The Create Corporation and its subsidiaries, affiliates, and brands (collectively, the "Create Corporation Family of Companies"), a California corporation, are committed to transparency about our data practices and to protecting the privacy of your personal information. This Privacy Policy describes how we collect, use, disclose, and otherwise process personal information in connection with our Services, as well as the rights and choices available to you regarding your personal information.

This Privacy Policy applies to all websites, domains, subdomains, applications, interactive features, streaming services, events, merchandise stores, and other digital products and services owned, operated, or controlled by The Create Corporation or any member of the Create Corporation Family of Companies that link to or reference this policy (collectively, the "Services").

Some of our Services are ad-supported, which helps keep content accessible and many Services free for users.

We are committed to complying with all applicable privacy and data protection laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), the General Data Protection Regulation ("GDPR"), the United Kingdom Data Protection Act 2018 ("UK DPA 2018"), the Children's Online Privacy Protection Act ("COPPA"), the CAN-SPAM Act, and all other applicable federal, state, and international laws and regulations governing the collection, use, and protection of personal information.

By accessing or using our Services, you acknowledge that you have read and understand this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein. If you do not agree with the practices described in this Privacy Policy, please do not access or use our Services. Please also review our Terms of Service at /legal/terms-of-service, which govern your use of our Services.

2.1 Information You Provide Directly We collect information that you voluntarily provide to us when you register for an account, make a purchase, subscribe to a service, participate in interactive features, enter a contest or promotion, complete a survey, communicate with us, or otherwise interact with our Services. This information may include: your name, email address, mailing address, telephone number, date of birth, payment and billing information (processed through PCI-DSS compliant third-party payment processors), Twitch username, Discord username, social media handles, profile photographs, casting submissions (including video and audio recordings), talent applications and related materials, game show participation data, astrological birth data (including date of birth, time of birth, and place of birth), audience interaction data, survey and contest responses, and any other information you choose to provide.

2.2 Information Collected Automatically When you access or use our Services, we automatically collect certain information about your device, browsing activity, and interactions. This information may include: your Internet Protocol (IP) address, browser type and version, operating system, device identifiers, advertising identifiers (including Apple's Identifier for Advertisers (IDFA) and Google Advertising ID (GAID)), cross-device identifiers, referring URLs, pages viewed, links clicked, time spent on pages, access times and dates, approximate geolocation derived from your IP address, content viewing history, streaming interaction data (including viewing duration, chat participation, poll responses, and voting activity), connected television (CTV) data, in-app behavior and usage patterns, and interaction data associated with interactive features and live content.

2.3 Information from Third Parties We may receive information about you from third-party sources, which we may combine with the information we collect directly from you or automatically through our Services. These third-party sources include: authentication providers such as Twitch and Discord, streaming platforms, payment processors, advertising networks, data brokers and data enrichment providers, audience measurement providers, social media platforms, analytics partners, and publicly available sources.

2.4 Cookies and Tracking Technologies We and our partners use cookies, web beacons, pixels, SDKs, local storage, and similar tracking technologies to collect information about your use of our Services. These technologies fall into four categories: Essential Cookies: Required for the basic operation of our Services, including authentication, session management, and security functions. These cookies cannot be disabled. Performance and Analytics Cookies: Help us understand how our Services are used, measure traffic, identify errors, and analyze usage patterns to improve the performance and functionality of our Services. Functional Cookies: Remember your preferences, language selections, and region settings to provide a more personalized experience. Advertising and Targeting Cookies: Used to deliver relevant advertising, measure advertising effectiveness, and build audience segments for targeted advertising purposes. These technologies may be placed by us or by third-party advertising partners operating under their own privacy policies.

You may control your cookie preferences through your browser settings, our cookie consent mechanism, or the "Your Privacy Choices" link available in the footer of our Services. We honor Global Privacy Control (GPC) browser signals as valid opt-out requests in accordance with applicable law.

