Privacy Policy

1. Overview

This Privacy Policy explains how Miller Tech Solutions LLC, which operates postUGC as a brand ("postUGC," "we," "us," or "our"), collects, uses, discloses, and protects information when you visit our website, create an account, or use the postUGC dashboard, video generation tools, and related services (together, the "Service").

By using the Service, you agree to the collection and use of information described in this Policy. If you do not agree, please do not use the Service. This Policy should be read together with our Terms of Service.

2. Information We Collect

We collect the following categories of information:

• Account information: name, email address, password (stored as a salted hash), company name, role, and website you provide when registering, applying for access, or completing onboarding.
• Campaign and content data: product URLs you submit, information extracted or manually entered about products or apps, brand voice preferences, scripts, hooks, captions, hashtags, and content calendar entries you create.
• Uploaded media: product images, brand assets, screen recordings, custom avatar images, and reference photos you upload to generate videos.
• Generated content: AI-generated scripts, voiceovers, videos, thumbnails, and avatars produced through the Service, and metadata describing how they were generated (model, resolution, duration, credits charged).
• Social account connections: when you connect TikTok, Instagram, Facebook, or YouTube accounts through our social publishing provider, we receive account identifiers and publishing status; we do not receive your social media password.
• Billing information: plan selection, subscription status, credit usage, and transaction history. Payment card details are collected and processed directly by our payment processor — we never receive or store full card numbers.
• Usage and device data: pages visited, links and features used, browser type, device identifiers, IP address, approximate location derived from IP address, session activity, and log data collected when you visit or use the Service.
• Communications: messages you send to support, waitlist or early-access applications, and email interactions (opens/clicks) related to account, billing, and product emails.

3. How We Use Your Information

We use the information described above to:

• Create and administer your account and provide the Service, including generating scripts, videos, and captions from the content you supply.
• Process payments, manage subscriptions and credits, and send billing-related communications.
• Publish or schedule content to social platforms you have connected, at your direction.
• Provide customer support and respond to inquiries.
• Send transactional emails (verification, password reset, receipts, welcome, and service notices) and, where permitted, product updates.
• Monitor, secure, debug, and improve the Service, including analyzing usage trends and reviewing masked session recordings.
• Detect, prevent, and investigate fraud, abuse, and violations of our Terms of Service or Refund & Cancellation Policy.
• Comply with legal obligations and enforce our agreements.

4. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: performance of a contract (providing the Service you signed up for), our legitimate interests (securing and improving the Service, preventing fraud), your consent (where required, such as optional marketing emails), and compliance with legal obligations.

5. Third-Party Service Providers

We use third-party service providers to operate, secure, support, and improve the Service. These providers may process information only as reasonably necessary to perform services for us, subject to applicable contractual and legal obligations. The categories of providers and information involved include:

• Cloud infrastructure, hosting, storage, authentication, and security providers may process account identifiers, campaign data, uploaded or generated media, and technical logs needed to deliver and protect the Service.
• Payment and billing providers process contact and transaction information, subscription status, and payment credentials needed to complete purchases and manage billing. Full payment card details are handled directly by the payment provider and are not stored by us.
• Communication providers process contact information and delivery metadata needed to send account, security, billing, and service-related messages.
• AI and media-processing providers may process prompts, product or campaign information, scripts, images, video, and audio that you submit or generate so they can produce requested content and related outputs.
• Research and data-retrieval providers may process search terms and relevant campaign context to help identify trends, competitors, and content ideas. We limit directly identifying information shared for this purpose where reasonably practicable.
• Social integration and publishing providers process authorization tokens, social account identifiers, content, captions, schedules, and publishing status when you connect an account or direct us to publish content.
• PostHog, our product analytics provider, may process page views, clicks, feature usage, masked session recordings, device and browser information, account identifiers for signed-in users, IP addresses, and diagnostic data. Input fields are masked in session recordings.
• Other workflow, job-processing, monitoring, and fraud-prevention providers may process account or job identifiers, device and usage information, IP addresses, status information, and diagnostic logs needed to operate, measure, and secure the Service.
• Business operations and internal notification providers may receive limited account and operational event information needed to support the Service and respond to activity requiring attention.

Our providers may use their own subprocessors where permitted by their agreements with us. We do not sell your personal information, and we do not share it with third parties for their own advertising purposes. You may contact us for additional information about relevant provider categories.

6. International Data Transfers

postUGC is operated from the United States and our service providers may process data in the United States and other countries. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards, such as standard contractual clauses, to the extent required by applicable law.

7. Data Retention

We retain account, campaign, and billing data for as long as your account is active and as needed to provide the Service, comply with legal and tax obligations, resolve disputes, and enforce our agreements. Generated videos, scripts, and uploaded media are retained until you delete them or delete your account, subject to reasonable backup retention periods.

When you delete your account, we cancel any active subscription, delete your authentication record, and delete or anonymize associated personal data within a commercially reasonable time, except where we are legally required to retain certain records (for example, billing records for tax purposes).

8. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent where processing is based on consent.

• EEA/UK residents (GDPR): rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local data protection authority.
• California and other U.S. state residents (CCPA/CPRA and similar laws): rights to know, delete, correct, and opt out of the sale or sharing of personal information. postUGC does not sell personal information or share it for cross-context behavioral advertising.

To exercise any of these rights, email support@postugc.com. We may need to verify your identity before completing certain requests. You can also delete your account and most associated data directly from Account Settings.

9. Cookies and Similar Technologies

The Service uses essential cookies and browser storage needed for authentication and basic functionality. We also use local browser storage for PostHog product analytics and masked session recordings. See our Cookie Policy for details and controls.

10. Children's Privacy

The Service is not directed to individuals under 18 years of age, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at support@postugc.com and we will delete it.

11. Security

We use administrative, technical, and organizational safeguards designed to protect your information, including encryption in transit, access controls, and row-level security on our database. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the change takes effect. The "Effective Date" above reflects the latest revision.

13. Contact Us

Questions about this Privacy Policy or our data practices can be sent to support@postugc.com. This Policy is issued by Miller Tech Solutions LLC, the company that operates the postUGC brand, in New York, USA.