Privacy

‍

Thanks for visiting Creatable! Creatable (“Creatable”, “we”, “us” or “our”) respects your privacy. When it comes to your personal information, we believe in transparency, not surprises. That’s why we’ve set out here what personal information we collect, what we do with it and your choices and rights. By using any of Creatable’s Services, you confirm you have agreed to the Terms of Service and have read and understand this Privacy Policy and our Cookie Policy.

1. How does this Privacy Policy apply?

This Privacy Policy describes what we do with information that we collect and use in order to provide our service. We collect only the personal information you knowingly provide, such as information you fill out in a form when setting up your account or information you submit to our customer support. We use cookies and similar technologies strictly to deliver our analytics about performance on a website and without any ability to track the identity of a consumer.

Please see our Terms of Service to learn more about how we act as a “Service Provider” if you are a “Business” under the CCPA with respect to data of your “Consumers” (as defined under the CCPA) which meets the definition of “Personal Information” under the CCPA.

‍2. Personal information we collect

We collect various personal information regarding you or your device. This includes the following:

• Information you provide to create an Account, specifically email address, first name, and last name. If you sign up for paid services, we receive a portion of your payment information from our payment processor (such as the last four digits, the country of issuance and the expiration date of the payment card) and we ask you to select your jurisdiction.
• Your marketing preferences.
• The emails and other communications that you send us or otherwise contribute, such as customer support inquiries or posts to our customer message boards or forums. Please be aware that information on public parts of our sites is available to others.
• Information you share with us in connection with surveys, contests or promotions.
• Information we get from our partners to support our marketing initiatives, improve our services and better monitor, manage and measure our ad campaigns, such as details about when a partner of ours shows you one of our ads on or via its advertising platform.
• Other information you submit to us directly or through third party services.
  

3. How we collect personal information

We obtain personal information from various sources. We do this in three main ways:

• You provide some of it directly (such as by registering for an Account).
• We receive some of it from third parties.

Sometimes we require you to provide us with information for contractual or legal reasons. For example, we may ask you to select your jurisdiction when you sign up for paid services to determine if, and how much, tax we need to collect from you, or any forms we must issue in connection with any payment to you. We’ll normally let you know when information is required, and the consequences of failing to provide it. If you do not provide personal information when requested, you may not be able to use our services if that information is necessary to provide you with the service or if we are legally required to collect it.

3.3 Personal information obtained from other sources

If you use a third party service (such as Google) to register for an Account, the third party service may provide us with your third party service account information on your behalf, such as your name and email address (we don’t collect or store passwords you use to access third party service). Your privacy settings on the third party service normally control what they share with us. Make sure you are comfortable with what they share by reviewing their privacy policies and, if necessary, modifying your privacy settings directly on the third party service.

4. How we use your personal information

We use the personal information we obtain about you for the following purposes:

• Provision of the service. Create and manage your Account, provide and personalize our services, process payments and respond to your inquiries.
• Communicating with you. Communicate with you, including by sending you emails about your transactions and Service-related announcements.
• Surveys and contests. Administer surveys, contests and other promotions.
• Promotion. Promote our services and send you tailored marketing communications about products, services, offers, programs and promotions of Creatable and our partners and measure the success of those campaigns. For example, we may send different marketing communications to you based on your subscription plan or what we think may interest you based on other information we hold about you.
• Advertising. Analyze your interactions with our Services and third parties’ online services so we can tailor our advertising to what we think will interest you. For example, we may decide not to advertise our services to you on a social media site if you already signed up for a particular service or we may choose to serve you a particular advertisement based on your subscription plan or what we think may interest you based on other information we hold about you.
• Customizing the services. Provide you with customized services. For example, we use your location information to determine your language preferences or display accurate date and time information. We also use cookies and similar technologies for this purpose, such as remembering which of Your Sites you most recently edited.
• Improving our services. Analyze and learn about how the Services are accessed and used, evaluate and improve our Services (including by developing new products and services and managing our communications) and monitor and measure the effectiveness of our advertising. We usually do this based on anonymous, pseudonymized or aggregated information which does not focus on you individually. For example, if we learn that most users of a certain service use a particular integration or feature, we might wish to expand on that integration or feature.
• Security. Ensure the security and integrity of our services.
• Third-party relationships. Manage our vendor and partner relationships.
• Enforcement. Enforce our Terms of Service and other legal terms and policies.
• Protection. Protect our and others’ interests, rights and property (e.g., to protect our Users from abuse).
• Complying with law. Comply with applicable legal requirements, such as tax and other government regulations and industry standards, contracts and law enforcement requests.
  

