App privacy

Scope

The controller responsible for UGC Stage is مؤسسة سلمان عبدالله الجمعان التجارية, a Saudi sole establishment, unified national number 7054070987. This notice describes the app’s processing, including its paid-service features; it does not replace the email list's notice or the specific website application notice.

Questions and privacy requests can be sent to hello@ugcstage.com.

Information used by the service

Account and profile information may include name, contact details, role, business details and social-profile information. To apply, a creator gives their date of birth, ID type and ID number, TikTok username, sample videos and any photos, the link to the video they post with the tags UGC Stage gives, and, as their ID requires, a freelance document number or their business's commercial registration number and name. The date of birth is used only to check that the creator is 18 or older. It is deleted when the application is sent, and only the result of that check is kept. An application that is not sent keeps it until it is sent or the account is deleted. The ID number is kept privately, and the app shows only its last 4 digits. UGC Stage checks a freelance document's end date. Creator payouts also need tax and bank-account details.

Orders involve briefs, applications, messages, files, deliveries, approvals, feedback and support records. Payment records can include amounts, transaction references, statuses, invoices, refunds and payouts. Card credentials must be entered only through the approved payment interface, never through project chat or support email.

Technical records may include IP address, device and app information, access logs, crashes and security events. The app does not use analytics or optional tracking. Error and crash reports from the app and from UGC Stage's servers go to UGC Stage's error-monitoring provider, which stores them in Germany for up to 90 days. A report holds the error, the app version and language, the device model and operating system, the screen where it happened, the names of the screens recently opened and the buttons recently tapped and, for a server error, an order or payment reference; it is set to leave out names, contact details, messages, files, IP addresses, amounts and bank details. Device permissions will be requested when needed for a feature.

Purposes and your permissions

Necessary data supports accounts, profile display, bookings, collaboration, delivery, payments and support. Relevant information also supports verification, security, fraud prevention, dispute handling, accounting and legal obligations.

UGC Stage monitors everything in the app, chats included, for security and for breaches of the Terms. A message that seems to share a phone number, an email address or payment details is detected automatically and reviewed by UGC Stage's staff. Its words as written then are kept for that review, even if the message is later edited or removed.

Each purpose must have an applicable lawful basis under Saudi data-protection requirements. Where consent is required, it will be requested separately and can be withdrawn. Marketing uses the relevant permission and an unsubscribe option; withdrawing it does not cancel an order or stop essential service messages. Personal data will not be sold, and accepting general terms is not consent to every possible use.

Visibility and sharing

Published creator profiles and portfolios may be visible to prospective customers or the public, as explained at publication. An order's chat and private deliveries are shared only between the order's two parties and UGC Stage, for the purposes above. Private files do not automatically become portfolio or promotional material.

Necessary information may be shared with hosting, storage, communications, security, verification and payment providers under appropriate arrangements. For a creator registered for VAT, UGC Stage sends the creator's registered name, national address, seller ID and VAT number, and each order's invoice details, to its e-invoicing provider, through which the creator's tax invoice is issued and reported to ZATCA; for a standard tax invoice, the brand's billing details (its legal name, national address, and VAT number or other ID) go with it. As ZATCA requires, a tax invoice and its credit note show the creator's registered name, VAT number, national address and seller ID to the brand, and a standard tax invoice shows the brand's billing details to the creator; they are kept as tax records for as long as the law requires, also after either account is deleted. Any other invoice names the creator by their name in the app. For a creator who sells through a business, every invoice and credit note also shows the brand the business's name and commercial registration number. Providers may have independent legal obligations and their own notices. Lawful disclosure to authorities or for permitted legal claims may also be necessary.

UGC Stage stores the app's data, sign-in details and files with its hosting provider in India. The website's hosting provider may process data in other countries, and providers, support and backups may also process data elsewhere. International transfers are subject to the applicable Saudi requirements and safeguards.

Media and record retention

An order's chat, with its messages and files, and the files shared or delivered in the order stay available to both parties for one year after the order is completed or cancelled, and the order shows the date. After that year they are deleted for good, and backup copies within the 35 days below. The order's file list keeps each file's name, type and size, shown as expired, and captions and notes on delivered work are cleared on the same date. Files can close sooner. If an order is cancelled or refunded in full, or its payment is taken back by the bank, each party can still open its own files for the year but no longer the files the other sent; the chat stays for the year. After a part refund, the brand stops seeing the items refunded. A brand that asks its bank to take back a payment stops seeing the files the creator sent in that order, chat files included, even if the bank decides for UGC Stage.

If an account is deleted during that year, the deletion goes through. The other party keeps the chat for the year, and the deleted account shows as "Deleted account". The files that account sent go with it, except the files a creator shared or delivered on a paid, completed order, with the captions and notes on that work: the brand can still open and save them in the app until the year ends, and its rights in that content do not change. A chat or file needed for an open report, claim, review or bank reversal, or by law, is kept until that ends; after the year, only UGC Stage's staff can open it. A report keeps its own copy of the message reported, also after the chat is deleted.

Save the files you need to your own secure storage before the date; a preview or app cache is not a permanent download. UGC Stage does not delete copies that others saved.

Profile photos and portfolio media stay while the account exists. A creator's profile keeps two videos, which the creator can replace but not delete. If a creator application is declined, its sample videos and photos, ID number, payout account and video link are deleted at once; the TikTok username and tags are kept so they are not used again. Deleting the account deletes the application.

Account information is kept while needed for the service and outstanding obligations. Relevant transaction, tax, verification and dispute records may need longer retention after closure. Technical logs of requests and errors are kept for up to 90 days, records of sent emails and notifications for up to 180 days, and sign-in and security events as long as account security needs them. Backups are kept for up to 35 days, except monthly copies of payment records. Records of payments, refunds, payouts, receipts and payout statements, with the identity and bank details used for a payout, are kept for 10 years, as Saudi commercial and tax law require. When lawful retention needs end, data will be deleted or anonymized as appropriate.

Your rights and security

Subject to applicable law, you may request information about processing, access, a copy, correction or completion, and destruction when data no longer needs to be retained. Where processing relies on consent, you may withdraw it. Requests may require proportionate identity verification.

Contact hello@ugcstage.com from your account email and describe the request. Responses will follow applicable legal time limits and explain any lawful extension, restriction or refusal and complaint routes, including the competent Saudi data-protection authority where applicable.

The safeguards include restricted access and appropriate technical and organizational protection. No service can guarantee absolute security. Any incident requiring notification will be reported to the relevant authority and affected people as required by law. The app is intended for users aged 18 and over; contact us if you believe an underage person has supplied account information.