Privacy Policy

1. Information We Collect

Account Information: Email address, name, and authentication data when you sign up via email link or Google sign-in.

Creator Profile Data: Social media handles (Instagram, TikTok), profile information, follower counts, and analytics data fetched from connected platforms.

Demographic Information: Age range, gender identity, and location that creators provide for their profiles. Ethnicity may optionally be provided but is not required. This data helps brands find creators who authentically represent their target audiences.

Brand Information: Company name and contact details for brand accounts.

Payment Information: When you subscribe as a brand, payment is processed through Stripe. UGC Tank does not collect, store, or have access to your full credit card number, CVV, or other sensitive payment credentials. Stripe may share with us limited information such as the last four digits of your card, card brand, expiration date, and billing address for record-keeping and support purposes. For details on how Stripe handles your payment data, see Stripe's Privacy Policy.

Message Content: When you use our in-platform messaging feature, we collect and store the content of messages you send and receive, including text content, timestamps, and read receipts. We also store participant information (names and profile photos) to display in conversations.

2. How We Use Your Information

• To create and manage your account
• To display creator profiles to brands on the platform
• To send account-related emails (invitations, notifications)
• To improve and develop our platform
• To deliver and display messages between users
• To send email notifications about new messages
• To enforce rate limits and prevent messaging abuse
• To investigate reports of harassment or terms violations

Message Notifications: As a creator, you will always receive email notifications (or SMS if opted in) when brands send you messages on the platform. These notifications cannot be turned off.

Campaign Email Communications: You will also receive campaign digest emails at most once every 7 days (or SMS at most once every 7 days if opted in) when there are new campaigns that match your profile. You can unsubscribe from campaign emails at any time using the unsubscribe link at the bottom of any campaign email or in your account settings.

Demographic Data Usage: Gender identity is collected for creator profiles. Ethnicity is optional and may be provided at the creator's discretion. Demographic information is never used to discriminate against creators, limit access to opportunities, or affect compensation. Ethnicity is not used for campaign matching or filtering.

Campaign Matching: Campaign visibility is determined by gender, location (city/country), content niche, and creator preferences only. These factors are used solely for the purpose of authentic representation in marketing content. Ethnicity, age, follower count, and engagement metrics are never used to filter or restrict campaign visibility. No creator is prevented from applying to any campaign they can see.

3. Information Sharing

Profile Visibility: Only brands whose campaigns you have applied to can see your full profile. For managed campaigns operated by UGC Tank, brands may view profiles of creators sourced on their behalf. There are no public links to your profile and other creators cannot see it.

Sensitive Data Protection: We display demographic information only when explicitly provided and never infer or assume demographic attributes.

Third-Party Services: We use Firebase for authentication and data storage, Resend for transactional emails including messaging notification emails, Twilio for SMS delivery, and Stripe for payment processing. We have entered into data processing agreements with our service providers where required by applicable law.

We do not sell your personal information to third parties.

4. Data Storage

Your data is stored securely using Google Firebase services. We retain your information for as long as your account is active or as needed to provide our services.

After Account Deletion: Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law, necessary to resolve disputes, or required for ongoing contractual obligations (e.g., active managed campaigns). Anonymized data that cannot be used to identify you may be retained for analytics purposes.

5. Your Rights

You have the right to request deletion of your account and all associated data. To request account or data removal, please email contact@ugctank.com. We will process deletion requests within 30 days of verification of your identity. Creators can also update their profile information through the dashboard.

You may update your demographic information at any time through your profile settings.

6. Non-Discrimination Policy

UGC Tank is committed to providing equal access and opportunity to all creators regardless of gender identity, ethnicity, or other protected characteristics. Demographic information is collected solely to facilitate authentic representation in brand campaigns and is never used to:

• Deny access to the platform or its features
• Affect approval status or standing on the platform
• Determine or influence compensation rates

If you believe you have experienced discrimination, please contact us immediately at contact@ugctank.com.

7. Messaging Privacy

Data Collection: Our messaging feature collects:

• Message content (text you send)
• Sender and recipient identifiers
• Timestamps of when messages were sent
• Read receipts (when messages were viewed)

No End-to-End Encryption: Messages are not end-to-end encrypted. While your data is protected by Google Firebase's encryption in transit and at rest, UGC Tank can access message content for:

• Sending email notifications with message previews
• Investigating reported abuse or harassment
• Responding to legal requests
• Providing customer support

Message Sharing: Your messages are shared only with the intended recipient, UGC Tank administrators for moderation, and law enforcement if legally required. We do not sell message content.