We process your personal information for the above purposes when:

• Consent. You have consented to the use of your personal information in a particular way. When you consent, you can change your mind at any time.  
• Performance of a contract. We need your personal information to provide you with services and products requested by you, or to respond to your inquiries. In other words, so we can perform our contract with you or take steps at your request before entering into one. For example, we need your email address so you can sign in to your Creatable account.
• Legal obligation. We have a legal obligation to use your personal information, such as to comply with applicable tax and other government regulations or to comply with a court order or binding law enforcement request.
• Legitimate interests. We have a legitimate interest in using your personal information. In particular, we have a legitimate interest in the following cases:
• To operate the Creatable business and provide you with tailored advertising and communications to develop and promote our business.
• To analyze and improve the safety and security of our Services - we do this as it is necessary to pursue our legitimate interests in ensuring Creatable is secure, such as by implementing and enhancing security measures and protections and protecting against fraud, spam, and abuse.
• To provide and improve the Services, including any personalized services - we do this as it is necessary to pursue our legitimate interests of providing an innovative and tailored offering to our Users on a sustained basis.
• To share your personal information with other Creatable group companies that help us provide and improve the Services.
• To anonymize and subsequently use anonymized information.
• Protecting you and others. To protect your vital interests or those of others.
• Others’ legitimate interests. Where necessary for the purposes of a third party’s legitimate interests, such as our partners who have a legitimate interest in delivering tailored advertising to you and monitoring and measuring its effectiveness or our Users who have a legitimate interest in having their sites function properly and securely and analyzing the usage of their sites so they can understand trends and improve their services.

We share personal information in the following ways:

• Users.  We share with our users data regarding usage by consumers or "end users" on their sites. For example, we provide a user with information about what web page the end user visited before coming to their site and how their end users interacted with their site. This is so users can analyze the usage of their sites and improve their services.
• Business partners.  We may share personal information with business partners. For example, we may share your personal information when our services are integrated with their third party services, but only when you have been informed or would otherwise expect such sharing.
• Service providers. We share personal information with our service providers that perform services on our behalf. For example, we may use third parties to help us provide customer support, manage our advertisements on other sites, send marketing and other communications on our behalf or assist with data storage.
• Process payments. We transmit your personal information via an encrypted connection to our payment processor.  
• Following the law or protecting rights and interests. We disclose your personal information if we determine that such disclosure is reasonably necessary to comply with the law, protect our or others’ rights, property or interests (such as enforcing our Terms of Service) or prevent fraud or abuse of Creatable or our users or end users. In particular, we may disclose your personal information in response to lawful requests by public authorities, such as to meet national security or law enforcement requirements.
• Business transfers. If we're involved in a reorganization, merger, acquisition or sale of some or all of our assets, your personal information may be transferred as part of that deal or the negotiation of contemplated deals.

6. Your rights and choices‍

Where applicable law requires (and subject to any relevant exceptions under law), you may have the right to access, update, change or delete personal information. You can access, update, change or delete personal information (or that of your end users) either directly in your Account or by contacting us at privacy@creatable.io to request the required changes. You can exercise your other rights (including deleting your Account) by contacting us via your Account at the same email address. Please note that we may need to verify your identity in connection with your requests, and such verification process may, if you do not have access to your Account, require you to provide us with additional information (e.g. government identification). Even if you have access to your Account, we may request additional information if we believe it’s necessary to verify your identity. If we are unable to verify your identity or request, we may not, in accordance with applicable law, be able to fulfill your request.

