Privacy Policy

1. Who We Are

UGC ("we", "us", "our") operates as a digital creative agency and the merchant of record for all transactions on the platform, with international contracts and payments handled via our global affiliate, Flywox Inc. We operate the UGC platform at ugc.africa.

For privacy questions, contact our data protection team at [email protected]. We reply to every message.

2. What This Policy Covers

This Privacy Policy applies to personal data collected through the UGC platform, including our website, creator and advertiser portals, and related services. Third-party websites we link to have their own privacy policies.

3. What We Collect

Account and profile data

• Name, email address, phone number, and country.
• Role (creator or advertiser), profile details, and verification status.
• Social account handles and verification codes you submit.

Campaign and earnings data

• Campaign slots you reserve, posts you submit, and view metrics used to calculate earnings.
• Wallet balances, transaction history, and payout details.

Information collected automatically

• Device and browser information, IP address (for fraud prevention and security), and session data.
• Language and theme preferences stored in cookies or local storage.

4. Why We Process Your Data

• Contract performance - operating your account, campaigns, slots, and payouts.
• Legitimate interests - fraud prevention, platform security, and aggregate analytics.
• Legal obligation - tax, KYC, and regulatory requirements where applicable.
• Consent - where required for optional features such as marketing emails.

5. How We Use Your Information

• To create and manage your account.
• To match creators with campaigns and calculate verified earnings.
• To process advertiser campaign funding and reporting.
• To send transactional emails (verification, payouts, security alerts).
• To prevent fraud, abuse, and duplicate accounts.
• To meet our legal and regulatory obligations.

6. Third-Party Services

We use trusted processors to operate the platform, including payment providers (Paystack, Flutterwave, Stripe), email delivery, cloud hosting, and analytics. Each processor has its own privacy policy. We do not sell your personal data to third parties for marketing or advertising purposes.

6A. Platform API Integrations

To verify campaign performance, we use official APIs from social platforms for posts creators voluntarily submit:

• YouTube Data API v3 - public view counts for submitted YouTube Shorts URLs only.
• TikTok Content API - public view counts for submitted TikTok video URLs only.
• Instagram Graph API - public view counts for Reels the creator has explicitly authorised via OAuth.

We do not access private messages, follower lists, or unrelated profile data. API data is used solely to calculate and verify creator earnings and detect fraudulent view inflation.

Creators can stop submitting posts at any time. To delete data we have collected, contact [email protected].

7. Data Retention

We retain account data while your account is active and for a reasonable period afterward to meet legal, tax, and dispute-resolution obligations. You may request deletion subject to regulatory requirements.

8. International Data Transfers

Your data may be processed in regions that provide an adequate level of protection. Where data is transferred internationally, we ensure appropriate safeguards are in place.

9. Your Rights

Depending on where you are located, you may have the right to:

• Access - request a copy of the personal data we hold about you.
• Rectification - ask us to correct inaccurate data.
• Erasure - ask us to delete your personal data, subject to legal obligations.
• Restriction - ask us to limit how we process your data.
• Portability - receive your data in a structured, machine-readable format.
• Objection - object to processing based on legitimate interests.
• Withdraw consent - at any time, without affecting processing before withdrawal.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

10. Cookies

We use functional cookies and local storage for authentication, language preference, and theme settings. We do not use tracking or advertising cookies on the core platform.

11. Children

UGC is not directed at anyone under 18 years of age. We do not knowingly collect data from minors. If you believe we have done so, contact us immediately and we will delete the data.

12. Security

We take reasonable technical and organisational precautions to protect your data, including HTTPS encryption, access controls, and fraud monitoring. No internet transmission is perfectly secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this policy occasionally. Material changes will be communicated by email or in-app notice. The "Last updated" date at the top reflects the current version.

14. Contact

For privacy questions or to exercise your rights, contact [email protected].