HHellowUGCHome

Privacy Policy

Version v2-2026-09. This notice explains how HellowUGC handles creator and contributor data. Last updated: 29 September 2026.

1. Who is responsible

For account administration and operation of the platform, HellowUGC is the controller. For a creator's request, selection and later use of submitted content, that creator is generally the controller and HellowUGC processes data on their instructions. Temporary example operator details, to be replaced before launch: HellowUGC B.V. (in formation), Example Street 1, 1011 AA Amsterdam, the Netherlands, Chamber of Commerce 00000000, support@hellowugc.com.

2. Data we collect

From creators we process account, profile, contact, plan, request, shot-list, activity and support data. From contributors we process name, email or WhatsApp number, submitted photos and videos, file metadata, request association, permission wording and version, time of agreement and technical browser information. We also process security and diagnostic data needed to prevent misuse.

3. Purposes and legal bases

We process account and service data to perform our agreement; security, fraud prevention and product reliability for legitimate interests; legal and consent records to comply with obligations and establish or defend claims; and optional communications where you consent or request contact. A creator must have an appropriate legal basis for inviting contributors and using their content.

4. Permission records

The exact permission text accepted by a contributor is stored with a version and timestamp as evidence. It is append-only and cannot be edited by users. Content-use permission and privacy processing are related but not identical: withdrawing a content licence does not automatically require deletion of a minimal legal record where retention is necessary to establish or defend rights.

5. Retention

Rejected files are deleted after 30 days through the platform's cleanup process. Other submitted files remain while the creator's workspace or request requires them, until deletion is requested or the account is closed, subject to backups and legal duties. Contact messages are retained for up to 24 months after resolution. Permission and essential transaction records may be retained for up to seven years where reasonably necessary for legal evidence or statutory administration.

6. Sharing and processors

We use vetted providers for hosting, private file storage, authentication, email, monitoring and optional integrations such as Google Drive. They may process only what is needed under contractual safeguards. Creators can send approved files to their own connected services; that provider's terms then also apply. We do not sell personal data or content to advertisers.

7. International transfers

We prefer processing within the European Economic Area. Where a provider processes data outside it, we use a lawful transfer mechanism such as an adequacy decision or approved Standard Contractual Clauses and apply additional safeguards where appropriate. Current provider information can be requested through the contact page.

8. Security

Files are held in private storage and accessed through time-limited links. We use access controls, role checks, logging and other technical and organisational measures appropriate to the risk. No online service is completely risk-free; report suspected misuse immediately and keep your account credentials secure.

9. Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw consent at any time without affecting processing that was lawful beforehand. We may verify identity and may retain limited information where law or legal claims require it. You may complain to the Dutch Data Protection Authority or your local supervisory authority.

10. Children and people in content

Creator accounts are for people aged 16 or over. Contributors under 16 must use the service through or with a parent or legal guardian. A contributor should not upload images of identifiable people without appropriate permission. Creators must take additional care with children's images and must not use HellowUGC to collect exploitative or unsafe content.

11. Cookies, changes and contact

We use essential storage needed for language, authentication and security. If optional analytics or marketing technologies are introduced, we will provide the required information and choices first. We may update this notice and will identify material changes. Privacy questions and rights requests can be submitted through the contact page or support@hellowugc.com.