You can also elect not to receive marketing communications by changing your preferences in your Account or by following the unsubscribe instructions in such communications.

Please note that, for technical reasons, there is likely to be a delay in deleting your personal information from our systems when you ask us to delete it. We also will retain personal information in order to comply with the law, protect our and others’ rights, resolve disputes or enforce our legal terms or policies, to the extent permitted under applicable law.

You may have the right to restrict or object to the processing of your personal information or to exercise a right to data portability under applicable law. You also may have the right to lodge a complaint with a competent supervisory authority, subject to applicable law. If you are subject to EU data protection laws, we suggest you lodge any such complaints with our lead supervisory authority using the following contact information:

Privacy Officer
6827 Nancy Ridge Drive, San Diego, CA 92121
Phone +1 858 427-4909
Fax: +1 858 427-4951
Email: info@creatable.io

Additionally, if we rely on consent for the processing of your personal information, you have the right to withdraw it at any time and free of charge. When you do so, this will not affect the lawfulness of the processing before your consent withdrawal.

If you are an end user of one of our user’s sites, you should contact them to exercise your rights with respect to any information they collect about you.

7. How we protect your personal information

While no service is completely secure, we have a team dedicated to keeping personal information safe. We maintain administrative, technical and physical safeguards that are intended to appropriately protect against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse and any other unlawful form of processing, of the personal information in our possession. We employ security measures such as using firewalls to protect against intruders, building redundancies throughout our network (so that if one server goes down, another can cover for it) and testing for and protecting against network vulnerabilities.

8. How we retain your personal information

We retain personal information regarding you or your use of the services for as long as your Account is active or for as long as needed to provide you or our users with the services. We also retain personal information for as long as necessary to achieve the purposes described in this Privacy Policy, for example, to comply with our legal obligations, to protect us in the event of disputes and to enforce our agreements and to protect our and others’ interests.  

The precise periods for which we keep your personal information vary depending on the nature of the information and why we need it. Factors we consider in determining these periods include the minimum required retention period prescribed by law or recommended as best practice, the period during which a claim can be made with respect to an agreement or other matter, whether the personal information has been aggregated or pseudonymized, and other relevant criteria. For example, the period we keep your email address is connected to how long your Account is active, while the period for which we keep a support message is based on how long has passed since the last submission in the thread.

As users may have a seasonal site or come back to us after an Account becomes inactive, we don’t immediately delete your personal information when your trial expires or you cancel the Service. Instead, we keep your personal information for a reasonable period of time, so it will be there for you if you come back.

You may delete your Account by contacting us at privacy@creatable.co and Creatable will delete the personal information it holds about you (unless we need to retain it for the purposes set out in this Privacy Policy).

Please note that in the course of providing the services, we collect and maintain aggregated, anonymized or de-personalized information which we may retain indefinitely.

9. Data transfers

Personal information that you submit through the Services may be transferred to countries other than where you live, such as, for example, to our servers in the U.S. We also store personal information locally on the devices you use to access the Services.
‍
Your personal information may be transferred to countries that do not have the same data protection laws as the country in which you initially provided the information.

We rely upon a number of means to transfer personal information which is subject to the European General Data Protection Regulation (“GDPR”) in accordance with Chapter V of the GDPR.

 These include:

• Privacy Shield. We transfer, in accordance with Article 45 of the GDPR, personal information to companies that have certified their compliance with the EU-U.S. or Swiss-U.S. Privacy Shield Frameworks (each individually and jointly, the “Privacy Shield”), including Creatable, Inc.
• Standard data protection clauses. We may, in accordance with Article 46 of the GDPR, transfer personal information to recipients that have entered into the European Commission approved contract for the transfer of personal data outside the European Economic Area.  
• Other means. We may, in accordance with Articles 45 and 46 of the GDPR, transfer personal information to recipients that are in a country the European Commission or a European data protection supervisory authority has confirmed, by decision, offers an adequate level of data protection, pursuant to an approved certification mechanism or code of conduct, together with binding enforcement commitments from the recipient to apply the appropriate safeguards, including as regards data subjects’ rights, or to processors which have committed to comply with binding corporate rules.