2.5 Sensitive Personal Information We do not intentionally collect sensitive personal information as defined by the CCPA/CPRA, including Social Security numbers, driver's license numbers, precise geolocation data, racial or ethnic origin, religious or philosophical beliefs, genetic data, biometric data processed for identification purposes, health information, or information concerning sexual orientation. If such information is received incidentally through our Services, it will be processed only as necessary to provide the Services and in compliance with applicable law. Exception: astrological birth data (including date of birth, time of birth, and place of birth) voluntarily provided to our astrology services is treated with heightened security protections and is used solely for the purpose of generating natal chart calculations and astrological content.

2.6 Inferences and Derived Data We may derive information about you from the data we collect, including preferences, characteristics, psychological trends, predispositions, behaviors, attitudes, intelligence, abilities, and aptitudes, as well as audience segments. This derived information may be used for purposes such as content personalization, recommendations, advertising, and analytics.

We use the personal information we collect for the following business and commercial purposes: (a) to provide, maintain, improve, and personalize our Services, including content recommendations and user experience enhancements; (b) to process transactions, send confirmations, invoices, and shipping notifications; (c) for account management, identity authentication, and customer support; (d) to communicate with you about products, services, events, and promotions, subject to your communication preferences; (e) to facilitate interactive features, including polls, voting, live chat, and audience participation elements; (f) to monitor and analyze trends, usage patterns, and user behavior for business intelligence and service optimization; (g) to detect, prevent, and address fraud, abuse, illegal activity, and to protect the rights, privacy, safety, and property of The Create Corporation, our users, and the public; (h) to comply with legal obligations, respond to lawful requests, and cooperate with law enforcement and regulatory authorities; (i) to facilitate casting, employment, and talent management activities; (j) to deliver, personalize, and measure the effectiveness of advertising, including interest-based and contextual advertising; (k) to create audience segments and profiles for advertising, personalization, and analytics; (l) to develop, improve, and train artificial intelligence models, machine learning systems, and automated content generation tools used in our Services; and (m) to carry out any other purpose described to you at the time of collection.

Where required by applicable law, we process your personal information on one or more of the following legal bases: performance of a contract with you; compliance with our legal obligations; our legitimate business interests, where such interests are not overridden by your rights and freedoms; and your consent, where consent is required or provided.

We share personal information with third parties as described below. Some of these activities, such as sharing information with advertising partners, analytics providers, or related businesses, may be considered a "sale" or "sharing" of personal information under certain state privacy laws, including the California Consumer Privacy Act (CCPA/CPRA). Where applicable, you have the right to opt out of such activities as described in this Privacy Policy and on our Do Not Sell or Share page.

4.1 Service Providers We engage third-party service providers to perform business functions on our behalf, including cloud hosting and infrastructure, payment processing, email delivery and communications, analytics and reporting, customer support, content delivery networks, shipping and fulfillment, content generation and artificial intelligence providers, and audience measurement services. These service providers are contractually obligated to use your information only for the purposes of performing services on our behalf and are prohibited from using your personal information for their own independent purposes, including training their own AI models.

4.2 Advertising and Analytics Partners We may share identifiers, device information, browsing and usage data, inferences, and audience segments with advertising networks, demand-side platforms, data analytics providers, and social media platforms to deliver, measure, and improve advertising across our Services and third-party platforms. These partners may combine information we share with data they collect independently. This activity may be classified as a "sale" or "sharing" of personal information under applicable state privacy laws.

4.3 Create Corporation Family of Companies We may share information among The Create Corporation's subsidiaries, affiliates, and brands for purposes consistent with this Privacy Policy, including service improvement, cross-platform personalization, joint marketing, advertising, and security.

