Who is responsible for your data
The controller of personal data processed through this website and the GeneratedUGC application is the administrator of the generatedugc.com service (in this policy "we", "us" or "the administrator"). You can reach us about anything in this policy at [email protected]. We answer privacy requests from the email address linked to the account, so we can confirm the request really comes from you.
What GeneratedUGC does
GeneratedUGC is a tool for e-commerce brands, app companies and agencies. You give it a product link, it researches the product, writes hooks, angles and scripts, produces short videos with fictional AI presenters, assembles ad variants and, if you connect your ad accounts, launches and measures them on Meta and TikTok. Most of the data we handle is business data about your products and ads. Personal data comes in mainly through your account, your team and your use of the service.
Data we collect
Account and team data
When you create an account we collect your email address and a password, which we store only as a secure hash. If you invite teammates, we store their email addresses and roles. Workspace names, team membership and settings you choose are stored with your account.
Billing data
When you subscribe, our payment processor collects your card details directly. We never see or store full card numbers. We receive and keep the plan you bought, the billing period, the amounts paid, the country of the card, the result of bank authentication and the billing details you enter for invoices, such as a company name and tax number.
Content you provide
This includes product links and the public information we read from those pages (titles, prices, images, descriptions and published customer reviews), competitor ad links you paste, the hooks and scripts you edit, the creators and settings you choose and the ads we render for you. Published reviews can contain first names or nicknames written by their authors. We use them only to summarise what buyers say about the product, and quotes stay inside your workspace.
Ad platform data
If you connect a Meta or TikTok ad account, we store an encrypted access token and the identifiers of the accounts, campaigns, ad sets and ads the service creates. We read performance metrics such as impressions, clicks, spend, conversions, cost per acquisition and return on ad spend for those ads. We don't read your audiences' personal data, and you can disconnect access at any time in the application or in the platform's own settings.
Usage and technical data
When you use the website or the application we record your IP address, browser and device type, the pages and features you use, the time of each action and error reports. For the free product preview we also record the IP address and a short fingerprint of the request so that the one-time preview cannot be repeated endlessly. Usage counters for your plan (imports, video seconds, variants, AI runs) are stored per workspace.
Messages
If you write to support, we keep the conversation and the details you share so we can help you and refer back to it later.
Why we use your data and on what legal basis
- To provide the service you signed up for: running your account, generating content, rendering videos, launching and measuring tests, sending the codes and notices the account needs. Legal basis: performance of a contract.
- To take payments and issue invoices and meet tax and accounting duties. Legal basis: contract and legal obligation.
- To keep the service safe: preventing abuse of the free preview, detecting fraud and unauthorised payments, protecting accounts and investigating misuse. Legal basis: our legitimate interest in a secure service.
- To improve the product using aggregated usage statistics, for example which steps of the workflow are slow. Legal basis: legitimate interest.
- To answer your messages and handle requests about your data. Legal basis: contract or legitimate interest, depending on the request.
We don't sell personal data, we don't use your content or your customers' reviews to train AI models of our own, and we don't build advertising profiles of you.
Who receives data
We share data only with providers that help us run the service, under contracts that limit them to processing it on our instructions. The categories are:
- a hosting and infrastructure provider that runs our servers and databases in the European Union,
- a payment processor that handles card payments, authentication and fraud screening,
- an email delivery provider that sends account codes and service messages,
- AI model providers that turn product information and your instructions into text, voice and video,
- ad platforms you connect yourself (Meta and TikTok), which receive the ads you choose to launch,
- professional advisers such as accountants and lawyers, where needed, and public authorities when the law requires it.
Some of these providers process data outside the European Economic Area. Where that happens, transfers rely on adequacy decisions or the European Commission's standard contractual clauses, with additional safeguards where needed.
AI processing
Text, voice and video are generated by AI models based on the product information and instructions in your workspace. AI presenters are fictional adults created for the purpose. We do not create the likeness or voice of a real person, and we don't accept uploads intended to imitate one. Generated content can contain mistakes, so you review it before you publish it. Information about labelling AI content in your ads is in our terms of service.
Cookies
The website and application use only cookies that are strictly necessary: a session cookie that keeps you signed in, a security token that protects forms and a cookie that remembers basic preferences. We don't use advertising cookies or tracking pixels, and our statistics are counted on our own servers without cookies. Because of that we don't show a cookie banner. You can block cookies in your browser, but signing in will stop working.
How long we keep data
- Account, workspace and content data: for as long as the account exists. When you delete your account, we delete it within 30 days, apart from what we must keep by law.
- Rendered videos and imported product data: for the life of the workspace, or until you delete them.
- Billing records and invoices: for the period required by tax and accounting law, usually five to ten years.
- Security and access logs: up to 12 months, longer only when needed for an ongoing investigation or dispute.
- Free preview records: up to 12 months, to keep the preview one per person.
- Support conversations: up to three years after the last message.
Your rights
Depending on where you live, and in every case if you are in the European Economic Area or the United Kingdom, you can ask us to give you access to your personal data, correct it, delete it, restrict how we use it, give it to you in a portable format, or stop using it where we rely on legitimate interest. You can also complain to your local data protection authority. Write to [email protected] from the email address on your account and we will answer within one month. Most of your data can also be edited or deleted directly in your account settings.
If you are a California resident, you have the right to know what personal information we collect, to request deletion and to not be discriminated against for using these rights. We don't sell or share personal information for cross-context behavioural advertising.
Security
Connections are encrypted, passwords are hashed, ad platform tokens are encrypted at rest, and access to production systems is limited to the people who need it. Accounts on the Agency plan can use single sign on, roles and an audit log. No system is perfectly secure, so please use a strong, unique password and tell us right away if you notice anything unusual.
Children
GeneratedUGC is a business tool intended for adults. We don't knowingly collect data from anyone under 18. If you believe a minor has created an account, let us know and we will delete it.
Changes to this policy
When we change how we handle personal data, we update this page. If a change materially affects you, we tell you by email or in the application before it takes effect.
Contact
Questions about this policy or your data go to the administrator of the generatedugc.com service at [email protected].