10. Privacy Shield

Creatable, Inc has certified its compliance to the Privacy Shield. Creatable is committed to treating personal information received from the European Economic Area, Switzerland, and the United Kingdom pursuant to the Privacy Shield Frameworks in accordance with the applicable Principles. You can learn more about the Frameworks and Principles by visiting https://www.privacyshield.gov/.

Our accountability for personal information we receive under the Privacy Shield and subsequently transfer to a third party is described in the Privacy Shield Principles. In particular, we may use third parties to process data on our behalf as described in this Privacy Policy, and we remain liable if they do so in a manner inconsistent with the Privacy Shield Principles, unless we prove that we are not responsible for the event giving rise to the damage.

If you have a question or complaint you believe to be within the scope of our Privacy Shield certification, please contact us first at privacy@creatable.io, or using the contact details in the “How to contact us” section below. We'll respond within 45 days.

For any complaints that we can’t resolve directly, JAMS is the independent organization responsible for reviewing and resolving complaints about our Privacy Shield compliance. You can contact JAMS free of charge at https://www.jamsadr.com/eu-us-privacy-shield. JAMS is an alternative dispute resolution provider based in the U.S.

If your concern still isn't addressed by JAMS, you may be entitled to a binding arbitration under the Privacy Shield Principles. For purposes of enforcing compliance with the Privacy Shield, Creatable, Inc. is subject to the investigatory and enforcement authority of the U.S. Federal Trade Commission.

11. End Users’ personal information

Our customers who have created a site using Creatable are responsible for what they do with the personal information they collect, directly or through Creatable, about their End Users.  Section 12 is directed to such customers. If you’re one of our Users, you will collect personal information about your End Users. For example, during checkout, you may ask your End Users to provide their name, address, email address, and payment information so that you can complete their orders. You may also use cookies and similar technologies to analyze usage and other trends.

You're solely responsible for complying with any laws and regulations that apply to your collection and use of your End Users’ information, including personal information you collect about them from us or using Creatable functionality or cookies or similar technologies.  
‍
You must publish your own privacy and cookie policies and comply with them.

We’re not liable for your relationship with your End Users or how you collect and use personal information about them (even if you collect it from us or using Creatable functionality or cookies or similar technologies) and we won’t provide you with any legal advice regarding such matters.

12. California Residents

This Section 12 is only applicable to you if you are a resident of the state of California in the US (“California Residents”) and only applies to personal information for which Creatable is a “Business” (as defined in the CCPA), but does not apply to personal information we collect from you in the course of our provision of services to you where you are an employee, owner, director, officer or contractor of a company, partnership, sole proprietorship, non-profit or government agency. It applies to personal information we collect from California Residents on or through our Services and through other means (such as information collected offline or in-person). With respect to personal information for which you are a “Business” and Creatable is a “Service Provider,” please see our Terms of Service.

12.1 Categories, business and commercial purposes, sources and third parties

California law requires us to disclose certain information regarding the categories of personal information we collect. The following is a list of all categories of personal information which Creatable collects or has collected, from California Residents, in the twelve (12) months prior to the effective date of this Privacy Policy (each, a “Category”), together with, for each Category: (1) the categories of sources from which such Category is collected; and (2) the categories of third parties with whom we share such Category.

