Wide Worlds Privacy Policy

1. Who we are and what this policy covers

Wide Worlds Inc. ("Wide Worlds," "we," "us," or "our") is a Delaware corporation with its principal place of business at 3774 Ashwood Avenue, Los Angeles, California 90066. This policy explains how we collect, use, disclose, and retain personal information.

It applies to our websites at wideworlds.com and wideworlds.ai and their subdomains, including fans.wideworlds.ai, auth.wideworlds.com, brands.wideworlds.com, and hq.wideworlds.ai, to our applications and platform, and to our offline collection and business operations.

This policy covers three groups of people, and different parts of it apply to each:

Creators. People who create an account with us, make edits, publish them, and may be paid for their performance.

Brand contacts. Employees and authorized users of the brands, studios, labels, and rights holders who are our customers.

Creators we have not yet worked with. People whose public professional social media presence we collect and record because we may want to invite them into a campaign, or because their public posts are relevant to a campaign we are running for a brand. We collect information about these people without interacting with them first. Section 6 explains what we collect, why, what we do with it, and how to have it removed. If you have received no communication from us and believe we hold a record about you, Section 6.5 tells you how to find out and how to have it deleted.

2. Personal information we collect

The table below lists the categories of personal information we collect, using the category names from California law, with the specific data in each, where it comes from, and why we collect it. Section 5 explains what we disclose and to whom. Section 8 gives retention periods.

A. Identifiers

What: name, display name, email address, postal address, phone number, account identifier, social media handles and profile URLs on TikTok, Instagram, X, YouTube, and Facebook, IP address, device identifier, referral and invite codes.

Sources: you; your device; public pages of social media platforms; social media platforms through connections you authorize; data vendors; brand customers.

Why: to create and operate your account, to identify and verify you, to communicate with you, to attribute your content and your payments, to recruit creators for campaigns, to prevent fraud, and to measure how people find us.

B. Customer records information

What: signature, bank or payment account details, and payout handles such as a PayPal address.

Sources: you; our payment processors.

Why: to pay you.

C. Protected classification characteristics

What: a record that you confirmed you are 18 years of age or older, with the date and time of that confirmation. We do not ask for your date of birth and we do not store one.

Sources: you.

Why: to confirm eligibility to use the Services, and to keep a record that we asked.

D. Commercial information

What: campaign participation history, rates you state and rates we agree, payment amounts and dates, subscription and billing records for brand customers.

Sources: you; brand customers; our systems.

Why: to run campaigns, to calculate and make payments, to bill customers, and to keep business records.

E. Biometric information

What: none. We do not collect biometric information. Our editing tools detect and track faces and other subjects within video frames in order to crop and assemble edits, and that processing is not used to identify any individual and produces no biometric identifier or template that we retain.

Sources: not applicable.

Why: not applicable.

F. Internet or other network activity

What: pages viewed, features used, editing session activity, clips created and exported, clicks, referring URLs, browser and device type, dates and times of access, cookie and similar identifiers.

Sources: your device; our own analytics systems.

Why: to operate, secure, personalize, and improve the services, to measure marketing, and to understand how the product is used.

G. Geolocation data

What: approximate location inferred from IP address, and country, for tax and eligibility purposes.

Sources: your device; you.

Why: to route tax documentation correctly, to apply regional requirements, and for security. We do not collect precise geolocation.

H. Audio, visual, and similar information

What: the video, image, and audio content you create or upload; profile images; and public posts and their captions, including posts you did not create through our services.

Sources: you; public pages of social media platforms; social media platforms through connections you authorize; data vendors.

Why: to provide the editing services, to run campaigns, to measure performance, and to assess reach and fit for campaigns.

I. Professional or employment-related information

What: creator type, the fandoms and genres you work in, self-described specialties, biography text from your public profiles, audience and performance metrics including follower counts, view counts, average and median views, engagement rates, posting frequency, and recency of activity, and free-text notes our team or our automated systems record about you and your work.

Sources: you; public pages of social media platforms; social media platforms through connections you authorize; data vendors; brand customers.

Why: to recruit creators, to assess reach and fit for a campaign, to set and verify rates, to measure campaign performance, and to report to the brand running the campaign.

