where it qualifies, and then only with their express consent.
• Specific third parties. Where your state law gives you the right (for example Delaware, Maryland, Minnesota or Oregon), you can ask for a list of the specific third parties we have disclosed your personal data to.
• Nevada. We do not sell covered information as defined by Nevada law. You may still send an opt-out request to privacy@aiartists.media.
• Appeals are described in Section 12.

15. Children

The Service is for adults. You must be 18 or older to apply or hold an account, and the Service is not directed to children under 13. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact privacy@aiartists.media and we will delete it.

16. Launch and interest list

Before aiartists.media launched publicly, and for anyone who joins our interest list at any time afterward, we collect: your email address; whether you are an artist or a client; the optional reel/portfolio link or company you give us; and, if you followed a tagged or referral link to get here, how you found us. We use it only to email you when AIAM launches, and about the Founding Roster open call or the Studio Desk — whichever list you joined.

Legal basis: your consent, given when you join the list. You can withdraw it at any time.

Retention: we keep your interest-list entry until you unsubscribe, or for 12 months after launch, whichever comes first.

Every email we send from the interest list includes an unsubscribe link, and, as required by the U.S. CAN-SPAM Act, our postal address: 6650 Rivers Ave., Ste 100, Charleston, SC 29406, United States.

17. Changes to this policy

We keep this policy current as our services change. The version and effective date are shown at the top of this page, and earlier versions are available on request. This policy already covers the features we may add (Section 3) and the kinds of providers we use (Section 6): starting one of those features, or changing providers within a category, is not a change to this policy, though we keep its details up to date. If we make a material change, meaning we would use personal information in a way this policy doesn’t describe and that significantly affects you, we will tell account holders by email or on the Service before it takes effect, and ask for your consent where the law requires it. This policy is a notice of how we handle information, not part of our Terms, so you never need to accept it again when it changes: the current version is always the one on this page.

18. Contact

For privacy questions or requests: