Privacy Policy

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you:

• Register on the Services
• Purchase subscriptions or services
• Request information about HourlyUGC
• Participate in activities on the Services
• Contact us directly

Personal information may include:

• Names
• Phone numbers
• Email addresses
• Job titles / company information
• Usernames and passwords
• Billing addresses
• Payment-related details (handled by payment processors)

Sensitive information

In short: We may process sensitive information only when necessary and permitted by law.

When necessary, with your consent or as otherwise permitted by law, we may process sensitive information related to compliance, identity verification, creator onboarding, or contractor-related workflows.

Payment data

We may collect data necessary to process your payment if you make purchases. All payment data is handled and stored by Stripe (or other payment processors). See Stripe’s Privacy Policy.

Information automatically collected

In short: Some information is collected automatically when you use our Services.

• IP address
• Browser and device characteristics
• Operating system
• Language preferences
• Referring URLs
• Country/region (approximate)
• Usage activity and interaction data
• Diagnostic and performance information

In short: We process your information to provide, improve, and administer the Services, communicate with you, prevent fraud, and comply with law.

• To facilitate account creation, authentication, and user management
• To provide the Services and deliver the platform experience
• To process payments and manage subscriptions
• To respond to inquiries and provide customer support
• To send administrative information (service updates, billing notices)
• To protect the Services and prevent fraud or abuse
• To identify usage trends and improve performance
• To comply with legal obligations

In short: We only process personal information when we have a valid legal basis.

EU/UK users — we rely on:

• Consent
• Performance of a contract
• Legitimate interests
• Legal obligations
• Vital interests

Canadian users — we may process information based on express or implied consent, and you may withdraw consent at any time.

In short: We may share information in specific situations and with specific third parties.

• Service providers (hosting, analytics, customer support tooling, communications)
• Payment processors (such as Stripe)
• Analytics providers (such as Google Analytics, if used)
• Professional advisors (lawyers, accountants, auditors)
• Affiliates or entities under common ownership/control

We may also share information:

• In connection with a business transfer (merger, acquisition, financing)
• To comply with legal obligations or respond to lawful requests
• To protect our rights, users, and the integrity of the Services

Regardless of the categories above, no mobile phone numbers or SMS opt-in data are ever shared with third parties or affiliates for marketing or promotional purposes. See Section 17 for our full SMS policy.

In short: Yes, we may use cookies and similar technologies.

We may use cookies, pixels, and similar tracking technologies to:

• Maintain security and basic site functions
• Remember preferences
• Prevent fraud and abuse
• Analyze performance and improve the Services

If a brand connects a Shopify store, we access its orders and products through the Shopify Admin API and install a Shopify web pixel to measure completed checkouts. From this we store only order IDs, order totals, discount codes, and which creator drove the sale. We use it to attribute sales to creator content, verify purchases, detect returns, and send product samples. We do not collect or store a shopper’s name, email address, shipping address, or payment details. We keep this data only while the store is connected, and we honor Shopify’s mandatory privacy webhooks: when Shopify sends a customers/redact or shop/redact request we delete the corresponding data, and a customers/data_request is acknowledged because we hold no shopper personal data. This data is deleted when the store is disconnected or the account is removed.

See our Cookie Policy for full details.

In short: If you log in via social accounts, we may receive certain profile information.

If you choose to register or log in using a third-party account, we may receive:

• Name
• Email address
• Profile image
• Other information you make public

We use this information only for authentication and account functionality.

In short: Brands can connect their own Meta (Facebook) assets. We use that access only to run their ads and to measure results.

If you are a brand and choose to connect Meta through Facebook Login, you grant us permission to access the following on your behalf:

• Your ad account, so we can create and publish ads from creator videos you have already approved. The ads run in your own ad account and on your own budget; we never run ads from accounts you did not connect.
• Your Facebook Pages, so you can choose the Page those ads are published under. We do not read your Instagram accounts.
• Your ad performance data (insights), so we can show you how each creator video performs and calculate the performance bonuses owed to creators. We read insights only for your own connected ad account.

Separately, we use the Meta Pixel and Meta’s Conversions API to measure our own advertising. These tools send Meta event data (such as page views, trial starts, and purchases) together with hashed contact identifiers (email address, phone number, first and last name, and an internal user ID). Hashing means Meta receives a scrambled value that can be used for matching but does not reveal the raw information.

Retention: data from the Meta integration is kept only while the integration is connected. We delete it when you disconnect the integration, when your account is deleted, or when we receive a data deletion request from Meta.

To delete this data, you can disconnect Meta in your Settings, delete your HourlyUGC account, or remove HourlyUGC from your Facebook account’s Apps and Websites settings, which sends us an automated deletion request from Meta. You can check the status of a Meta deletion request at hourlyugc.com/meta-data-deletion.

In short: As long as necessary to fulfill the purposes outlined in this Privacy Notice.

• Provide the Services
• Maintain your account
• Meet legal, tax, accounting, or regulatory obligations
• Resolve disputes and enforce agreements

When no longer needed, we delete or anonymize personal information unless required by law.

In short: We use reasonable safeguards, but no system is perfectly secure.

We implement appropriate technical and organizational measures to protect personal information. However, no electronic transmission or storage technology can be guaranteed to be 100% secure.

In short: We do not knowingly collect information from children under 18.

We do not knowingly collect, solicit, or market to individuals under 18 (or the equivalent age in your jurisdiction). If we learn we have collected such information, we will take steps to delete it.

In short: Depending on your location, you may have rights to access and control your information.

• Request access to your personal information
• Request correction or deletion
• Restrict or object to processing
• Data portability (where applicable)
• Not be subject to certain automated decision-making (where applicable)

Account information: review, update, or terminate your account through your account settings, or email support@hourlyugc.com.

Most browsers offer Do-Not-Track (DNT). There is no uniform standard for recognizing DNT signals, so we do not currently respond to them.

If you are a resident of certain US states (including California), you may have rights to know whether we process your personal data, access it, correct inaccuracies, request deletion, obtain a copy, opt out of certain processing, and not face discrimination for exercising privacy rights.

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised “Last updated” date. If material changes are made, we may notify you via the Services or email.

If you have questions or comments, contact us at:

To submit a request, email support@hourlyugc.com with the subject line: “Privacy Request — HourlyUGC”.

HourlyUGC offers an SMS notification service for job opportunities, brand messages, and account updates. By opting in during registration, you consent to automated text messages from HourlyUGC sent via an autodialer. Consent is not a condition of any purchase.

Message frequency varies. Message and data rates may apply. Opt out at any time by texting STOP. For help, send HELP to (833) 644-2491 or email support@hourlyugc.com.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Information sharing with subcontractors in support services, such as customer service, is permitted.