Privacy Policy

NextGenUGC is operated by [Your Company Ltd.], [Street, City, Postcode, Country]. We are the controller of the personal data described here. For any privacy question or request, email [email protected].

Information you give us

• Account details — name, email address, password (stored only as a secure hash) and whether you're a Brand or a Creator.
• Brand details — company name, website, phone, industry, description and logo.
• Creator profile — display name, photo, headline, bio, location, niche, social platforms, follower and engagement figures, starting price, and portfolio photos and videos.
• Marketplace activity — jobs, applications, offers, bookings, briefs, deliverables and messages you exchange with other users.
• Payout details — the PayPal email or bank information you enter when you request a withdrawal.

Payments

Card payments and subscriptions are handled by Stripe. We receive limited information from Stripe (such as a customer reference, plan, payment status and amount) but never your full card number.

Collected automatically

Like most websites, our servers and hosting provider log technical information such as IP address, browser type, pages requested and timestamps, to keep the service secure and working.

• To provide the Platform — create your account, show Creator profiles to Brands, run bookings, messaging, payments, subscriptions and payouts. Legal basis: performance of our contract with you.
• To send service emails — password resets, account approvals, booking updates, new-message alerts, payment and payout notices. Legal basis: contract.
• To keep the Platform safe — review new Brands, prevent fraud and abuse, and enforce our Terms. Legal basis: our legitimate interests in a safe marketplace.
• To meet legal obligations — for example tax and accounting records for payments. Legal basis: legal obligation.
• To improve the service — understand how features are used so we can make them better. Legal basis: legitimate interests.

• Other users. A Creator's public profile and portfolio are visible to Brands on the Platform. Messages, briefs and deliverables are shared with the other party to that conversation or booking.
• Service providers who process data on our behalf under contract: payment processing (Stripe), hosting and database providers, file storage for uploads, and our email delivery provider.
• Authorities, where we're legally required to, or to protect the rights and safety of our users and the public.
• A buyer or successor if our business is sold or reorganised, under the same protections.

We don't sell your personal data and we don't share it for advertising.

Some of our service providers may process data outside your country, including outside the European Economic Area or UK. When that happens we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

• Account and profile data — while your account is open, then deleted or anonymised within 90 days of closing it.
• Booking, payment and payout records — as long as tax and accounting law requires (typically up to 7–10 years).
• Messages and deliverables — while the account is open, or longer if needed to resolve a dispute.
• Server logs — usually no longer than 30 days.

We protect your data with encryption in transit (HTTPS), hashed passwords, access controls and trusted providers. Password reset links expire after an hour and work once. No system is perfectly secure, so please use a strong, unique password and tell us right away if you suspect misuse of your account.

Depending on where you live, you have the right to:

• access a copy of your personal data;
• correct inaccurate data (most of it you can edit yourself in your profile);
• delete your data, or restrict or object to how we use it;
• receive your data in a portable format;
• withdraw consent where we rely on it.

To use any of these rights, email [email protected]. We'll respond within one month. If you're unhappy with how we handle your data, you can complain to your local data-protection authority. Residents of California can also ask what personal information we've collected and ask us to delete it; we don't sell personal information.

We use one strictly necessary cookie, ngu_session, which keeps you signed in for up to 30 days. We don't use advertising or analytics cookies. Because this cookie is essential for the service to work, it doesn't require consent. Our payment provider, Stripe, may set its own cookies on its checkout pages.

NextGenUGC is for people aged 18 and over. We don't knowingly collect data from anyone younger; if you believe we have, contact us and we'll delete it.

We'll update this policy as the Platform changes. If changes are significant we'll tell you by email or in the app. The date at the top shows when it last changed.