Legal
Privacy Policy
Last updated: July 22, 2026
This Privacy Policy explains how UGC Drive (“UGC Drive”, “we”, “us”, or “our”) collects, uses, shares, and protects personal data when you use ugcdrive.comand our platform that connects technology brands with vetted short-form UGC creators (the “Services”).
UGC Drive is operated from India and serves brands and creators worldwide. Please review this Policy together with our Terms of Service.
1. Who we are
UGC Drive operates ugcdrive.com, a curated marketplace that helps technology brands (apps, SaaS, AI tools, and similar digital products) find and work with vetted short-form UGC creators.
We are based in India and are responsible for personal data processed through the Services. For privacy questions or requests: hello@ugcdrive.com.
2. Information we collect
Depending on how you use UGC Drive, we may collect:
| Category | What we collect |
|---|---|
| Account & sign-in | Email address and authentication data when you sign in with a magic link or Google. |
| Creator applications | Email address you submit on our site, plus any details you provide on the linked application form (such as social profile links and other answers you choose to share). |
| Creator profiles | Information you add during onboarding or in your profile: full name, photo, region, primary language, age, gender, Instagram and/or TikTok URLs, content niches, platforms you use, past brand experience, whether you have done paid UGC before, and sample showcase content you select. |
| Public social metrics | Publicly available information about the Instagram and TikTok accounts you list (for example follower counts and engagement signals), used for vetting and matching. We do not ask for your social media passwords. |
| Brand accounts | Company name, website, product type, logo, contact name, your role (for example founder, marketing, or agency), and optional brand social handles. |
| Campaigns & matching activity | Campaign briefs, pay or budget details, creative requirements, targeting preferences (such as niche, location, language, age, gender, or platform), applications from creators, and connect activity between brands and creators. |
| Payments | Records of brand listing or connect-unlock purchases (amount, status, and payment references). |
| Communications | Emails and support requests you send us, and service emails we send you (for example invitations, campaign status, and connect notifications). |
3. How we use your information
- Create and manage your profile inside UGC Drive
- Review applications and invite users into the network
- Display creator profiles to brands in the campaign context and help both sides find strong fits
- Run matching and ranking using niche, audience signals, platforms, location, and similar preferences you or brands set
- Enable applications, connects, and contact reveal after a connect
- Process platform fees and send receipts or status emails
- Send service emails (invitations, approvals, campaign updates, and connect notifications)
- Improve, secure, and support the Services
Demographic details on creator profiles help brands find creators who authentically represent their audience. They are not used to deny platform access or to set creator pay.
Legal bases (where GDPR / UK GDPR applies): performance of a contract, legitimate interests in operating a secure curated marketplace, consent where we ask for it, and legal obligation.
4. How we share information
We do not sell your personal information.
Between brands and creators. Brands see applicant profiles for their campaigns. Before a connect, identifying details may be limited. After a connect, we share the contact and identity information both sides need to collaborate directly (for example email or social handles, and brand name/website).
Service providers. We use trusted vendors to operate the product:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, and file storage |
| Vercel | Hosting and application delivery |
| Resend | Transactional and notification emails |
| Google Analytics | Understanding how the site is used |
| Social data providers (e.g. RapidAPI / Apify) | Public Instagram and TikTok metrics for matching |
| Google Forms (when linked) | Certain application or intake submissions |
We may also share information when required by law, to protect users and the platform, or in connection with a business transfer.
5. Public social-media data
When you add Instagram or TikTok profiles, we retrieve publicly available information about those accounts to support vetting and matching. We do not access private or non-public content on those platforms.
6. Storage & retention
Your data is stored securely using Supabase and related infrastructure. We retain information while your account is active and as needed to provide the Services, meet legal requirements, and resolve disputes.
After account deletion, we delete or anonymize personal data within 30 days of verifying your request, except where retention is required by law or necessary for ongoing legal or accounting obligations.
7. Security
We use appropriate technical and organizational measures to protect personal data, including encryption in transit (HTTPS), access controls, and reputable infrastructure providers. We continuously work to keep the platform secure.
8. Cookies & analytics
We use essential cookies and local storage for sign-in and core functionality. Google Analytics helps us understand product usage. We do not use third-party advertising cookies for cross-site ad targeting. You can control cookies through your browser settings.
9. Your rights
You may request access, correction, deletion, or export of your personal data, and you may update profile information from your dashboard where available. Email hello@ugcdrive.com to make a request. We will verify your identity before processing it.
India (DPDP Act, 2023)
As a Data Fiduciary, we process personal data for the purposes described here. You may access, correct, update, and erase your data, and raise a grievance with us at the contact below.
EEA / UK (GDPR)
You have rights to access, rectify, erase, restrict, port, and object to certain processing, and to lodge a complaint with a supervisory authority. International transfers rely on appropriate safeguards such as Standard Contractual Clauses where required.
California (CCPA / CPRA)
You may request to know, delete, or correct personal information. We do not sell personal information and do not share it for cross-context behavioral advertising.
10. Children
The Services are intended for users 18 and older. We do not knowingly collect personal data from anyone under 18.
11. Changes
We may update this Privacy Policy as the platform evolves. We will revise the “Last updated” date and, for material changes, provide notice when practical. Continued use after an update means you accept the revised Policy.
12. Contact
For privacy questions, data requests: hello@ugcdrive.com.