Skip to content
ugcbios

Legal

Privacy policy

Last updated 17 October 2026

Who we are

ugcbios.com (“ugcbios”, “we”) is operated by Roster Labs, Inc.. We are the controller of the personal data described here, except where a creator controls data collected through their own page (inquiries and email subscribers), in which case we process it on the creator’s behalf.

Creators (account holders)

When you create a page we collect:

  • Account data: your email address and sign-in records (we use one-time codes and sign-in links, so we don’t store a password unless you set one).
  • Page content: handle, name, headline, bio, photo, location, niches, languages, rates, portfolio videos and images, social links and follower counts you enter or import, and the on-camera traits you choose to show (for example age range, parent, pet owner, languages). Page content is public once you publish.
  • Imported data: if you import from TikTok or Instagram, we fetch the public profile details and recent public posts for the handle you give us, and copy your profile photo into our storage.
  • Billing data: if you subscribe to Pro, Stripe processes your payment. We receive your plan, renewal date and a Stripe customer reference, never your full card number.

We use this to run your page, your dashboard and your subscription, to send service emails (such as new-inquiry alerts and billing receipts), and to keep the service secure.

Brands and inquiries

When a brand sends an inquiry through a creator’s page we store the name, email, company, website, budget, requested deliverables and message they submit, and share it with that creator by email and in their inbox. We use it to deliver the inquiry and to prevent spam. Creators handle their own replies and deals.

People visiting creator pages

To give creators analytics we record page views, link clicks and video plays with:

  • the country, derived from the request at the time of the visit;
  • the device type (mobile or desktop) and the referring website’s domain;
  • a visitor identifier that is a one-way hash of the request with a secret salt that changes every day.

We do not store IP addresses in analytics, and the daily-changing hash means a visitor can’t be followed from one day to the next. We don’t use advertising trackers or sell visitor data.

Email subscribers

If you subscribe to a creator’s list from their page, we store your email address for that creator. The creator can see and export it, and can delete it at any time.

Cookies

We use essential cookies to keep signed-in creators signed in. Visitors to public creator pages and marketing pages don’t need a cookie for the page to work, and we don’t set advertising cookies.

Service providers

We use these providers to run ugcbios. Each processes data only to provide its service to us:

  • Supabase: database, authentication and file storage (portfolio videos and images).
  • Stripe: subscription billing and payments.
  • Resend: sending emails such as sign-in codes and inquiry alerts.
  • Vercel: hosting and content delivery.
  • Apify: fetching public TikTok and Instagram profile data when you choose to import.

Some providers process data outside your country, including in the United States, under appropriate safeguards.

Retention

We keep account and page data while your account is open. When you delete your account, your page, portfolio, inquiries, subscribers and analytics are deleted from our live systems. Backups roll off on our providers’ schedules. Billing records are kept as long as tax law requires.

Your rights

Depending on where you live, you can ask to access, correct, export or delete your personal data, or object to how we use it. Creators can edit or delete most data from their dashboard. For anything else, or if you sent an inquiry or subscribed through a creator’s page and want it removed, email us. You can also complain to your local data protection authority.

ugcbios is not intended for anyone under 16.

Contact

Email privacy@ugcbios.com. See also our terms of service.