Privacy policy

UGC API ("we") runs ugcapi.dev, an API that publishes content to TikTok, Instagram, Facebook and YouTube on behalf of our customers and the creators who connect their accounts. This policy explains what we collect and why.

What we collect

• Customer account: your email address, API keys (stored only as a hash), credit balance and payment records from Stripe. We don't store card numbers.
• Connected social accounts: when a creator connects TikTok, Instagram, Facebook or YouTube, the platform gives us an access token (and sometimes a refresh token), the account id, username and profile picture URL. Tokens are encrypted at rest (AES-GCM). We never see or store passwords.
• Content: the media files, captions and schedule you send us, and the results the platforms return (post ids and URLs, error messages).
• Logs: request logs for security and debugging, kept for up to 30 days.

What we do with it

We use platform access only to do what the connected account owner and our customer asked: publish the scheduled content, read the account's basic profile to show which account is connected, and check publishing status. We don't read private messages, follow lists or analytics, we don't sell data, and we don't use it for advertising or to train AI models.

Platform data

Our use of data received from Google APIs (YouTube) adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from TikTok and Meta is used only as permitted by their developer terms.

How long we keep it

• Media files: deleted automatically after they're posted (within days), and at most 30 days after upload if unused.
• Access tokens: until the account is disconnected, the connection expires, or the owner revokes access on the platform.
• Post records: while your customer account is open, so you can see your history.

Your choices

Creators can disconnect anytime from the platform's own settings (which revokes our token) or by asking the customer that invited them. To delete your data, see data deletion or email hello@ugcapi.dev.

Processors

Cloudflare (hosting, storage, email), Stripe (payments), Google Analytics (anonymous site analytics on ugcapi.dev pages, not on API traffic).

Contact

hello@ugcapi.dev