Privacy Policy
Last updated October 20, 2026. This policy explains what personal data the ugcmodels.com service collects from brands, creators and visitors, why we use it, who receives it and how you can control it. The service is run by the administrator of the ugcmodels.com service, and you can reach us about anything in this policy at support@ugcmodels.com.
Who is responsible for your data
The administrator of the ugcmodels.com service decides how and why personal data on the service is processed and is responsible for it. In this policy "we", "us" and "UgcModels" mean that administrator, and "service" means the ugcmodels.com website, the casting search, brand workspaces, creator profiles and every related email.
Privacy questions, requests and complaints go to support@ugcmodels.com. Account holders can also write to us from inside their account. We answer every request ourselves and do not route it through a form.
Data you give us
- Account data. Your email address, password (stored only as a secure hash), the role you choose (brand or creator) and the one time code we send to confirm your email.
- Brand workspace data. Brand or client names you enter, team member emails, shortlists, casting specs, briefs, order details, approvals, revision notes and the usage rights chosen for each order.
- Creator profile data. Display name, the city or region you show, age band (21 to 29, 30 to 39, 40+), on-camera type, settings, gear, languages, platforms, turnaround, your rate card, portfolio clips and photos, and the deliverables you upload for orders.
- Identity verification data. To confirm that every creator is 21 or older and is who they say they are, a creator submits an identity document and a live photo through our identity verification provider. We receive the result of the check, the date of birth and the name on the document. We do not keep a copy of the document image on our own servers.
- Payout data. Creators add payout details so that order payments can reach them. Payout account details are held by our payment provider, and we see only what is needed to show payout status.
- Messages. Messages between brands and creators inside the service and emails you send to support@ugcmodels.com.
Data we collect when you use the service
- Billing records. Your plan, billing period, invoices, renewal dates and the result of each charge. Card numbers are entered on the payment provider's page and never reach our servers.
- Activity records. Sign-ins, searches you save, shortlists, orders, deliveries, approvals and rights records, with the date, time, IP address and browser details recorded alongside each event.
- Technical data. IP address, device and browser type, pages requested and error logs, which our servers record to keep the service secure and working.
- Usage statistics. We measure page visits in aggregate without cookies and without building a profile of you. See our cookie policy.
Purposes and legal grounds
| Purpose | What it covers | Legal ground |
|---|---|---|
| Running your account | Sign-in, workspaces, creator profiles, shortlists, orders and messages | Performance of our contract with you |
| Payments and payouts | Charging brand subscriptions and orders, releasing payment to creators, invoices | Performance of the contract and legal obligations on accounting and tax |
| Age and identity checks | Confirming each creator is 21 or older and holds the identity shown | Legitimate interest in a safe marketplace and legal obligations |
| Usage rights records | Keeping a record of which rights were granted for each asset and when | Performance of the contract and legitimate interest in proving the rights |
| Security and fraud prevention | Detecting misuse, unauthorized charges and fake accounts | Legitimate interest and legal obligations |
| Service emails | Codes, order updates, renewal notices and receipts | Performance of the contract |
| Improving the service | Aggregate statistics on how pages and features are used | Legitimate interest |
We do not sell personal data, we do not share it for cross-context advertising and we do not use it to make decisions about you that have legal effects based solely on automated processing.
Categories of recipients
We share personal data only with providers who help us run the service, under contracts that limit their use of it to our instructions, and only to the extent each task requires.
- Hosting provider. Stores the service and its databases on servers in secure data centers.
- Payment provider. Processes card payments for brand plans and orders and handles payouts to creators.
- Email delivery provider. Sends confirmation codes, order updates, receipts and renewal notices.
- Identity verification provider. Runs the ID and age check for creators before a profile goes live.
- Professional advisers and authorities. Accountants, lawyers or public authorities when the law requires it or when we need to establish or defend a legal claim.
Inside the service, a brand sees a creator's public profile, comp card and rate card. A creator sees the brief, brand name and order details for orders they receive. A brand never sees a creator's identity document, date of birth or payout details.
International transfers
Some providers process data outside your country. Where data leaves the European Economic Area or the United Kingdom, we rely on standard contractual clauses or another transfer mechanism recognized by law.
Retention periods
- Account and profile data stays while your account is open and is deleted within 30 days after you close it, except for the records below.
- Billing records and invoices are kept as long as accounting and tax laws require, usually up to 7 years.
- Order records, deliverables needed to prove delivery and usage rights records are kept for as long as the granted rights last plus the period in which a claim can be raised.
- Identity verification results are kept while the creator profile exists and for up to 3 years after, to prevent a removed account from returning under a new email. The document image and the selfie used for the check are deleted once the check is complete; only the result, the date of the check and the age band are kept.
- Server and security logs are kept for up to 12 months.
What you can ask us to do
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or send it to you in a portable format. You can withdraw any consent you gave at any time. Residents of California and other US states with privacy laws have the right to know, delete and correct personal data and the right not to be discriminated against for using these rights.
Send your request to support@ugcmodels.com from the email address on your account. We may ask you to confirm your identity before we act, and we answer within 30 days. You also have the right to complain to your local data protection authority.
Children
The service is for adults only. Creators must be 21 or older and pass an ID check, and brand users must be at least 18. We do not knowingly collect data from anyone under 18, and we delete it if we learn that we have.
How we protect your data
Connections to the service are encrypted, passwords are stored only as secure hashes, access to production data is limited to people who need it for their work and every access is logged. No system is perfectly secure, so if we learn of a breach that affects you, we tell you and the relevant authority as the law requires. Read more on our security page.
Changes to this policy
When we change this policy, we update the date at the top. If a change materially affects how we use your data, we tell account holders by email before it takes effect.