The Create Corporation ("Company," "we," "us," or "our"), a California corporation, is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, retain, and safeguard information when you visit any of our websites — including TheCreateCorporation.com, CreateAgency.co, and all other domains and subdomains owned or operated by the Company and its subsidiaries — use our applications, attend our events, interact with our streaming content, purchase merchandise, or otherwise engage with our products and services (collectively, the "Services").

This Privacy Policy applies to all users of our Services worldwide. We comply with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA), the UK Data Protection Act 2018, the Children's Online Privacy Protection Act (COPPA), the CAN-SPAM Act, and all other applicable federal, state, and international data protection laws.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, do not use our Services.

2.1 Information You Provide Directly. We collect information you voluntarily provide when you register for an account, subscribe to our services, purchase merchandise, apply for casting or employment, sign up for notifications, participate in contests or surveys, request customer support, or otherwise communicate with us. This may include: your name, email address, mailing address, phone number, date of birth, payment information (processed through PCI-DSS compliant third-party processors), Twitch username, Discord username, social media handles, profile photographs, casting submissions (including video and audio recordings), and any other information you choose to provide.

2.2 Information Collected Automatically. When you access our Services, we automatically collect certain information, including: your IP address, browser type and version, operating system, device identifiers, referring URLs, pages viewed, links clicked, time spent on pages, access times and dates, approximate geographic location derived from IP address, and interaction data with our streaming content (such as viewing duration, chat participation, poll responses, and voting activity).

2.3 Information from Third Parties. We may receive information about you from third parties, including: authentication providers (such as Twitch and Discord) when you use social login, streaming platforms that provide aggregated interaction data, payment processors that confirm transaction completion, advertising and analytics partners, and publicly available sources.

2.4 Cookies and Tracking Technologies. We use cookies, web beacons, pixels, local storage, and similar technologies to collect information about your browsing activities. Essential cookies are necessary for the operation of our Services. Analytics cookies help us understand how our Services are used. Functional cookies remember your preferences. You may control cookie preferences through your browser settings or our cookie consent mechanism. We honor Do Not Track browser signals in accordance with California law.

2.5 Sensitive Personal Information. We do not intentionally collect sensitive personal information as defined by the CCPA/CPRA (such as Social Security numbers, driver's license numbers, precise geolocation, racial or ethnic origin, religious beliefs, genetic data, biometric data for identification, health information, or sexual orientation). If we receive sensitive personal information incidentally, we will process it only as necessary to provide the Services and will not use it for profiling or advertising purposes.

We use the information we collect for the following business and commercial purposes: (a) to provide, maintain, improve, and personalize our Services; (b) to process transactions and send related information, including purchase confirmations, invoices, and merchandise shipping notifications; (c) to create and manage your account, authenticate your identity, and provide customer support; (d) to communicate with you about products, services, events, and promotions, and to provide news and information we believe will be of interest to you (subject to your communication preferences); (e) to facilitate your participation in interactive features of our Services, including live polls, voting, chat, and audience interaction systems; (f) to monitor and analyze trends, usage, and activities in connection with our Services for business intelligence and improvement purposes; (g) to detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities, and to protect the rights, property, and safety of the Company and others; (h) to comply with legal obligations, respond to lawful requests from public authorities, and enforce our terms and policies; (i) to facilitate casting, employment, and talent management activities; and (j) to carry out any other purpose described to you at the time the information was collected.

We process personal information under the following legal bases: performance of a contract to which you are a party, compliance with our legal obligations, our legitimate interests (where those interests are not overridden by your rights and freedoms), and your consent where required by applicable law.

We do not sell your personal information as defined by the CCPA/CPRA, and we have not sold personal information in the preceding twelve (12) months. We do not share your personal information for cross-context behavioral advertising purposes. We may disclose your personal information in the following circumstances:

4.1 Service Providers. We share information with third-party service providers who perform services on our behalf, including cloud hosting providers, payment processors, email delivery services, analytics providers, customer support tools, content delivery networks, and shipping and fulfillment partners. These providers are contractually obligated to use personal information only as necessary to provide services to us and are prohibited from using it for their own purposes.

4.2 Business Transfers. In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred as a business asset. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements. We may disclose your information when required by law, regulation, legal process, or governmental request, including to meet national security or law enforcement requirements. We will attempt to notify you about legal demands for your personal information when appropriate, unless prohibited by law or court order.

4.4 Protection of Rights. We may disclose information when we believe disclosure is necessary to protect our rights, privacy, safety, or property, or that of our users or the public, including to enforce our Terms of Service and to investigate potential violations.

