Legal

Privacy policy

In short: we store your email, your projects and a credit balance. We do not sell data and we run no advertising. The sensitive part here is what you upload — photographs of products and of faces.

Who is responsible for your data

Write to support@ugc-studio.pro — the working address for anything about your data, a copy or a correction, deleting an account or refunds; we reply within a month, as GDPR requires. The service runs as a private project: there is no separate legal entity yet, so the data controller under the GDPR is its owner, acting as a private individual. If you need the controller’s name and postal address for a formal request or a complaint, ask for them in that email and we will send them back. Once a legal entity is registered, its details will appear in this section.

What we store

Account: Email, name (if your sign-in provider supplies one), an Auth0 identifier, the dates you were created and last signed in, an admin flag and a disabled flag. Passwords live at Auth0 — we never hold them.
Waitlist: While access opens by queue: your email, when you first and last submitted, how many times, the page language and a source tag. Removed on request, or when we open access for you and write.
Projects and media: Everything you upload or generate: product photographs, actor images, scripts, voiceover, finished videos and their versions. Stored as files on our server, tied to your account.
Credits and renders: A ledger of charges and top-ups, the status of every render and what it cost in credits. It exists so failed renders can be refunded correctly and so you can see where your credits went.
Technical records: Server logs with the address a request came from and a timestamp. Used for diagnosis and for abuse limits (the form submission cap, for instance). Never joined to your profile for marketing.
What we do NOT do: No advertising cookies, no Meta or TikTok pixel, no data brokers, no profiling you for ads. One exception, and only on the front page: if you pressed "Accept" in the data notice, the Affonso partner script sets a cookie for 30 days so a referral is credited to whoever sent you. Press "Reject" and it never loads at all. It is absent from the product itself. Beyond that, your browser keeps your language, your theme and this consent decision itself.

What we rely on to do this

Your account, your projects and the credit ledger are processed to deliver what you asked for — performance of a contract (GDPR art. 6(1)(b)). A waitlist address rests on your consent, given by pressing the button and withdrawable with one email (art. 6(1)(a)). The affiliate pixel on the front page also rests on your consent, given with Accept and withdrawable at the foot of that same page (art. 6(1)(a)). Server logs and abuse limits are our legitimate interest in keeping the service running (art. 6(1)(f)).

Who receives your data

To make a video we send your material to the services that perform the generation. This is not selling data — it is carrying out your order — but you should know where the material goes:

Auth0 (Okta) — sign-in and password storage.
fal.ai — video and image generation; your photographs and scene descriptions go there.
ElevenLabs — speech synthesis; your script text goes there.
Affonso — affiliate attribution, and ONLY on the front page and only if you pressed Accept. Your IP address and browser details go there so a referral can be credited. The script is absent from the product itself.
HeyGen — talking avatars, if you choose that mode. We ask HeyGen to delete the image and voice track right after the render — including when the render fails. If their API refuses, the material may remain there.
OpenRouter — the language model that writes scripts and reads an uploaded reference video.

Each has its own policy. Beyond the HeyGen deletion described above, we do not control how long they keep what we send, so do not upload anything you are not prepared to trust them with.

Transfers outside the EEA

Auth0, fal.ai, ElevenLabs, HeyGen, OpenRouter and Affonso are US companies, so your material is processed there too. That happens under the EU Standard Contractual Clauses or the EU-US Data Privacy Framework, depending on the provider. If that is not acceptable to you, do not upload material that must not leave the EU.

How long we keep it

Projects and media: until you delete them, or until the account is gone. The credit ledger: for the life of the account, because it is what reconciles charges. Waitlist entries: until access opens or you ask us to remove yours. Server logs: up to 30 days.

Your rights

You can ask for a copy of your data, a correction, deletion or a transfer. The fastest route is to email us; we answer within a month, as the GDPR requires.

If you believe we are handling your data wrongly, you have the right to complain to a supervisory authority — in Ukraine the Parliament Commissioner for Human Rights, in the EU the data protection authority where you live.

Honestly, where we stand: there is no "delete my account" button in the app yet. Deletion is done by hand on request — we erase the account, the projects and the media. The credit ledger is anonymised rather than erased, because it is needed for accounting.

Security

Traffic is encrypted, and your material is reachable only by your account and by a service administrator. We do not publish your videos — everything on the front page was generated by us for display.

Terms of use

What this service is

UGC Studio generates vertical ad videos from a product photograph and a chosen actor. The result is machine-generated and needs your review before you publish it.

What you are responsible for

Holding the rights to what you upload: the product photograph, images of people, and any third-party video you submit for structural analysis. By uploading the face of a real person you confirm you have their consent. We do not verify rights and cannot grant them.

The built-in actor gallery

The faces in the built-in gallery are generated by us and belong to no real person. You may use them in your videos while you use the service; we grant no exclusivity, and the same actor may appear in someone else`s advertising. They are synthetic performers, which advertising law requires you to disclose (NY GBL §396-b, EU AI Act art. 50), so the service marks them as such and the duty to disclose stays with whoever runs the ad. Faces you upload yourself are not covered here — the clause above applies to those.

AI content disclosure

From 2 August 2026, article 50 of the EU AI Act requires disclosure that content is AI-generated. The service has a switch that burns the official EU mark into the finished video, and it is on by default. The mark alone does not make a publication compliant — responsibility stays with whoever runs the ad.

What we do not promise

We do not guarantee sales, reach, or that Meta or TikTok will approve your ad. No honest supplier guarantees that. Output quality depends on your material and on models that change.

Accepting these terms

You accept these terms when you create an account — as a separate action, with a link to this page. Without acceptance the account is not activated. We record the date you accepted and the version you were shown. If the terms change materially we will ask you to accept them again rather than change them quietly.

When we may refuse service

We suspend accounts for attempts to create material using the face of another person without consent, misleading medical or financial advertising, content involving minors in an advertising context, or circumventing technical limits.

Payment, tokens and refunds

These rules apply to every token purchase — read them before you pay, not after.

What you are actually buying

You buy tokens — the internal unit that pays for the services inside this project: video generation, voice synthesis, image processing. Tokens are added to your account balance and drawn down on each generation at its actual cost. A token is not money, electronic money, a security or a cryptocurrency; it cannot be transferred to another person, exchanged back into money, or withdrawn.

How long tokens last

Tokens sit on the balance indefinitely — they do not expire after a month or a year. The one boundary is the life of the project: if the service shuts down, an unspent balance is void and no compensation is paid for it. Buying tokens means accepting that risk.

Automatic token returns

If a render fails on our side, the tokens it consumed return to your balance automatically — you do nothing. That is a return of tokens to the balance, not money to a card, and it is exactly why the ledger exists.

We do not refund money

Payment for tokens is final. We refund neither spent nor unspent tokens: providers bill us for those seconds of generation at the moment of the request, and an unspent balance stays available to you indefinitely — it does not disappear, so there is nothing to give back. Buy what you plan to spend.

Disputed payments

We do not process chargebacks. If you open one with your bank, we treat it as ending your use of the service: the account is suspended, any token balance is void, and access to the material you created stops. If something went wrong, write to us first — it is faster and it solves more.

Contact

Questions about your data, deleting an account or refunds: support@ugc-studio.pro. It is the same address we reply from; there is no second support channel for a message to fall between.