Privacy Policy | UGC Roster

1. Introduction

Stacks Studio Holdings LLC ("we," "us," or "our") operates the UGC Roster platform and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. Please read this policy carefully.

2. Information We Collect

We collect information in the following ways:

Account information: Name, email address, and profile details when you create an account or sign in (including via Google).
Creator and business data: Information you provide about your creator profile, portfolio, deal tracking, contracts, and outreach activity.
Payment information: Billing details processed through Stripe. We do not store full credit card numbers.
Email and communications: If you connect your Gmail account to send outreach emails through our platform, we use the Gmail API with your consent to send emails on your behalf. We store only the tokens necessary to perform this function and do not read, store, or access the contents of your inbox beyond sending the emails you authorize.
Usage data: How you interact with our platform, including pages visited and features used, to improve our services.
Device and browser data: IP address, browser type, and device information for security and analytics.

2.1 Information Collected from Brand Users

If you register as a Brand User (brand, agency, or marketer), we may collect:

Business name, business contact information, and authorized representative details;
Billing and payment information (processed through Stripe);
Campaign details, briefs, product information, and brand guidelines you submit;
Messaging and communication content exchanged with Creators through the Platform;
Subscription and transaction history.

2.2 Information Collected from Creators

If you register as a Creator, we may collect:

Personal information such as your name, email address, profile photo, and biographical information;
Social media handles, follower counts, engagement metrics, and audience demographic data;
Portfolio content, including videos, images, and other media you upload;
Payment and tax information (e.g., bank account details, tax identification numbers) necessary to process Creator compensation and comply with tax reporting obligations;
Content you create in connection with Campaigns, including drafts and final Deliverables;
Communication content exchanged with Brand Users through the Platform.

3. How We Use Your Information

We use your information to:

Provide, maintain, and improve our services
Process payments and manage your subscription
Send transactional emails (e.g., welcome emails, contract links) via our email provider
Send outreach emails on your behalf when you connect Gmail and authorize us to do so
Authenticate your identity and secure your account
Respond to your inquiries and support requests
Send marketing communications (with your consent, where required)
Analyze usage patterns and improve user experience
Comply with legal obligations and protect our rights

3.1 Creator Portfolio Content License

By uploading videos, images, or any other media to your portfolio or profile on UGC Roster, you grant Stacks Studio Holdings LLC a worldwide, perpetual, irrevocable, royalty-free, fully sublicensable, and transferable license to use, reproduce, display, distribute, modify, adapt, create derivative works from, and publicly perform such content for any purpose related to the operation, promotion, marketing, and advertising of UGC Roster and its services. This includes, without limitation, the right to feature your portfolio content on our website, social media channels, paid advertisements, sales materials, pitch decks, case studies, and any other marketing or promotional materials — whether online or offline — to showcase the caliber and diversity of creators on the Platform. You represent and warrant that you own or have all necessary rights and permissions to the content you upload and that granting this license does not violate any third-party rights. This license survives any termination or deletion of your account.

4. Third-Party Services

We use trusted third parties to operate our platform:

Firebase (Google): Authentication, database (Firestore), and cloud storage.
Google Gmail API: When you connect your Gmail account, we use the Gmail API to send emails you compose through our platform. We only request the minimum permissions needed (e.g., sending emails) and do not access your inbox beyond what you authorize.
Stripe: Payment processing and subscription management.
Resend: Transactional email delivery (contracts, notifications).
Microsoft Clarity: Analytics to understand how users interact with our site.
Vercel: Hosting and infrastructure.

Each of these providers has their own privacy policies. We encourage you to review them.

4.1 Data Shared Between Brand Users and Creators

When Brand Users and Creators interact through the Platform — including through Campaigns, messaging, applications, or content delivery — certain information may be shared between them (such as names, email addresses, portfolio content, and campaign details). UGC Roster is not responsible for how Brand Users or Creators use, store, or disclose data they receive about each other through the Platform. Any data sharing between Brand Users and Creators is governed by their own agreements and applicable law. We strongly encourage both Brand Users and Creators to handle each other's data responsibly and in compliance with all applicable privacy laws.

5. Cookies and Similar Technologies

We use cookies and similar technologies to keep you logged in, remember your preferences, and analyze site traffic. You can control cookies through your browser settings, though some features may not work properly if you disable them.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Even after account termination or deletion, we may retain certain data indefinitely for legitimate business purposes, including but not limited to: legal compliance and audit requirements, fraud prevention and security, enforcement of our Terms of Service (including off-platform solicitation provisions), financial record-keeping and tax reporting obligations, dispute resolution and litigation holds, backup and disaster recovery, and aggregated or anonymized analytics. We determine the appropriate retention period based on the nature and sensitivity of the data and the purposes for which it is processed. You may request deletion of your account and associated data by contacting us, but we reserve the right to retain data where required or permitted by law.