4.5 With Your Consent. We may share your information for any other purpose disclosed to you with your consent or at your direction.

4.6 Aggregated or De-Identified Data. We may share aggregated or de-identified information that cannot reasonably be used to identify you, without restriction.

5.1 California Residents (CCPA/CPRA). If you are a California resident, you have the right to: (a) know what personal information we collect, use, disclose, and sell; (b) request deletion of your personal information, subject to certain exceptions; (c) correct inaccurate personal information; (d) opt-out of the sale or sharing of your personal information (though we do not sell or share personal information for advertising); (e) limit the use and disclosure of sensitive personal information; and (f) not be discriminated against for exercising your privacy rights. You may exercise these rights by contacting us at [email protected]. We will verify your identity before processing your request. You may designate an authorized agent to make a request on your behalf.

5.2 European Economic Area and United Kingdom Residents (GDPR). If you are located in the EEA or UK, you have the right to: (a) access your personal data; (b) rectify inaccurate personal data; (c) request erasure of your personal data; (d) restrict the processing of your personal data; (e) data portability; (f) object to the processing of your personal data; and (g) withdraw your consent at any time where processing is based on consent. You may also lodge a complaint with your local supervisory authority. To exercise these rights, contact us at [email protected].

5.3 Nevada Residents. Nevada consumers may opt out of the sale of covered information. Although we do not sell personal information, Nevada residents may submit an opt-out request to [email protected].

5.4 Virginia, Colorado, Connecticut, Utah, and Other State Residents. Residents of states with applicable privacy laws may exercise rights to access, correct, delete, or obtain a copy of their personal information, and to opt out of targeted advertising, sales, and profiling. Contact us at [email protected].

We will respond to verified consumer requests within forty-five (45) days, with the possibility of a forty-five (45) day extension where reasonably necessary. We will not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. The retention period varies based on the type of data, the purpose of processing, and applicable legal requirements. Account information is retained for the duration of your account and for a reasonable period thereafter. Transaction records are retained for seven (7) years to comply with financial and tax reporting obligations. When personal information is no longer required, we securely delete or anonymize it.

We implement and maintain reasonable technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include: encryption of data in transit (TLS 1.2 or higher) and at rest (AES-256), access controls and authentication mechanisms, regular security assessments and vulnerability testing, employee training on data protection practices, incident response procedures, and secure development practices. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your information.

Our Services are primarily operated from the United States. If you access our Services from outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy, including the use of Standard Contractual Clauses approved by the European Commission where required.

Our Services are not directed to children under the age of thirteen (13), and we do not knowingly collect personal information from children under thirteen (13). If you are under thirteen (13), do not use our Services or provide any information to us. If we learn that we have collected personal information from a child under thirteen (13) without verification of parental consent, we will promptly delete that information. If you believe we have collected information from a child under thirteen (13), please contact us at [email protected]. For users between thirteen (13) and sixteen (16) years of age, we will not sell or share their personal information without affirmative authorization.

Our Services may contain links to third-party websites, services, and applications, including Twitch, YouTube, Discord, Instagram, and X (formerly Twitter). This Privacy Policy does not apply to third-party services, and we are not responsible for the privacy practices of those services. We encourage you to review the privacy policies of any third-party services you access through our Services.

We may send you marketing communications about our products, services, and events. You may opt out of receiving marketing communications at any time by: clicking the "unsubscribe" link in any marketing email, updating your communication preferences in your account settings, or contacting us at [email protected]. Even if you opt out of marketing communications, we may still send you transactional or service-related messages, such as order confirmations, account notifications, and security alerts.

We use analytics services, including Google Analytics, to help us understand how users interact with our Services. These services may use cookies and similar technologies to collect information about your browsing activities. We do not use your personal information for targeted advertising across third-party websites. We do not participate in interest-based advertising networks. You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Under California Civil Code Section 1798.83, California residents who have provided personal information to a business with which they have an established business relationship may request information about whether the business has disclosed personal information to any third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

We are committed to ensuring that our privacy practices are accessible to all users, including those with disabilities. If you need this Privacy Policy in an alternative format or have difficulty accessing it, please contact us at [email protected].

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on our website with a revised "Last Updated" date, and where required by law, we will provide additional notice (such as an email notification). Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact us at:

The Create Corporation Email: [email protected] Website: https://thecreatecorporation.com For GDPR-related inquiries, you may also contact our Data Protection representative at [email protected].

If you are a California resident and are not satisfied with our response to your privacy rights request, you may contact the California Attorney General at https://oag.ca.gov/contact.