4.4 Business Transfers In the event of a merger, acquisition, reorganization, sale of assets, financing, bankruptcy, or similar transaction, your personal information may be transferred as a business asset. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

4.5 Legal Requirements We may disclose your personal information when required to do so by law, regulation, legal process, or governmental request, including requests related to national security or law enforcement. We will attempt to notify you before disclosing your information in response to such requests, unless we are prohibited from doing so by law or court order.

4.6 Protection of Rights We may disclose your personal information when we believe disclosure is necessary to protect the rights, privacy, safety, or property of The Create Corporation, our users, or the public, to enforce our Terms of Service, or to investigate potential violations thereof.

4.7 With Your Consent We may share your personal information for any other purpose disclosed to you at the time of collection, with your consent or at your direction.

4.8 Aggregated or De-Identified Data We may share aggregated or de-identified information that cannot reasonably be used to identify you, without restriction. We maintain technical and organizational measures to prevent re-identification of de-identified data.

Under the California Consumer Privacy Act, we are required to disclose the categories of personal information we collect, the sources from which we collect it, the business purposes for collection, and the categories of third parties with whom we share it.

Identifiers (such as name, email address, IP address, device identifiers, and advertising identifiers): Collected directly from you and automatically through your use of our Services. Used for account management, communications, security, and advertising. Shared with service providers, advertising partners, and analytics providers.

Commercial Information (such as purchase history, subscription records, content viewing history, and merchandise orders): Collected directly from you and automatically through your use of our Services. Used for transaction processing, personalization, and content recommendations. Shared with payment processors, shipping and fulfillment partners, and service providers.

Internet or Other Electronic Network Activity Information (such as browsing history, search history, interaction data, streaming activity, and voting and poll participation): Automatically collected through your use of our Services. Used for service improvement, analytics, and advertising. Shared with analytics providers and advertising partners.

Geolocation Data (such as approximate location derived from your IP address): Automatically collected through your use of our Services. Used for localized content delivery, regional advertising, and legal compliance. Shared with advertising partners and service providers.

Audio, Electronic, Visual, and Similar Information (such as casting submissions, profile photographs, voice recordings, and video content): Collected directly from you. Used for casting, talent management, content creation, and entertainment production. Shared with production partners and service providers.

Professional or Employment-Related Information (such as talent applications, casting history, and employment applications): Collected directly from you. Used for casting, employment, and talent management. Shared with production partners and service providers.

Inferences (such as preferences, characteristics, behaviors, and audience segments): Derived from the categories described above. Used for content personalization, targeted advertising, and recommendations. Shared with advertising partners and analytics providers.

Sensitive Personal Information (such as date of birth and astrological birth data including time and place of birth): Collected directly from you. Used for service functionality only, such as natal chart calculations in our astrology services. Shared with service providers under contractual restrictions. Not used for advertising or profiling purposes.

In the preceding twelve (12) months, we may have "sold" or "shared" (as those terms are defined by the CCPA/CPRA) the following categories of personal information: identifiers, internet or other electronic network activity information, and inferences. These disclosures were made to advertising networks, analytics providers, and social media platforms for purposes of targeted advertising and audience measurement.

6.1 California Residents (CCPA/CPRA) If you are a California resident, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act: Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the purposes for which it was collected, and the categories of third parties with whom it was shared. Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions permitted by law. Right to Correct: You have the right to request correction of inaccurate personal information that we maintain about you. Right to Opt Out of Sale/Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. Right to Limit Use of Sensitive Personal Information: You have the right to direct us to limit the use and disclosure of your sensitive personal information to purposes necessary to provide the Services. Right to Data Portability: You have the right to obtain a copy of your personal information in a portable, machine-readable format. Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. To exercise your rights, you may contact us at privacy@thecreatecorporation.com, visit our Do Not Sell or Share page at /legal/do-not-sell, or enable Global Privacy Control (GPC) in your browser. We will verify your identity before processing your request and may require you to provide additional information for verification purposes. You may also designate an authorized agent to submit a request on your behalf, provided the agent presents written authorization signed by you.