• Identifiers: (1) sources: you (either directly or through a Third Party Service), collected by the services, business partners, service providers and payment processors; and (2) third parties: business partners, service providers, and payment processors.
• Commercial information: (1) sources: you (either directly or through a Third Party Service), collected by the Services, business partners and service providers; and (2) third parties: business partners, service providers, and payment processors.
• Financial data: (1) sources: you (either directly or through a Third Party Service), business partners and payment processors; and (2) third parties: business partners, service providers, and payment processors.
• Internet or other network or device activity: (1) sources: you (either directly or through a Third Party Service), collected by the Services, business partners, service providers and payment processors; and (2) third parties: business partners, service providers, and payment processors.
• Location information: (1) sources: you (either directly or through a Third Party Service), collected by the Services, business partners and service providers; and (2) third parties: business partners, service providers, and payment processors.
• Sensory information: (1) sources: you (either directly or through a Third Party Service) and service providers; and (2) third parties: business partners, service providers, and payment processors.
• Other information that identifies or can be reasonably associated with you: (1) sources: you (either directly or through a Third Party Service), collected by the Services, business partners, service providers and payment processors; and (2) third parties: business partners, service providers and payment processors.
  

Each Category is collected for the following business purposes: (i) providing the services (including without limitation maintaining your Account, processing and fulfilling orders, and administering surveys and contests); (ii) providing customer support for the services; (iii) operating the services (including without limitation managing third party relationships and enabling usage of our service providers); (iv) communicating with you; (v) customizing the services; (vi) securing and protecting the Services (including without limitation auditing the Services, bug and fraud detection, debugging and repair of errors and the detection, protection, and prosecution of security incidents or illegal activity); (vii) enforcing our terms and policies; (viii) complying with law; (ix) verifying your identity; and (x) other business purposes about which we may notify you from time to time.

Each Category is collected for uses that advance our commercial or economic interests such as: (i) promoting surveys and contests; (ii) promoting and advertising the Services; (iii) customizing the Services; (iv) improving our Services; (v) communicating with you about relevant offers from third parties; and (vi) other commercial purposes about which we may notify you from time to time.

12.2 Your requests

Subject to certain exceptions and restrictions, the CCPA provides California Residents the right to submit requests to a business which has collected their personal information: (i) to provide them with access to the specific pieces and categories of personal information collected by the business about such California Resident, the categories of sources for such information, the business or commercial purposes for collecting such information, and the categories of third parties with which such information was shared; and (ii) to delete such personal information (each, a “California Request”). We need certain types of information so that we can provide our Services to you. If you ask us to delete some or all of your information, you may no longer be able to access or use the Services.

If you are a California Resident, please follow the instructions in the “Your rights and choices” section above to submit California Requests and please make sure you note that you are a California Resident when you do so. California Residents may designate an authorized agent to make California Requests on their behalf. In order to designate an authorized agent to make a California Request on your behalf, you must provide a valid power of attorney, the requester’s valid government-issued identification and the authorized agent’s valid government-issued identification.

12.3 We do not sell your personal information

We do not sell your personal information, as that term is defined based on our understanding of the CCPA and its implementing regulations. We have not sold any personal information to third parties for a business or commercial purpose in the 12 months prior to the effective date of this Privacy Policy. We do share personal information with third parties for the business and commercial purposes described in this Section 13, including without limitation advertising and marketing based on Users’ online activities over time and across different sites, services, and devices.

12.4 We do not discriminate against you

You also have the right to not be discriminated against (as provided for in applicable law) for exercising certain of your rights. Creatable does not discriminate against California Residents for exercising their rights.

13. Updates to this Privacy Policy

We’ll update this Privacy Policy from time to time to reflect changes in technology, law, our business operations or any other reason we determine is necessary or appropriate. When we make changes, we’ll update the “Effective Date” at the top of the Privacy Policy and post it on our sites. If we make material changes to it or the ways we process personal information, we’ll notify you (by, for example, prominently posting a notice of the changes on our sites before they take effect or directly sending you a notification).

We encourage you to check back periodically to review this Privacy Policy for any changes since your last visit.  This will help ensure you better understand your relationship with us, including the ways we process your personal information.

14. How to contact us

If you have questions, comments or complaints about this Privacy Policy or our privacy practices or if you would like to exercise your rights and choices, please email us at privacy@creatable.co, or write to us at the addresses below:

Creatable, Inc.
Attention: Legal - Privacy
6827 Nancy Ridge Drive
San Diego, CA 92121

Most recently changed: October 16, 2023