Privacy Notice

This notice explains what data UGC Create collects, why, who processes it and what rights you have — under Türkiye’s KVKK (Law No. 6698) and the EU GDPR. Plain language, no surprises: we collect what the product needs to work, and you can export or erase it yourself.

Who is responsible

The data controller (KVKK: veri sorumlusu) is Furkan Alp Günay (individual), Türkiye, operating as UGC Create. Contact: info@ugcreate.dev.

What we collect

• Account data — your email and name; if you sign in with Google or GitHub, the profile id those providers share.
• Production data — product assets you upload, the briefs you write, and the media we generate for you (including rejected takes, kept for transparency).
• Usage and ledger records — renders, credit movements (grants, holds, spends, refunds), plan state. The ledger is append-only because your billing history should be exact.
• Technical data — the session cookie that keeps you signed in, plus standard server logs (IP address, user agent).
• Payment data — handled by our payment partner as Merchant of Record (named at checkout and on your receipt). We receive transaction status and receipts, never full card numbers.

Why we use it

• to run the service: compile briefs, generate and score video, deliver results;
• to bill you exactly — credits, subscriptions, refunds;
• to keep accounts secure and prevent abuse of the platform;
• to answer support requests;
• to meet legal obligations (tax and accounting records).

Legal bases

Under KVKK Art. 5 and GDPR Art. 6, we process data because it is necessary to perform our contract with you (running the service, billing), because of legitimate interests (security, abuse prevention), because the law requires it (accounting), or — where none of those apply — with your explicit consent, which you can withdraw at any time.

Who processes it for us

We name our processors honestly — these providers touch your data only to do the jobs below:

• Neon — Postgres database — accounts, credit ledger, production records.
• Cloudflare R2 — media storage — uploaded assets and generated video.
• Payment partner (Merchant of Record, named at checkout) — payments — card details go to the payment partner, never to us.
• fal.ai / BytePlus (Seedance) — video generation — briefs and product assets are sent to render your videos.
• Anthropic — realism scoring — generated takes are analyzed against the gate.
• Vercel / Railway — hosting — the web app and the API run here.
• Vercel Web Analytics — aggregate page-view counts — cookieless, no cross-site tracking, no personal identifiers stored.
• Resend — transactional email (verification, receipts) and the launch waitlist — the address you leave there is stored only to notify you once and is deleted on request.

We do not sell your data. There are no advertising trackers here.

International transfers

Some of the providers above process data outside Türkiye and the EEA (including the United States). Where that happens we rely on the providers’ contractual data-protection commitments and, for GDPR transfers, their standard safeguard mechanisms.

Retention

• Account data — for as long as your account exists.
• Uploaded assets and generated media — until you delete them or erase your account.
• Billing and ledger records — as long as tax and accounting law requires, even after erasure.
• Server logs — short-lived, for security and debugging.

Your rights

Under KVKK Art. 11 and GDPR Arts. 15–21 you can access, correct, export, restrict, object to, and erase your data. The fastest path is self-serve: Settings → Data & privacy gives you export and erasure directly. You can also email info@ugcreate.dev — we answer within the statutory deadlines. If you believe we handled your data wrongly, you can complain to the Turkish Data Protection Board (KVKK) or, in the EU, to your local supervisory authority.

Cookies

We set the cookie needed to keep you signed in. No third-party advertising or cross-site tracking cookies.

Children

UGC Create is for adults — you must be at least 18 to use it.

Changes

If this notice changes materially we will tell you in the app or by email; the effective date at the top always reflects the current version.

Contact

Privacy questions and rights requests: info@ugcreate.dev. See also the Terms of Service and the Refund policy.