6.2 EEA and UK Residents (GDPR) If you are located in the European Economic Area or the United Kingdom, you have the following rights under the General Data Protection Regulation and the UK Data Protection Act 2018: Right of Access: You have the right to obtain confirmation of whether we process your personal data and to request a copy of that data. Right to Rectification: You have the right to request correction of inaccurate personal data. Right to Erasure: You have the right to request deletion of your personal data, subject to certain exceptions. Right to Restrict Processing: You have the right to request restriction of processing of your personal data under certain circumstances. Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller. Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes. Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. You also have the right to lodge a complaint with a supervisory authority in your jurisdiction. Our legal bases for processing personal data include consent, contract performance, legitimate interests, and compliance with legal obligations. To exercise your rights, contact us at privacy@thecreatecorporation.com.

6.3 Nevada Residents Nevada residents may opt out of the sale of certain covered information as defined under Nevada law by contacting us at privacy@thecreatecorporation.com.

6.4 Other US State Residents Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with applicable privacy laws may exercise rights to access, correct, and delete personal information, obtain a portable copy of personal information, and opt out of targeted advertising, sales of personal information, and profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise your rights, contact us at privacy@thecreatecorporation.com.

We will respond to verified privacy rights requests within forty-five (45) days of receipt. If additional time is required, we will notify you of an extension, which shall not exceed an additional forty-five (45) days. We will not charge a fee to process your request unless it is excessive, repetitive, or manifestly unfounded.

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements.

Account information is retained for the duration of your active account relationship with us. Upon account deletion, your personal information will be permanently deleted or anonymized within thirty (30) days, except where retention is required by law or for legitimate business purposes such as fraud prevention, financial reporting, and compliance with legal obligations.

Transaction records, including purchase history and payment information, are retained for seven (7) years for financial reporting, tax compliance, and audit purposes.

Anonymized and aggregated data that cannot reasonably be used to identify you may be retained indefinitely for analytics, research, and business purposes.

We implement reasonable technical, administrative, and physical security measures designed to protect the confidentiality, integrity, and availability of your personal information against unauthorized access, disclosure, alteration, destruction, and other forms of unlawful processing.

Our security measures include encryption of data in transit using Transport Layer Security (TLS 1.3) and encryption of data at rest using Advanced Encryption Standard (AES-256). Sensitive data categories, such as astrological birth data, are subject to application-level encryption and additional access controls.

We maintain comprehensive security practices including role-based access controls, multi-factor authentication, regular security assessments and penetration testing, vulnerability scanning and remediation, employee security awareness training, incident response procedures, and secure software development lifecycle practices.

In the event of a data breach affecting your personal information, we will notify affected users and relevant regulatory authorities as required by applicable law, including within the timeframes mandated by the CCPA, GDPR, and other applicable data breach notification laws.

No method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee absolute security.

Our Services are primarily operated from the United States. If you access our Services from outside the United States, your personal information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate, which may have different data protection laws than your jurisdiction.

Where required by applicable law, we implement appropriate safeguards for international data transfers, including Standard Contractual Clauses approved by the European Commission, and the UK Addendum to the Standard Contractual Clauses where applicable. By using our Services, you acknowledge and consent to the transfer of your information to the United States and other jurisdictions as described in this Privacy Policy.

Our Services are not directed to children under the age of thirteen (13), and we do not knowingly collect personal information from children under 13. If you are under 13 years of age, please do not use our Services or provide any personal information to us.

If we learn that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to promptly delete that information from our systems. For users between the ages of 13 and 16, we will not sell or share their personal information without affirmative authorization as required by applicable law.

If you believe we have inadvertently collected personal information from a child under 13, please contact us immediately at privacy@thecreatecorporation.com so that we can take appropriate action.

Our Services may contain links to, or integrations with, third-party websites, platforms, and services, including but not limited to Twitch, YouTube, Discord, Instagram, X (formerly Twitter), TikTok, and other social media and content platforms.