J. Education information

What: none. We do not collect education information.

K. Inferences and automated assessments

What: tags describing your creator type and the fandoms you work in, estimates of your reach, written summaries and rationales about your work and your suitability for a particular campaign, sentiment classifications, and similar scores and predictions derived from the categories above.

Sources: derived by us and by our automated systems from the categories above.

Why: to recruit creators, to help brands select and price participants, to organize and search our records, and to measure campaigns.

L. Tax identification information

What: taxpayer identification number, including Social Security number where you provide one on a Form W-9, and the contents of Forms W-9 and W-8BEN.

Sources: you.

Why: to comply with tax reporting and withholding law and to make payments.

3. Sensitive personal information

We collect two categories of sensitive personal information:

Taxpayer identification numbers, including Social Security numbers, from creators we pay. We use these only to make payments and to meet tax reporting and withholding obligations, and we disclose them only to our payment processors and to tax authorities.

Account log-in credentials, in the form of the authentication links and session tokens that give access to your account. We use these only to authenticate you and secure your account.

We do not use or disclose sensitive personal information for any purpose other than those permitted under California law without your consent, and we do not sell or share it. Because of this, we are not required to offer a "Limit the Use of My Sensitive Personal Information" link, and we do not offer one.

4. How we use personal information

We use personal information to:

• create, operate, and secure accounts;
• provide the editing, generative, and campaign features of the services;
• verify that you are 18 or older;
• verify that you control a social media handle you claim;
• recruit creators for campaigns and assess reach, recency, and fit;
• set, verify, and calculate rates and payments;
• make payments and comply with tax reporting and withholding law;
• measure and report campaign performance to the brand running the campaign;
• detect purchased, artificial, or fraudulent engagement;
• communicate with you about your account, a campaign, a payment, or an opportunity;
• send marketing communications, subject to Section 11;
• operate, personalize, analyze, and improve the services;
• generate the automated assessments described in Section 9, using third-party machine-learning models that are not permitted to train on what we send them;
• prevent fraud and abuse and maintain the security of the services;
• comply with law and enforce our terms; and
• any other purpose we disclose at the time of collection.

5. How we disclose personal information

5.1 To the brand running a campaign

This is the disclosure most creators will care about, so it is stated plainly.

For each campaign you participate in, or are considered for, we make the following available to that brand through its dashboard and in reports we prepare for it:

• your name and your social media handles, as clickable links to your public profiles;
• your public audience and performance metrics, including follower counts, view and engagement figures, and how recently and often you post;
• links to your public posts, including posts you did not create through our services;
• your campaign participation status and, where you have not yet been contacted or have not yet joined, your recruitment status;
• notes and tags our team or our automated systems have recorded about you and your work;
• automated assessments about you, including a written rationale for why we think you fit that campaign, labeled as automated and unverified; and
• your fan payment amounts.

We do not make your email address, postal address, phone number, taxpayer identification number, or payment account details available to brands.

Our agreements with brands require them to use this information only to plan, approve, run, and measure their own campaigns on our platform, to keep it confidential, not to resell it or combine it with other data sets, not to retain it after their agreement with us ends, and not to use it in any decision about employment, promotion, retention, credit, insurance, housing, or tenancy.

5.2 To service providers

We disclose personal information to companies that process it on our behalf under contract, limited to what they need to perform their function. The categories are:

• cloud hosting and database providers;
• authentication and transactional email providers;
• payment processors and payout providers;
• data collection and enrichment vendors, which collect public social media profile and post information for us;
• customer support and communications tools;
• AI and machine-learning model providers, which process content and text we send them to generate outputs; and
• security, fraud prevention, and infrastructure providers.

We do not publish the names of the individual companies in these categories. A business customer that needs the list for its own security or privacy diligence can request it under a confidentiality agreement by writing to legal@wideworlds.ai.

5.3 Other disclosures

• To our affiliates and to any joint venture partners we may have.
• In connection with an actual or potential sale, merger, acquisition, financing, or other transfer of all or part of our business or assets, including in a bankruptcy proceeding.
• Under a subpoena, court order, governmental inquiry, or other legal process, or as otherwise required by law; to protect our rights or the rights of others; or to protect the safety or security of any person or entity.
• With your consent or at your direction.

