This is a translation for convenience. The Arabic version is the legally binding version.
Introduction
1.1 Scope of this policy
This policy explains what data the UGCeer platform (“the Platform”, “we”) collects about you, why we collect it, who we share it with, how long we keep it, and what your rights are regarding it. It applies to the website and the content creator app, and to both clients and content creators.
1.2 Data controller
Mubdiu Almhtwa Company is responsible for processing your personal data under the Personal Data Protection Law of the Kingdom of Saudi Arabia.
1.3 Your acceptance
By using the Platform, you agree to the processing described here. If you do not agree, please stop using the Platform.
Data We Collect
2.1 Account data
First name and last name, username, email address, mobile number, country, and account type. You provide these when you register and when you update your profile.
2.2 Identity verification data
When identity verification is requested, we collect the documents you upload and their basic details. They are used for verification only and are never shown to the other party in any order.
2.3 Bank details
For content creators who withdraw their earnings: IBAN, account holder name, and bank name. These are used solely to make the transfer and are not shown to clients.
2.4 Content you upload
Your introduction video, portfolio clips, order delivery files, profile photo, and any attachments you send in conversations.
2.5 Conversations
The text of messages and their attachments between the client and the content creator. They are kept to run the conversation and to protect both parties if a dispute or report arises.
2.6 Transaction data
Orders, amounts, commissions, wallet movements, and withdrawal records. These records include a fixed snapshot of the beneficiary’s details at the time the transfer is made, and they form part of the accounting ledger.
2.7 Device and usage data
When you enable notifications in the app, we store your device’s push notification token, operating system type, app version, and device language. We also log your IP address, browser type, and last activity time for security purposes.
2.8 Compliance data
When we detect an attempt to exchange contact details outside the Platform, or when a report is received, we log the incident together with its time, the IP address, and the device’s browser. This is also explained in the communication policy that content creators agree to.
Why We Use Your Data
3.1 Operating the service
Creating accounts, displaying content creator profiles, fulfilling orders, running conversations, and delivering work.
3.2 Payments and earnings
Collecting payment for orders, calculating commission, and transferring content creators’ earnings to their bank accounts.
3.3 Safety and fraud prevention
Reviewing reports, handling bans, detecting attempts to deal outside the Platform, and protecting accounts from takeover.
3.4 Communicating with you
Notifications about orders, messages, and earnings by email and in-app notifications. Operational notifications are part of the service and cannot be turned off entirely; marketing messages, however, can be turned off.
3.5 Improving the Platform
Understanding how the Platform is used in order to improve the experience.
3.6 Legal compliance
Keeping financial records and invoices as required by law, and responding to legitimate legal requests.
Who We Share Your Data With
4.1 The other party to an order
The client and the content creator can see each other’s first name, profile photo, the order details, and the conversation between them. We do not show either party the other’s email address, mobile number, or bank details.
4.2 Service providers
We use providers to run parts of the service, and they do not use your data for their own purposes:
- Support service (Hupa) — receives your identifier, name, email address, and the content of the support conversation when you open one.
- Notification service (Expo) — receives your device’s push notification token and the notification text. We do not include message text, client names, amounts, or bank details in notifications.
- Video hosting (Bunny.net) — stores and streams the clips you upload.
- Cloud storage (DigitalOcean) — stores images, files, and attachments.
- Payment providers — to collect payments. We do not keep card numbers on our servers.
- Invoicing and email — issuing statutory invoices and sending emails.
- Measurement tools — analytics tools to understand how the website is used.
4.3 Legal authorities
We share what is necessary when there is a legitimate legal request, or to protect our rights or the rights of our users.
4.4 What we don’t do
We do not sell your personal data, rent it, or share it with advertisers to target you outside the Platform.
Data Retention
5.1 While your account is active
We keep your data for as long as your account exists.
5.2 Financial records
Orders, invoices, wallet movements, and withdrawal records are kept for the period required by accounting and tax laws, even after the account is closed. These records carry the beneficiary’s details at the time of the transfer because they are part of the ledger itself and cannot be deleted from it.
5.3 Conversations
Kept to document dealings between the two parties and to handle disputes and reports.
5.4 Security logs
Kept for a limited period and then deleted.
Account Deletion
6.1 How to request it
You can request deletion of your account directly from within the app, or by contacting us.
6.2 What happens
When you submit the request, your account is closed immediately, you can no longer log in, and your profile is no longer shown to clients. The account can be restored within a certain period if you change your mind or if it turns out the request was made by mistake.
6.3 What is not deleted
The financial records and invoices referred to in clause 5.2 are kept for the statutory period.
6.4 When deletion can’t happen immediately
If you have an order in progress or a balance that has not yet been withdrawn, we ask you to settle it first so that neither your rights nor the other party’s rights are lost.
Your Rights
7.1 What you can request
You have the right to know what data we hold about you, to obtain a copy of it, to correct any inaccurate data, to request its deletion, to object to a particular processing, and to withdraw your consent to optional processing.
7.2 How to exercise them
Email us at the address given in clause 10, and we will respond within the statutory period. We may ask for proof of your identity before acting, to protect your account.
7.3 Limits on these rights
We may be unable to carry out a deletion request for data we are legally required to keep, and we will explain the reason to you.
Data Security
8.1 What we do
Data is transmitted over an encrypted connection, login tokens are stored in the device’s secure storage, internal access is restricted on a need-to-know basis, and sensitive operations are logged.
8.2 What we can’t guarantee
No method of transmission or storage is completely secure. We make reasonable efforts to protect you, but we cannot guarantee absolute security.
8.3 Your responsibility
Keep your password confidential and do not share it, and notify us immediately if you suspect unauthorized access to your account.
Children
9.1 Age
The Platform is not intended for anyone under eighteen. If we learn that data has been collected from a minor without legal consent from their guardian, we will delete it.
Contact and Updates
10.1 How to contact us
For any question or request concerning your privacy: hi@ugceer.com
10.2 Updates to this policy
We may update this policy, and the date of the last update appears at the top of the page. If there is a material change, we will notify you through the Platform or by email. Continuing to use the Platform after the update constitutes acceptance of it.