This Privacy Policy does not apply to third-party websites, platforms, or services. We are not responsible for the privacy practices, content, or security of any third-party services. We encourage you to review the privacy policies and terms of service of any third-party services you access through or in connection with our Services.

We and our advertising partners use cookies, pixels, SDKs, and similar technologies to deliver, measure, and improve advertising across our Services. This includes:

Interest-Based Advertising: We may deliver advertisements based on your inferred interests, derived from your browsing activity, content interactions, and viewing data across our Services and, where applicable, across third-party platforms.

Cross-Device Tracking: We may connect your activity across multiple devices associated with your account or device identifiers in order to provide a unified experience and deliver relevant advertising regardless of the device you are using.

Audience Segmentation: We may create audience segments based on your demographics, interests, and behaviors, and share these segments with advertising partners for targeted advertising campaigns and campaign measurement.

Measurement and Attribution: We and our partners evaluate advertising performance, campaign effectiveness, and return on advertising spend using various measurement and attribution methodologies.

Third-party advertising partners may combine information collected through our Services with data from other sources, and may use their own cookies and tracking technologies, subject to their own privacy policies.

You may manage your advertising preferences through our cookie consent mechanism, the "Your Privacy Choices" link in the footer of our Services, or by enabling Global Privacy Control (GPC) in your browser. You may also opt out of certain interest-based advertising through the Digital Advertising Alliance at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.

We may use artificial intelligence, machine learning, and automated systems across our Services for purposes including content generation, personalization, audience analysis, advertising optimization, content moderation, fraud detection, and other business purposes.

When we use AI-powered content generation (such as astrological interpretations, automated show elements, personalized recommendations, or interactive features), such content is generated algorithmically and may contain inaccuracies. AI-generated content does not constitute professional, medical, financial, legal, or any other form of advice. Certain AI-powered features may use branded personas or characters; these personas are AI-generated, not human individuals, and their outputs should not be relied upon as a substitute for professional consultation.

Where required by applicable law, we will inform you when you are interacting with AI-generated content or when automated decision-making is being used in a manner that produces legal or similarly significant effects.

We may use de-identified or aggregated data to develop, improve, and train AI models and machine learning systems used in our Services. We contractually prohibit our service providers from using your personal information to train their own AI models without your consent.

Under California Civil Code Section 1798.83, California residents who have an established business relationship with us may request information about our disclosure of personal information to third parties for their direct marketing purposes during the preceding calendar year. To make such a request, please contact us at privacy@thecreatecorporation.com.

We may send you marketing communications about our products, services, events, and promotions that we believe may be of interest to you. You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link included in our emails, adjusting your communication preferences in your account settings, or contacting us at privacy@thecreatecorporation.com.

Please note that even if you opt out of marketing communications, we may continue to send you transactional and service-related messages, such as order confirmations, account notifications, security alerts, and updates to our legal terms.

The Create Corporation is committed to ensuring that our privacy practices are accessible to all users, including those with disabilities. If you need this Privacy Policy or any other privacy-related communication in an alternative format, or if you require assistance in exercising your privacy rights, please contact us at privacy@thecreatecorporation.com and we will work to accommodate your needs.

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will post the revised Privacy Policy with an updated effective date and, where required by applicable law, provide additional notice by email or other direct notification.

Your continued use of our Services after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

If you have questions, concerns, or complaints about this Privacy Policy, our data practices, or if you wish to exercise your privacy rights, please contact us at: The Create Corporation Email: privacy@thecreatecorporation.com Website: https://thecreatecorporation.com

For inquiries related to the General Data Protection Regulation (GDPR) or the UK Data Protection Act 2018, please direct your correspondence to privacy@thecreatecorporation.com.

California residents who are not satisfied with our response to a privacy request may contact the California Attorney General at https://oag.ca.gov/contact.