Privacy Policy

UGC AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at ugcai.io and our AI-powered video and carousel generation services (collectively, the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Password (encrypted)
• Account preferences

1.2 Payment Information

When you make a purchase, payment information is collected and processed by our third-party payment processors. We do not store your full credit card number or payment details on our servers. We may receive:

• Transaction confirmation
• Last four digits of your card (for reference)
• Billing address
• Purchase history

1.3 Uploaded Content

When you use our Service, we collect:

• Product images you upload for processing
• Text and scripts you provide for video generation
• Settings and preferences for content generation

1.4 Generated Content

We store the videos, carousels, and images generated through our Service until you choose to delete them.

1.5 Usage Data

We automatically collect certain information when you use our Service:

• IP address
• Browser type and version
• Device information
• Pages visited and features used
• Time and date of visits
• Referring website

2. How We Use Your Information

We use the information we collect to:

2.1 Provide the Service

• Process your uploaded images and generate content
• Manage your account and credits
• Store and deliver your generated content

2.2 Process Payments

• Process subscription and credit pack purchases
• Manage billing and invoicing
• Prevent fraud

2.3 Improve the Service

• Analyze usage patterns to improve features
• Fix bugs and technical issues
• Develop new features

2.4 Communicate with You

• Send account-related notifications
• Respond to your inquiries and support requests
• Send service updates and announcements
• Send marketing communications (with your consent)

3. Data Storage & Security

3.1 Data Storage

Your data is stored securely using Supabase, a trusted database platform with enterprise-grade security. Our servers are located in secure data centers with appropriate physical and technical safeguards.

3.2 Security Measures

We implement various security measures to protect your information:

• Encryption of data in transit (SSL/TLS)
• Encryption of sensitive data at rest
• Secure password hashing
• Regular security audits
• Access controls and authentication

3.3 Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only as described in this policy or with your explicit consent.

4. Third-Party Services

We use the following third-party services to operate our platform:

Service	Purpose
Payment Processors	Process credit card and payment transactions
Kie AI	AI video and image generation processing
Supabase	Database and authentication services
Vercel / Hostinger	Website hosting and content delivery

These third parties have their own privacy policies governing the use of your information. We encourage you to review their policies.

5. Data Retention

5.1 Account Data

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it by law.

5.2 Generated Content

Your generated videos, carousels, and images are retained until you delete them or delete your account.

5.3 Usage Data

Usage data and analytics may be retained in aggregated, anonymized form for longer periods to help us improve the Service.

5.4 Data Deletion Requests

You can request deletion of your data at any time by contacting us at support@ugcai.io or by deleting your account through the Settings page.

6. Your Rights (GDPR Compliant)

If you are located in the European Economic Area (EEA) or in jurisdictions with similar data protection laws, you have the following rights:

6.1 Right to Access

You can request a copy of the personal data we hold about you.

6.2 Right to Rectification

You can request that we correct any inaccurate or incomplete personal data.

6.3 Right to Erasure

You can request that we delete your personal data, subject to certain legal exceptions.

6.4 Right to Data Portability

You can request a copy of your data in a structured, commonly used, machine-readable format.

6.5 Right to Object

You can object to the processing of your personal data for certain purposes, including direct marketing.

6.6 Right to Withdraw Consent

Where we process data based on your consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact us at support@ugcai.io. We will respond to your request within 30 days.

7. Cookies

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. We use cookies to improve your experience and provide essential functionality.

7.2 Types of Cookies We Use

• Essential Cookies: Required for the Service to function properly, including authentication and session management
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how visitors use our website

7.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect the functionality of the Service.

8. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@ugcai.io.

If we discover that we have collected personal information from a child under 18, we will delete that information as quickly as possible.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information, including:

• Standard contractual clauses approved by relevant authorities
• Data processing agreements with our service providers
• Compliance with applicable data transfer regulations

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending an email notification for material changes

Your continued use of the Service after any changes constitutes your acceptance of the new Privacy Policy.

11. Legal Basis for Processing (GDPR)

For users in the EEA, we process personal data on the following legal bases:

• Contract: Processing necessary to provide the Service you requested
• Consent: Where you have given explicit consent (e.g., marketing emails)
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the Service and preventing fraud
• Legal Obligation: Processing necessary to comply with legal requirements