Privacy Policy

Last updated 15 October 2026

This policy explains what personal data getUGC (the “Service”, including our website and apps) collects, how we use it, and the choices you have.

What we collect

Information you give us.

Account details, such as your name, email address and password.
Brand details, such as company name, website and logo.
Payout or refund details, such as account holder name and bank details.
Messages and content you submit, such as campaign briefs, post links, flags and replies to them.

Information from connected social accounts. If you are a creator and connect TikTok, Instagram or YouTube, we receive the information you authorise on that platform, which may include:

Profile information, such as your username, display name, account type and follower count.
Your posts and their public details, such as captions, links, thumbnails and posting dates.
Performance metrics for your posts, such as views, reach, likes, comments, shares, watch time and where views come from.
Aggregated audience insights, such as age, gender and location breakdowns, where the platform provides them.

We never receive your social media passwords, and we cannot post, comment or message on your behalf.

Information collected automatically. Basic technical data such as IP address, device and browser type and the pages you use, which we use to keep the Service secure and working. We use cookies that are necessary to keep you signed in, and analytics and error-reporting providers to understand how the Service is used and fix problems. If you allow notifications in our app, we store a token for your device so we can send them.

How we use it

To create and run your account.
To show creators campaigns and estimate what they could earn.
To measure the performance of campaign content and calculate payouts.
To help brands review applications and the content posted for their campaigns.
To process payouts, refunds and brand deposits.
To detect fraud, fake engagement and misuse, and to keep the Service secure.
To send you service messages, such as account and payout emails.
To meet our legal obligations.

We process your data because it is needed to provide the Service you signed up for, because you have given consent (for example, by connecting a social account), because of our legitimate interest in running a safe marketplace, or because the law requires it.

We do not sell your personal data, and we do not use data from connected social accounts to train AI models or for advertising.

Who can see your data

Brands. When a creator applies to or joins a campaign, the brand running it can see the creator’s profile, the content posted for that campaign, and related performance and audience insights. Connecting an account and applying to a campaign is how a creator chooses to share this.
Service providers. Companies that host and run the Service for us, such as cloud hosting, database, security, email, analytics and notification providers. They may only use your data to provide their service to us, and must protect it as this policy describes.
Legal and safety. Authorities or others where the law requires it, or to protect the rights and safety of our users and the Service.
Business changes. A buyer or successor if getUGC is reorganised, merged or sold, under this policy.

Some of our service providers are located outside your country. When your data is transferred abroad, we take steps to make sure it stays protected as required by law.

How long we keep it

We keep account data while your account is open.
If you connect a social account but never finish signing up, we delete that data within 30 days.
When you disconnect a social account, we stop collecting new data from it. What we already have is kept until you delete your account.
When you delete your account, we delete or de-identify your data within 7 days, except records we must keep for payments, disputes, security or the law.
Payment records are kept for as long as the law requires. They include what was earned and paid, the bank details payouts and refunds went to, and the post links and view counts used to work out payments.

Your choices and rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you and get a copy of it.
Correct data that is inaccurate.
Delete your data.
Object to or restrict some processing, or withdraw your consent.

You can disconnect a social account at any time from the Accounts page, or revoke our access from the platform itself:

TikTok: Settings and privacy → Security → Apps and services.
Instagram: Settings → Apps and websites.
YouTube: your Google Account permissions.

You can delete your account yourself (see how to delete your data). For any other request, email privacy@getugc.com. We respond within 30 days. You may also complain to your local data protection authority.

How to delete your data

Sign in and go to Settings on the website, or Account in the app, and choose Delete account. You’ll need your password. You’re signed out straight away, we remove our access to your connected social accounts, and we delete or de-identify your data within 7 days. We confirm by email. You can’t delete your account while a payout or refund is on its way.

If you can’t sign in, or you only want the data from one platform deleted, email privacy@getugc.com from the email address on your account with the username of the TikTok, Instagram or YouTube account it concerns. This also applies if you have already removed getUGC from TikTok, Instagram or Google.

We keep the records described in How long we keep it. Your posts stay on the platforms where you published them. Disconnecting an account from the Accounts page stops us collecting new data from it.

Platform terms

Our use of data from connected platforms follows their terms. By connecting an account, you also agree to the terms of that platform:

getUGC’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Security

We use industry-standard measures to protect your data, including encryption of access tokens and bank details. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires it.

Children

The Service is only for people aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn that we have, we will delete it.

Changes

We may update this policy. If we make significant changes, we will let you know through the Service or by email before they take effect. See also our Terms of Service.

Contact

Questions about this policy or your data: privacy@getugc.com.