App privacy notice
The intended approach to personal data in UGC Stage accounts, profiles and paid collaborations. The current launch mailing list has its own privacy notice.
Prelaunch policy draft
UGC Stage is preparing to launch. These are the proposed policies for its paid services, which are not yet available. They are not yet effective transaction terms. The final legal operator details, fees, payment arrangements and policies will be published before paid bookings open.
Scope and publication status
This is the proposed privacy notice for the application. It does not replace the current launch-list notice or any specific notice presented during a website application. The final notice will identify the legal controller, address, actual providers, processing purposes and legal bases before the relevant app services launch.
Questions and privacy requests can be sent to hello@ugcstage.com.
Information used by the service
Account and profile information may include name, contact details, role, business details and social-profile information. Creator verification may require identity, registration, licensing, tax and beneficiary information. Where a provider performs verification directly, Stage should receive only what it needs to confirm eligibility and administer the service.
Orders involve briefs, applications, messages, files, deliveries, approvals, feedback and support records. Payment records can include amounts, transaction references, statuses, invoices, refunds and payouts. Card credentials must be entered only through the approved payment interface, never through project chat or support email.
Technical records may include IP address, device and app information, access logs, crashes and security events. The final notice will identify any analytics and optional tracking used. Device permissions will be requested when needed for a feature.
Purposes and your permissions
Necessary data supports accounts, profile display, bookings, collaboration, delivery, payments and support. Relevant information also supports verification, security, fraud prevention, dispute handling, accounting and legal obligations.
Each purpose must have an applicable lawful basis under Saudi data-protection requirements. Where consent is required, it will be requested separately and can be withdrawn. Marketing uses the relevant permission and an unsubscribe option; withdrawing it does not cancel an order or stop essential service messages. Personal data will not be sold, and accepting general terms is not consent to every possible use.
Media and record retention
The planned media download window is 30 days from first successful send for chat attachments, and 30 days from acceptance or documented completion for final paid deliverables. Open orders, disputes and preservation duties pause deletion of relevant files. Portfolio media and profile images do not expire merely because 30 days have passed.
Expiry dates and advance warnings must be available before this policy is enabled. Existing files will not be silently enrolled retrospectively. Save authorized final files to your own secure storage; a preview or app cache is not a permanent download. Expiry of service copies does not immediately erase every legal record, backup or recipient-saved copy.
Account information is kept while needed for the service and outstanding obligations. Relevant transaction, tax, verification and dispute records may need longer retention after closure. The final notice will state the applicable periods or clear criteria, including logs and backups. When lawful retention needs end, data will be deleted or anonymized as appropriate.
Your rights and security
Subject to applicable law, you may request information about processing, access, a copy, correction or completion, and destruction when data no longer needs to be retained. Where processing relies on consent, you may withdraw it. Requests may require proportionate identity verification.
Contact hello@ugcstage.com from your account email and describe the request. Responses will follow applicable legal time limits and explain any lawful extension, restriction or refusal and complaint routes, including the competent Saudi data-protection authority where applicable.
The intended safeguards include restricted access and appropriate technical and organizational protection. No service can guarantee absolute security. Any incident requiring notification will be reported to the relevant authority and affected people as required by law. The app is intended for users aged 18 and over; contact us if you believe an underage person has supplied account information.