5.4 What we sell or share

Under California law, "sale" means disclosing personal information to a third party for monetary or other valuable consideration, and "sharing" means disclosing it for cross-context behavioral advertising.

We sell personal information. Specifically, making the creator information described in Section 5.1 available to brand customers who pay us is a sale of the categories A, D, H, I, and K described in Section 2, to the category of third parties consisting of our brand customers. The business purpose is to enable those customers to select, approve, price, and measure the creators participating in their campaigns.

We do not currently share personal information for cross-context behavioral advertising. If we begin to, we will update this policy and tell you before the change takes effect, and the opt-out in Section 7.4 will cover it.

We do not sell or share the personal information of anyone under 18, and we do not use it for targeted advertising. We do not knowingly collect personal information from anyone under 18 at all. See Section 10.

We do not sell or share sensitive personal information.

We may use and disclose deidentified or aggregated information without limitation.

6. Creators we have not yet worked with

6.1 Why we hold information about you

We run campaigns in which fan creators make edits for brands. To do that we identify creators who make the kind of work a campaign needs, and we build a record of each so that we and the brand can decide whom to invite. We do this before contacting anyone, which means we may hold a record about you even though you have never heard from us.

6.2 What we collect and where it comes from

We collect your public social media handles and profile URLs, your public display name and biography text, any email address you have published in a public bio, your profile image, your public audience and performance metrics, and your recent public posts and their captions. We collect this from the public pages of social media platforms and from data collection vendors we engage for that purpose.

We then add notes, tags describing your creator type and the fandoms you work in, and automated assessments including a written rationale for why we think your work fits a particular campaign.

6.3 What we do with it

We use it to decide whom to invite into a campaign and, if you are invited, at what rate. We make it available to the brand running the campaign, in that brand's dashboard, before we contact you. That disclosure is a sale under California law, as described in Section 5.4. You can opt out of it under Section 7.4.

6.4 What we do not do

We do not contact anyone whose public profile indicates they are under 18, and we permanently exclude such accounts from contact. We do not use these records to make or inform any decision about a person's employment, credit, insurance, housing, or tenancy, and our agreements with brand customers prohibit them from doing so.

6.5 How to have your record removed

You can ask us to delete your record at https://wideworlds.ai/privacy-policy/remove-me or by emailing support@wideworlds.ai. You do not need an account, and you do not need to explain why. We will confirm receipt, delete the record, and add the handle to a suppression list so it is not collected again. We will complete this within 15 days of receiving your request. You can also ask us what we hold about you, and ask us to correct it, under Section 7.

7. Your privacy rights

7.1 The rights

Depending on where you live, you may have the right to:

• know what personal information we have collected about you, the sources, the purposes, the categories we have disclosed or sold, and the categories of recipients;
• access a copy of your personal information, in a portable format;
• correct inaccurate personal information;
• delete your personal information;
• opt out of the sale or sharing of your personal information;
• opt out of profiling in furtherance of decisions that produce legal or similarly significant effects, and, in some states, to contest the result of such a decision and have it reviewed by a person;
• limit our use of sensitive personal information, though as Section 3 explains we do not use it beyond the permitted purposes;
• appeal a decision we make about a request; and
• not be discriminated or retaliated against for exercising any of these rights.

7.2 How to make a request

Two ways, either of which you may use:

• Online at https://wideworlds.ai/privacy-policy/request.
• By email to support@wideworlds.ai.

You do not need an account. If you have one, submitting a request while signed in makes verification faster.

7.3 Verification, timing, and agents

We will acknowledge your request within 10 business days and respond within 45 calendar days, and we may extend once by another 45 days with notice to you. To verify your identity we will ask you to confirm information we already hold, matched to the request. For a request about a record we built from public sources, we will ask you to demonstrate control of the handle in question, for example by messaging us from the account or by placing a code in the bio, which is the least intrusive method available to us. We will not ask you for a government identifier or a Social Security number in order to verify a request.

You may use an authorized agent. We will ask the agent for written permission signed by you and may ask you to verify your own identity directly.

