Privacy Policy
Last updated: 7 October 2026
1. Who We Are
The controller responsible for your personal data is:
SEQUEL AI LTD
Registered number: 16897137
Registered office: 128 City Road, London, United Kingdom, EC1V 2NX
Privacy contact: privacy@ugcgenie.ai
2. About the Service
UGCGenie is a software service that helps users create UGC-style video advertisements. Depending on how you use the Service, you may create product briefs, generate scripts, actors, voiceovers, captions and videos, configure brand preferences, and manage affiliate relationships.
3. The Personal Data We Collect
We may collect and process the following categories of personal data:
a. Account information
- Login and account details (email, OAuth provider identifiers from Google/GitHub)
- Email verification status
- Profile and account preferences
Passwords are handled through our authentication provider and are not stored in our application database in readable form.
b. Subscription and billing information
- Subscription plan and status
- Payment-related reference information such as Stripe customer and subscription identifiers
- Refund status where relevant
- Affiliate payout information where applicable, including payout destination details for affiliate administration
We do not store full payment card details. Payments are processed by Stripe.
c. Content and usage data
- Product briefs, scripts, generated videos, captions, and related generation metadata
- Brand preferences, formats and settings
- Operational records and troubleshooting logs
d. Affiliate and referral data
- Referral codes, click records (IP address, user agent, landing path, referrer)
- Commission and payout records
e. Technical data
- General application and security logs
- Cookie and consent preferences
f. Support and communications data
- Emails and messages you send to us
- Records of support and privacy requests
4. How We Use Your Personal Data
We use personal data to:
- Create and manage user accounts
- Provide, operate and maintain the Service
- Generate content requested by you
- Store your settings, preferences and brand kits
- Process subscriptions, payments and refunds
- Administer affiliate relationships, attribution and payouts
- Send service-related, administrative and security communications
- Provide customer support
- Monitor, troubleshoot and improve service reliability and performance
- Prevent fraud, abuse, misuse and unauthorised access
- Comply with legal, regulatory, tax and accounting obligations
- Send marketing communications where permitted by law or where you have consented
We do not use customer content to train our own AI models.
5. Legal Bases for Processing
Depending on the circumstances, we rely on the following legal bases under UK data protection law:
- Contract: to provide the Service you signed up for, process payments and operate your account
- Legitimate interests: service security, abuse prevention, reliability and product improvement
- Consent: optional cookies and marketing communications where required
- Legal obligation: tax, accounting and regulatory record-keeping
6. AI Providers and Automated Content Generation
To provide the Service, we use third-party AI providers for tasks such as script generation, image and video generation, and voice synthesis.
When using these providers, we send the content inputs needed to generate the output you requested. We do not intentionally send your email address or other direct user identifiers as part of routine content generation requests.
In limited cases, authorised personnel may review content or account-related information where reasonably necessary for support, debugging, abuse prevention, quality control or service reliability.
7. Cookies and Similar Technologies
We use cookies and similar technologies to operate the Service and remember your preferences:
- Necessary cookies required for authentication, security and core site functionality
- Affiliate attribution cookies (45-day lifetime) that credit referral partners
- Optional analytics cookies
- Optional marketing cookies
Where required by law, we ask for your consent before using non-essential cookies. You can manage your cookie preferences through our cookie banner or related settings tools. See our Cookie Policy.
8. How We Share Personal Data
We may share personal data with trusted third parties where necessary to operate the Service, including:
- Authentication providers (Supabase, Google, GitHub)
- Payment processors such as Stripe
- AI service providers used for content generation
- Cloud hosting, database and storage providers
- Email and communications providers
- Professional advisers, auditors, insurers or legal representatives where reasonably necessary
- Regulators, authorities or law enforcement where required by law
We do not sell your personal information.
If a court, regulator, law enforcement agency or other public authority asks us for personal data, we review every request for legal validity, challenge requests we consider unlawful or overly broad using available legal remedies, disclose only the minimum necessary, and keep a record of each request and response.
9. International Transfers
Because we use service providers and integrations that may operate in different countries, your personal data may be transferred to and processed outside the UK or your home country. Where required, we take appropriate steps to ensure such transfers are subject to suitable safeguards in accordance with applicable data protection law.
10. Security
We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access. These include, where appropriate:
- Encryption in transit using HTTPS/TLS
- Access controls and restricted internal access
- Encrypted storage of sensitive tokens
- Security logging and audit records for administrative events
No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
11. Data Retention
We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain your account, respond to support issues, keep appropriate business records, prevent fraud and comply with legal obligations.
- Account information is retained while your account remains active and for a reasonable period afterwards where necessary
- Billing and financial records may be retained longer where required by law
- Affiliate click records are retained for attribution and fraud-prevention purposes
- Deleted data may remain in backups for a limited period before those backups expire
12. Account Deletion and Data Deletion Requests
You may request deletion of your account and personal data at any time by contacting privacy@ugcgenie.ai. We will review and action valid requests within a reasonable period and in accordance with applicable law. In some cases, we may need to retain certain information where required for legal, tax, accounting, fraud prevention, dispute resolution or regulatory reasons.
13. Marketing Communications
We may send you service-related communications that are necessary to operate your account or provide the Service. We may also send product updates, news and marketing communications where permitted by law. You can opt out of marketing emails at any time by using the unsubscribe link in the message or by contacting us. Opting out of marketing does not stop essential service communications.
14. Your Rights
Depending on where you are located and subject to applicable law, you may have rights including:
- The right to access your personal data
- The right to correct inaccurate personal data
- The right to request deletion of personal data
- The right to restrict certain processing
- The right to object to certain processing
- The right to data portability
These rights are not absolute and may be subject to legal exemptions and limitations. To exercise them, contact privacy@ugcgenie.ai.
If you are in the UK and are unhappy with how we handle your personal data, you also have the right to complain to the Information Commissioner's Office (ICO).
15. Children
The Service is not intended for children or minors, and we do not target minors through the Service.
16. Third-Party Services and Platforms
The Service may contain links to or integrations with third-party services and platforms. Their privacy practices are governed by their own policies and terms. We encourage you to review those policies when using third-party services.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to the Service, legal requirements or our data practices. If we make material changes, we will take reasonable steps to notify users where appropriate, such as through the Service or by email.
18. Contact
If you have questions about this Privacy Policy or wish to exercise your rights, contact privacy@ugcgenie.ai.