Privacy Policy

Last updated: October 13, 2026

This policy explains how TheUGC.life ("TheUGC", "we", "us") collects, uses, stores, shares and deletes information when you use theugc.life and the TheUGC.life application (the "Service").

1. Who we are

The Service is operated by Brian Blisniuk (sole proprietor / monotributista), CUIT 20-38617895-0, with registered address at Manuel Ugarte 2035 8C, C1428, Ciudad Autónoma de Buenos Aires, Argentina (the "data controller"). Contact: privacy@theugc.life.

Argentine data protection law (Ley 25.326) applies. The Agencia de Acceso a la Información Pública (AAIP) is the control authority. The AAIP, in its capacity as Control Body of Law No. 25.326, has the power to deal with complaints and claims filed by those whose rights are affected by non-compliance with the regulations on personal data protection.

2. Information we collect

• Account data: name, email address, and authentication identifiers when you sign up (including via Google Sign-In).
• Content you provide: creator profile, pitches, notes, collaborations, deliverables and pipeline data you enter.
• Gmail data (optional): only if you explicitly connect your Gmail account (see Section 3).
• Usage and technical data: log data such as IP address, browser type, and pages visited, used for security and to operate the Service.
• Billing data: if paid plans are offered, payments are processed by a payment provider; we do not store full card numbers.

3. Gmail data and Google user data

Connecting Gmail is optional. If you connect it, we request read-only access (https://www.googleapis.com/auth/gmail.readonly). We never send, modify or delete email on your behalf.

How we use it: solely to provide a user-facing feature: detecting emails related to hotel collaborations (for example, replies from hotels to your pitches) and showing them, with relevant details such as sender, subject, date and status, in your TheUGC.life pipeline. Messages not related to hotel collaborations are not stored.

Limited Use. TheUGC.life's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Gmail data only to provide and improve the user-facing collaboration-detection feature described above.
• We do not transfer Gmail data to third parties, except as necessary to provide or improve that feature (e.g., our hosting and database subprocessors listed below), to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you.
• We do not use Gmail data for serving advertisements, including retargeting, personalized or interest-based advertising.
• We do not sell Gmail data.
• We do not use Gmail data to develop, improve or train generalized or non-personalized AI and/or machine-learning models.
• No human reads your Gmail data unless (a) you give us affirmative consent for specific messages (e.g., a support request), (b) it is necessary for security purposes such as investigating abuse, (c) it is necessary to comply with applicable law, or (d) the data has been aggregated and anonymized and is used for internal operations.

4. How we use information

To provide, maintain and secure the Service; to show hotels and manage your pitches and pipeline; to respond to your requests; to process payments for paid plans; and to comply with legal obligations. We do not sell personal information.

5. Legal bases (EEA/UK users)

Performance of a contract (providing the Service), your consent (connecting Gmail; you can withdraw it at any time), legitimate interests (security, fraud prevention, improving the Service), and legal obligations.

6. Storage and security

Data is stored in a database hosted by Supabase in the European Union. Data is encrypted in transit (TLS) and at rest. OAuth tokens are stored encrypted and access is restricted to the minimum required personnel and systems.

7. Subprocessors

• Supabase Inc.: database, authentication and storage (EU region).
• Netlify, Inc.: website and application hosting.
• Google LLC: Google Sign-In, Gmail API (only if you connect Gmail) and Maps.

If we add a payment or email-lookup provider, we will update this list before it processes your data.

8. Retention and deletion

• Disconnecting Gmail: you can disconnect Gmail at any time in the app settings or at Google Account permissions. When you disconnect in the app, we revoke our access token and delete stored Gmail-derived data and tokens within 30 days.
• Account deletion: you can delete your account in the app or by emailing privacy@theugc.life. We delete your personal data, including Gmail-derived data, within 30 days, except where retention is required by law (e.g., billing records).
• Otherwise: we keep account data while your account is active. Backups are overwritten on a rolling basis within 30 days of deletion.

9. Your rights

Depending on your location, you may have the right to access, correct, delete, export or restrict processing of your data, to object to processing, and to withdraw consent. Under Argentine Law 25.326 you may also exercise the rights of access, rectification, updating and deletion. To exercise them, email privacy@theugc.life. We will respond within 30 days. You may also complain to your local data protection authority, including the AAIP in Argentina.

10. International transfers

Some subprocessors may process data outside your country. Where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

11. Children

The Service is not directed to anyone under 16, and we do not knowingly collect their data.

12. Changes

We will post updates on this page and notify you of material changes by email or in the app.

13. Contact

Brian Blisniuk (sole proprietor / monotributista), CUIT 20-38617895-0, Argentina. Address: Manuel Ugarte 2035 8C, C1428, Ciudad Autónoma de Buenos Aires, Argentina. Email: privacy@theugc.life.