If we deny a request in whole or in part, we will tell you why, and you may appeal by replying to our response or writing to support@wideworlds.ai with "Appeal" in the subject line. We will respond to an appeal within 45 days and, if we deny it, tell you how to contact your state attorney general.

7.4 Do Not Sell or Share

To opt out of the sale of your personal information, use the "Do Not Sell or Share My Personal Information" link in the footer of our websites, or the form at https://wideworlds.ai/privacy-policy/do-not-sell, or email support@wideworlds.ai.

We honor opt-out preference signals, including Global Privacy Control. If your browser or an extension sends one, we treat it as a valid opt-out request for that browser and device, at no cost to you and without degrading your experience.

If you opt out, we will stop making your information available to brand customers. If you are a creator with an account, opting out may make you ineligible for campaigns where a brand selects participants on the basis of reach, and we will tell you if that happens. Opting out will not affect any payment you have already earned.

7.5 Request metrics

We do not buy, receive, sell, or share the personal information of 10,000,000 or more consumers in a calendar year, so we are not required to publish annual request metrics. If we cross that threshold we will publish them here by 1 July of the following year.

8. How long we keep personal information

We keep each category only as long as we need it for the purpose we collected it for, or as long as law requires.

Third-party retention. Our data collection vendors retain the raw results of a collection run for a limited period under their own terms, currently 31 days for our primary vendor. We also keep local working copies during a campaign, which are deleted 30 days after the campaign closes.

Disposal. When data reaches the end of its retention period we dispose of it so that it cannot practicably be read or reconstructed, consistent with applicable law including the standard in the Federal Trade Commission's Disposal Rule, 16 C.F.R. section 682.3. For cloud-hosted data we rely on the secure deletion mechanisms of our cloud platform.

9. Machine learning and automated decisions

9.1 We do not train models on your information

We do not collect, use, or sell personal information for the purpose of training, fine-tuning, or otherwise developing machine-learning models, including large language models. We do not license personal information to anyone else for that purpose. If that ever changes, we will update this policy and give notice before the change takes effect.

9.2 Third-party model providers

Some features of our services send information to third-party providers of machine-learning models so those models can produce an output for us, such as an edit suggestion, a summary of a creator's work, or the assessments described in Section 9.3. We send only what the feature needs. Our agreements with those providers require them to use what we send solely to return the output we requested, and prohibit them from using it to train or improve their own models.

9.3 Automated assessments

We use automated systems, including large language models, to read public posts and produce tags, reach estimates, written summaries, campaign fit rationales, and sentiment classifications. These are estimates. They are not verified and they can be wrong. Where we present one to a brand customer we label it as automated and unverified.

9.4 Automated decisions about creators

Automated assessments may inform decisions about whether a creator is invited into a campaign and at what rate they are paid. Where an automated system makes or substantially makes such a decision, you may:

• ask us to explain in plain language how the system works and how its output affected the decision about you;
• ask that the decision be made or reviewed by a person instead, which we will do at no cost and with no disadvantage to you;
• ask us to correct information the decision relied on and to reconsider it; and
• opt out of the use of automated decisionmaking technology for such decisions, in which case we will assess you through a non-automated process.

Write to support@wideworlds.ai. We will respond within 45 days. We will not retaliate against you for making any of these requests.

10. Children and teens

Our services are for adults. You must be 18 or older to create an account, submit content, connect a social account, or receive a payment.

We do not knowingly collect personal information from anyone under 18. We ask every person who creates an account to confirm that they are 18 or older, and we keep a record of that confirmation. We do not knowingly sell or share the personal information of anyone under 18, and we do not use it for targeted advertising.

When we identify creators for campaigns, we screen public profiles and permanently exclude from contact any account whose public information indicates the holder is under 18.

If we learn that a person under 18 has created an account, we will close it, withhold or reverse any pending payment, and delete their personal information except what law requires us to keep. If you are a parent or guardian and believe your child has given us personal information, contact us at support@wideworlds.ai and we will delete it.

11. Marketing and communications

We send you transactional messages about your account, your campaigns, and your payments, and you cannot opt out of those while you have an account.

We may also send marketing messages. You can opt out using the unsubscribe link in any marketing message or by writing to support@wideworlds.ai. Opting out of marketing does not stop transactional messages.

