Privacy Policy
Last updated September 5, 2026
1. The Short Version
This policy explains what UGC Flows collects, why we collect it, and who else sees it.
We collect what we need to run your account, run your brand campaigns and edit your videos. We do not sell your data.
Card details are the one thing we never hold. Stripe takes those directly.
2. What We Collect
Your name and email. We need these to make your account and to send you your login, your deals and your invoices.
Your phone number. We use it to text you about your account and your campaigns. It is only used for texts if you tick the consent box.
The content you upload. Your raw footage, your finished videos and anything you write in the app.
Your account activity. Campaigns you applied to, deals you accepted, videos you sent in, payments logged in your tracker, and basic records of when you signed in.
Payment records. Stripe tells us when a payment cleared, when it failed and which card brand you used. We never see the full card number.
Basic technical data your browser sends, like your device type and rough location from your IP address. We use it to keep the app working and secure.
3. Why We Collect It
To run your account and let you sign in.
To bill you each term and to prove what you paid.
To show your profile to the brands whose campaigns you apply to.
To give your editor the footage they need to cut your videos.
To post your finished videos on the schedule you set.
To email or text you about your account, and to answer you when you ask us something.
To keep the service safe, to stop fraud, and to meet our tax and legal duties.
4. Who We Share It With
Stripe. Stripe processes every payment. You give your card details straight to them and they never touch our servers. Stripe handles that data under its own privacy policy.
Supabase. Supabase hosts our database and our logins. Your account and your records are stored there.
The brands whose campaigns you apply to. When you apply, a brand sees your portfolio, your content and your first name. When you accept a deal, that brand gets what it needs to work with you and pay you, which usually means your name and your email.
Your editor. The editor who claims your job sees the footage you send in and nothing else about you.
The platforms you connect. If you turn on auto posting, we send your finished video to the account you connected.
Anyone we are legally required to share it with, if we get a valid legal request.
We do not sell your personal information. We do not share it for anyone else's advertising.
5. Texts and Marketing
We only text you if you tick the SMS consent box when you sign up. Ticking it is optional and you can use the whole service without it.
There are two boxes. One is for account texts, like your brand campaign offers. The other is for marketing texts, like offers and product updates.
Message frequency varies. Message and data rates may apply.
Reply STOP to any text to stop them. Reply HELP for help. You can also change it in your dashboard, or email us.
Stopping texts does not stop the emails you need to run your account, like your invoice or a password reset. Marketing emails have an unsubscribe link at the bottom of every one.
6. Cookies
We set a cookie to keep you signed in. Without it the app cannot tell who you are.
We do not run advertising trackers on this site.
7. How Long We Keep It
Your account data stays while your account is open.
If you close your account, we delete your account data within 90 days. Ask us sooner and we will do it sooner.
We keep payment and invoice records for 7 years, because tax law requires it. Those records are the amounts and the dates, not your card number.
Content a brand already licensed and paid for stays with that brand. We cannot pull it back for you, and neither can you.
We may keep a limited record of anyone we removed for breaking the rules, so they cannot sign up again.
8. Your Rights
You can ask for a copy of the data we hold on you.
You can ask us to correct anything wrong. Most of it you can fix yourself in your dashboard.
You can ask us to delete your data. Email hello@ugcflows.com with the subject line DELETE and we will confirm within 30 days.
You can withdraw your consent to texts or marketing at any time.
Depending on where you live, you may have more rights than these. Ask us and we will honour them.
We never charge you for any of this and we will not make it hard.
9. Security
Your data sits in Supabase, encrypted, behind access rules that keep one creator's records away from another.
Only the people who need your data to do their job can see it.
No system is perfect. If a breach ever affects your data, we will tell you and tell you what we are doing about it.
10. Age
UGC Flows is for people 18 and over. We do not knowingly collect data from anyone under 18.
If you think a minor signed up, email us and we will delete the account.
11. Changes and Contact
If we change this policy, we will update the date at the top. If a change matters, we will email you.
Any question about your data goes to hello@ugcflows.com. A real person reads it.
ugcflows