04 Legal

Privacy Policy

This policy explains what AgencyUGC collects when agencies, their team members, and their clients use our white-label UGC creator workspace, why we collect it, and the choices you have.

1. Who we are

AgencyUGC is a workspace marketing agencies, freelance UGC strategists, and in-house brand teams use to source, brief, and manage vetted UGC creators for their clients. This policy covers the AgencyUGC website, the application at /app, and the accounts, client workspaces, and creator profiles created inside it.

2. Data we collect

We collect the minimum data needed to run client workspaces, campaign briefs, and creator invites.

2.1 Account data

  • Name and email address when you register or are invited to a team.
  • Password, stored as a salted hash, never in plain text.
  • Agency name, logo, and brand color if you set up white-label branding.
  • Role and team membership (owner, manager, or viewer) within your agency's account.

2.2 Usage data

  • Actions inside the product, such as briefs created, creators invited, and deliverables reviewed, logged against your account or, for anonymous visitors, a session identifier.
  • Standard technical logs (IP address, browser type, pages visited, timestamps) used for security, abuse prevention, and diagnosing errors.

2.3 Content you provide

  • Campaign briefs, client and creator notes, budgets, and deliverable files you upload or link inside a workspace.
  • Brief inputs you submit to generate an AI creator brief (brand, product, platform, and goal), which are sent to Google's Gemini API to produce the brief text.

2.4 Billing data

Payment card details are collected and stored by Stripe, our payment processor. We never see or store your full card number. We keep a record of your plan, billing cycle, and invoice history so we can manage your subscription and answer billing questions.

3. How we use data

  • To operate client workspaces, campaign briefs, creator matching, and deliverable tracking.
  • To generate AI creator briefs through Gemini when you use the brief builder.
  • To process subscription payments and send billing notices through Stripe.
  • To send account, security, and transactional emails, such as confirmation codes and billing receipts.
  • To enforce usage limits tied to your plan and to detect abuse of the anonymous demo.
  • To improve reliability and fix bugs using aggregated, non-identifying usage patterns.

We do not use your content or briefs to train third-party AI models beyond what is required to generate the specific brief you requested.

4. Third-party services

ServicePurposeData shared
StripeSubscription billing and payment processingName, email, payment details, plan
Google Gemini APIGenerating AI creator briefsBrief inputs you submit (brand, product, platform, goal)
Transactional email providerConfirmation codes, billing receipts, account noticesName, email, message content

Each provider processes data under its own privacy terms and only for the purpose we send it to them for. We do not sell your data, and we do not share it with data brokers or advertisers.

5. Cookies and sessions

We use a small number of essential, first-party cookies to keep you signed in, remember your session on the anonymous demo, and protect forms from spam and cross-site request forgery. We do not use third-party advertising or cross-site tracking cookies. You can block cookies in your browser, but the app and demo will not function correctly without the essential session cookie.

6. Data retention

  • Account and workspace data is kept for as long as your account is active.
  • Anonymous session data (used to gate the demo) is retained for a short rolling window, then deleted automatically.
  • Billing records are kept as long as required for tax and accounting purposes, even after cancellation.
  • When you delete your account, we remove personal data within a reasonable period, except where we are legally required to retain billing records.

7. Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data or update it yourself in your account settings.
  • Request deletion of your account and associated personal data.
  • Export your data in a portable format.
  • Object to or restrict certain processing, where applicable law provides that right.

To exercise any of these rights, email us at [email protected]. We will respond within a reasonable timeframe and may need to verify your identity before making changes.

8. Children's privacy

AgencyUGC is a business tool built for agencies and marketing teams. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.

9. Data security

We use industry-standard safeguards, including encrypted connections (HTTPS), hashed passwords, and access controls limiting who on our team can view account data. No system is perfectly secure, but we monitor for and respond to security issues as part of running the product.

10. Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, notify account owners by email.

11. Contact

Questions about this policy or your data can be sent to [email protected].