If we contact you about a campaign opportunity before you have an account, using an email address you published in a public bio or a message on a social platform, you can tell us to stop and we will, and we will record that so we do not contact you again.

12. Cookies, analytics, and tracking

We and our providers use cookies and similar technologies to operate the services, keep you signed in, measure usage, and improve the product.

We measure usage with our own analytics system rather than a third-party analytics provider. Information about how you use the services is collected and processed by us, and is not shared with an outside analytics company.

We do not currently run advertising or conversion-tracking pixels that share personal information with an advertising network. If we add one, we will update this policy and tell affected creators before it goes live.

Your browser may let you limit or delete cookies, though the services may not work as intended if you do. We honor Global Privacy Control as described in Section 7.4.

13. Third-party links, tools, and platforms

Our services may link to third-party websites and apps, and may include integrated social media tools. We do not control the privacy practices of those services and this policy does not cover them. Your interactions with them are governed by their own policies. We encourage you to read them.

Content you publish on a social media platform is governed by that platform's settings and terms, and can be viewed and interacted with by others independently of us.

14. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information. These include encryption of data in transit and at rest, access restricted on a least-privilege and need-to-know basis, storage only in approved systems rather than personal accounts or unapproved tools, logical separation of each customer's data and media, database-level ownership locks so that a signed-in user cannot read or modify another user's files, vendor security review, and a written information security program with a designated owner and an annual review cycle.

No system is completely secure. If you believe your account has been compromised, contact us at security@wideworlds.ai.

15. International users and transfers

We are based in the United States. Our systems, personnel, and cloud infrastructure operate primarily in the United States, and we process personal information there. If you are outside the United States, the laws where you live may differ from United States law, and by using the services you understand that your personal information is processed in the United States. Any transfer of personal information to or from outside the United States is handled in accordance with applicable law.

16. State-specific disclosures

16.1 California

Sections 2 through 12 constitute our notice at collection and our disclosures under the California Consumer Privacy Act. We are a business under that Act. Section 5.4 states what we sell. Section 7 states your rights and how to exercise them. Section 8 states our retention periods. We have not sold or shared the personal information of consumers under 16, and we do not knowingly collect from anyone under 18.

16.2 Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, and other states with comprehensive privacy laws

You have the rights listed in Section 7, exercisable as described there. In addition:

• You may opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects. Section 7.4 and Section 9.4 explain how.
• We recognize universal opt-out mechanisms, including Global Privacy Control, in every state, whether or not that state requires it.
• If we deny your request you may appeal as described in Section 7.3.
• Connecticut residents may contest the result of a profiling decision and ask for an explanation, a review of the data used, and reconsideration. Section 9.4 explains how. Section 9.1 states our position on training large language models.
• Minnesota residents may question the result of profiling and ask what data was used. Section 9.4 explains how. Our privacy program is maintained by Sam Schoonover, Chief Revenue Officer, reachable at support@wideworlds.ai.
• Maryland residents: we do not sell sensitive personal data, and we do not sell or use for targeted advertising the personal data of anyone we know or should know is under 18.
• Oregon residents: we do not sell precise geolocation data, and we do not process the personal data of anyone under 16 for targeted advertising, sale, or profiling.
• Rhode Island residents: we do not currently meet the thresholds that make the Rhode Island Data Transparency and Privacy Protection Act applicable to us. If that changes, we will identify in this policy the third parties to whom we sell or may sell personal data, as that Act requires.
• Nevada residents may opt out of the sale of covered information as described in Section 7.4.

17. Changes to this policy

We may update this policy. When we do, we will change the "Last updated" date and post the revised policy. For a material change we will give notice by email to account holders and by notice within the services at least 30 days before it takes effect, and we will keep the prior version in the archive at https://wideworlds.ai/legal/archive.

18. Contact us

Wide Worlds Inc.

3774 Ashwood Avenue, Los Angeles, California 90066

Privacy questions and rights requests: support@wideworlds.ai

Online rights request form: https://wideworlds.ai/privacy-policy/request

Removal request if you do not have an account: https://wideworlds.ai/privacy-policy/request

General: hello@wideworlds.ai