7. Your Rights

Depending on your location, you may have the right to:

Access and receive a copy of your personal data
Correct or update inaccurate data
Request deletion of your data
Object to or restrict certain processing
Data portability
Withdraw consent where processing is based on consent

To exercise these rights or disconnect your Gmail account, contact us at the email below.

8. Security

We implement commercially reasonable security measures to protect your data, including encryption in transit and at rest, secure authentication, and access controls. However, no method of electronic storage or transmission over the internet is 100% secure. We cannot and do not guarantee the absolute security of your information. You acknowledge that you provide your personal information at your own risk. To the maximum extent permitted by applicable law, we shall not be liable for any unauthorized access to, disclosure of, or loss of your personal information, except where such breach is caused by our gross negligence or willful misconduct.

9. Children

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us so we can delete it.

10. Health-Related Data

Although the Platform may be used by brands in the health, wellness, supplement, peptide, or nutraceutical industries, UGC Roster does not sell, share, rent, or otherwise disclose any user personal data for the purpose of health, supplement, or medical product targeting, advertising, or profiling. We do not collect or process health-related data about individual users (such as medical conditions, prescriptions, or health diagnoses). Any product information provided by Brand Users through the Platform (such as product descriptions or campaign briefs) is treated as business data, not personal health information.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

Right to Know: You may request that we disclose what personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collecting it, and the categories of third parties with whom we share it.
Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
Right to Opt Out of Sale or Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please contact us at the email address below. We will verify your identity before processing your request. You may also designate an authorized agent to submit a request on your behalf.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and applicable local law, including:

Right of Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You may request that we correct any inaccurate or incomplete personal data.
Right to Erasure: You may request that we delete your personal data, subject to certain legal exceptions.
Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

Our legal bases for processing personal data include: performance of a contract (providing our Services), legitimate interests (improving our Platform, security, and fraud prevention), consent (where applicable), and compliance with legal obligations. To exercise any of these rights, or to lodge a complaint with a supervisory authority, please contact us at the email address below.

13. Law Enforcement and Legal Process

We may disclose your personal information to law enforcement agencies, government authorities, regulatory bodies, or other third parties if we believe in good faith that such disclosure is necessary to: (a) comply with a legal obligation, subpoena, court order, search warrant, or other lawful request; (b) protect the rights, property, or safety of UGC Roster, our users, or the public; (c) investigate, prevent, or take action regarding suspected illegal activities, fraud, or violations of our Terms of Service; (d) respond to claims that any Content on the Platform violates the rights of third parties; or (e) enforce our Terms of Service, including collection of fees owed. We reserve the right to make such disclosures without prior notice to you to the extent permitted by law.

14. International Data Transfers

Your information may be transferred to, stored, and processed in the United States or any other country in which UGC Roster or its service providers maintain facilities. By using the Platform, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules. We will take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy, but we cannot guarantee that foreign jurisdictions will provide the same level of data protection as your home jurisdiction.

15. Aggregated and Anonymized Data

We may collect, create, use, disclose, transfer, and otherwise process aggregated, de-identified, or anonymized data derived from your use of the Platform for any lawful purpose, including but not limited to analytics, benchmarking, research, product development and improvement, industry reports, marketing, and commercial purposes. Aggregated and anonymized data is not considered personal information under this Privacy Policy and may be shared with third parties without restriction. We own all rights, title, and interest in aggregated and anonymized data, and you have no rights in or to such data.

16. Limitation of Liability for Data

To the maximum extent permitted by applicable law, UGC Roster shall not be liable for any unauthorized access to, use of, or disclosure of your personal information, or for any loss or damage of any kind arising from or relating to a data breach or security incident, except to the extent directly caused by our gross negligence or willful misconduct. You agree that any claim related to a data breach or privacy incident must be brought within one (1) year of the date you knew or should have known of the incident, or such claim shall be permanently barred.

17. Changes to This Policy

We may update this Privacy Policy at any time and for any reason. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. It is your responsibility to review this Privacy Policy periodically. Your continued use of our services after any changes constitutes your binding acceptance of the updated policy. If you do not agree with any changes, you must immediately cease all use of the Platform and terminate your Account.

18. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact Stacks Studio Holdings LLC at:

Email: gabe@ugcroster.com

Website: ugcroster.com