Privacy Policy

Javier Amaya · rapidstories.ai
Lichtstraße 32, 40235 Düsseldorf, Germany
General contact: info@rapidstories.ai
Privacy and data rights requests: privacy@creativeaimastermind.com

Joining the collective and being shown to companies for paid projects are two different things, so we ask for your agreement to each one separately.

You can withdraw either consent at any time, separately, by emailing privacy@creativeaimastermind.com. Withdrawing Consent 2 removes you from future matches immediately, without touching your membership. Withdrawing Consent 1 removes your application entirely.

If you applied before the matching feature existed, you were never asked for Consent 2. Before anyone in this position enters the matching pool, we send exactly one email — in English and German — with a personal link to opt in. Not clicking it means you stay out of the matching pool, permanently, until you tell us otherwise. We record the date, time, and exact wording you agreed to.

If you give Consent 2, your profile becomes visible to our matching engine — a rules-based system, not a black box, that compares your skills, experience, delivered projects, work links, availability, and location against a company's project needs.

First, four requirements must all be true before you are considered for a project at all: you share at least one required skill, your availability fits the project's timeline, your industry fits (unless either side is open to any industry), and — only where a project needs someone on-site and you are remote-only in a different city — location does not create a conflict. If any of these fail, you are not scored for that project at all.

If you qualify, we calculate a score out of 100: skills overlap counts for 40 points, experience level for 20, delivered AI projects for 20, work links for 10, and location for 10. Every match also carries a short written explanation, in your language, stating only what is actually true for that pairing — for example, “Matches 4 of 5 required skills. Based in Cologne — same city as the project.”

Because everything is self-reported, we apply one honesty check: if a profile claims expert-level experience but reports no delivered projects and no work links, the score quietly reflects a lower, more defensible level. This is never shown to a company — it only flags the profile on our internal review screen, so nobody is publicly marked down over a claim we cannot verify.

If very few creators qualify for a project, the system may widen the industry match — never the skill requirement — and says so honestly on the match itself.

This produces a ranked, scored shortlist automatically. But no company ever sees a creator's profile or a match automatically. A person at Creative AI Mastermind reviews every single suggested match — checking it, correcting it, or rejecting it — before anything reaches a company. Because a human genuinely reviews and decides on every match, this process falls outside the automated decision-making restricted under Art. 22 GDPR: no decision producing legal effects or similarly significant effects for you is ever made without a person looking at it first. You can ask us at any time who reviewed a specific match and when.

Member application data and matching profiles are stored in Supabase (Frankfurt, EU — eu-central-1). All personal data remains within the European Economic Area.

Google Analytics data is processed by Google LLC. Google is certified under the EU–US Data Privacy Framework. Analytics data is only collected after user consent.

Transactional emails — application confirmations, match notifications, and the one-time matching opt-in email — are sent through Resend, a US-based email delivery service. Because Resend is located outside the EU/EEA, this transfer relies on Standard Contractual Clauses (Art. 46 GDPR) as an additional safeguard.

The Education & Tutorials section of this website includes YouTube video players. To protect your privacy, YouTube iframes are not loaded automatically — they only activate when you click on a video.

Once activated, YouTube (Google LLC) may collect data including your IP address, device information, and viewing behaviour, regardless of whether you are logged into a Google account. This data is processed by Google LLC in accordance with their privacy policy. Google is certified under the EU–US Data Privacy Framework.

Legal basis: Art. 6(1)(a) GDPR (consent via click-to-load). You can avoid data transfer by not clicking on video thumbnails.

This website links to external third-party websites including event organisers, funding bodies, educational institutions, and media platforms. When you click an external link, you leave creativeaimastermind.com and the privacy policy of the respective third-party site applies.

We have no control over the content, data collection practices, or privacy policies of these external sites and accept no responsibility for them.

This website contains links to LinkedIn and other social media platforms. These are standard hyperlinks — no social media buttons with tracking pixels or plugins are embedded on this site.

When you click a social media link, you are directed to the respective platform and that platform's own privacy policy applies. We have no influence over the data collected by those platforms.

We use cookies for the following purposes:

• —Essential cookies — required for the website to function. No consent needed.
• —Analytics cookies — Google Analytics 4. Only set after consent. Can be declined or withdrawn via the cookie banner.

You can manage your cookie preferences at any time by clicking the cookie settings link in the footer.

• —Applications without matching consent — deleted automatically after 12 months.
• —Matching profiles — kept for as long as Consent 2 stands. After 20 months of inactivity we send one email asking you to reconfirm; if there is no response within the following 4 months (24 months total), the matching profile is anonymised automatically.
• —Company records — deleted 24 months after the company’s last activity with us.
• —Consent records — kept as legal evidence that consent existed and, where applicable, was withdrawn. Even after a deletion request, we retain the bare minimum proof — who, when, and what was agreed — that the law requires us to keep.
• —Invoices — once card payments are live, retained separately inside Stripe for 6–10 years, as German tax law requires.

Under GDPR, you have the right to:

• —Access the personal data we hold about you (Art. 15 GDPR)
• —Rectify inaccurate data (Art. 16 GDPR)
• —Request deletion of your data (Art. 17 GDPR)
• —Restrict processing of your data (Art. 18 GDPR)
• —Data portability (Art. 20 GDPR)
• —Object to processing based on legitimate interest (Art. 21 GDPR)
• —Withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, or to withdraw either matching consent described in section 3, contact us at privacy@creativeaimastermind.com. We confirm your identity via your registered email and complete requests within 30 days, as required by law. If you have an account (section 2.7), you can also exercise the export and deletion rights yourself, instantly — see section 12.

Signed in, you can request a copy of your own data or delete your own account without waiting on us. This section explains exactly what each button does — the law calls this “transparency about automated processing,” and we would rather over-explain than leave you guessing.

You have the right to lodge a complaint with the supervisory authority responsible for North Rhine-Westphalia:

We may update this privacy policy from time to time. The date at the top of this page reflects the latest revision. We encourage you to review this page periodically.