Email & SMS Notifications: We use Resend to send email notifications and Twilio to send SMS notifications about new messages. These notifications may include a preview of the message content (up to 100 characters) and the sender's name. Message notifications cannot be turned off. If you have opted in to SMS, we will text you instead of emailing you.

Message Retention: Messages are retained while both participant accounts are active. To request message deletion, contact contact@ugctank.com.

Read Receipts: We track when you view messages to calculate unread counts. There is currently no option to disable read receipts.

8. SMS Notifications

Program Description: UGC Tank sends SMS notifications to creators who have opted in during account setup. Messages include new campaign match alerts (when new brand campaigns matching your profile go live) and message notifications (when a brand sends you a message on the platform).

Data Collected: When you provide your phone number, we collect and store it solely to send you SMS notifications related to your UGC Tank account. Your phone number is never sold, rented, or shared with third parties for marketing purposes. It is shared with Twilio, our SMS delivery provider, solely to deliver messages on our behalf.

Opt-In: SMS notifications are optional. You may provide your phone number and opt in during profile setup. Opt-in requires an explicit checkbox acknowledgment.

Opt-Out: You may opt out of SMS notifications at any time by replying STOP to any message we send. You may also manage your notification preferences from your account settings at ugctank.com/dashboard/account. After opting out, you will receive one final confirmation message and no further SMS messages will be sent.

Message Frequency: Message frequency varies based on campaign activity and platform usage. You may receive up to one campaign digest SMS per week and one message notification per conversation.

Message and Data Rates: Standard message and data rates may apply depending on your mobile carrier plan.

Help: Reply HELP to any SMS message for assistance, or contact us at contact@ugctank.com.

9. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions
• Right to Correct: You can request correction of inaccurate personal information we hold about you
• Right to Opt-Out of Automated Decision-Making: We use algorithmic matching to determine campaign visibility. You may request information about how this logic applies to your profile and opt out of profiling that produces legal or similarly significant effects
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

We Do Not Sell Personal Information: UGC Tank does not sell your personal information to third parties. We do not engage in the sale of personal information as defined by the CCPA.

To exercise your California privacy rights, please contact us at contact@ugctank.com. We will verify your identity before processing your request.

10. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing: We process your personal data based on the following legal grounds:

• Contract: Processing necessary to provide our services to you
• Legitimate Interests: Processing for platform security, fraud prevention, and maintaining service reliability
• Consent: Where you have given explicit consent for specific processing activities
• Legal Obligation: Processing required to comply with applicable laws

Your Rights: You have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. You also have the right to withdraw consent at any time and to lodge a complaint with your local data protection authority.

International Data Transfers: Your data may be transferred to and processed in the United States, where our servers are located. We rely on standard contractual clauses and other appropriate safeguards to protect your data during such transfers. We have assessed the risks of these transfers and determined that adequate protections are in place through our service providers' security measures and contractual commitments.

EU Representative: If you are located in the EEA and have questions about our data practices, please contact us at contact@ugctank.com. We will work to address your concerns and, if required by the volume of EU users, will appoint a formal EU representative under GDPR Article 27.

To exercise your GDPR rights, please contact us at contact@ugctank.com.

11. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (HTTPS), encryption at rest (Google Firebase), access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is 100% secure.

12. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected users by email within 72 hours of becoming aware of the breach, or as soon as reasonably practicable. We will also notify relevant regulatory authorities as required by applicable law, including GDPR and state breach notification laws. Our notification will include the nature of the breach, the types of data affected, and the steps we are taking to address it.

13. Cookies and Tracking

UGC Tank uses essential cookies and local storage required for authentication and core platform functionality (e.g., keeping you logged in). We also use the following analytics services:

• Google Analytics: To understand how users interact with our platform, including page views, session duration, and general usage patterns. Google Analytics may set cookies on your browser. For more information, see Google's Privacy Policy.
• Vercel Analytics: To monitor platform performance and page load times. Vercel may collect anonymized performance data. For more information, see Vercel's Privacy Policy.

We do not use third-party advertising cookies or cross-site tracking technologies for ad targeting. Our hosting provider may collect basic server logs (IP address, browser type, access times) for security and performance monitoring.

14. Changes to Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the platform at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated Privacy Policy.

15. Contact

For privacy-related questions or to exercise your rights, please contact us at contact@ugctank.com

UGC Tank
1111b South Governors Avenue STE 40749
Dover, DE 19904
United States