Privacy Policy
Last updated: 28 June 2026
This document is provided in English, which is the governing language. Translations, if any, are for convenience only.
This Privacy Policy explains how CLOSYA FZ-LLC (RAKEZ licence no. 47030623, Ras Al Khaimah, UAE), operating the UGC MATCH platform, collects, uses and protects your personal data.
1. Data controller
The data controller is CLOSYA FZ-LLC, Compass Building — Al Hulaila, Al Hulaila Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates. Contact: support@ugcmatch.io.
2. Data we collect
Account data (email, role, password hash); profile data you provide (name, bio, location, social handles, portfolio, company details); transaction data (orders, briefs, messages, deliverable metadata); and technical data (log and usage information). We do not store full payment card details — card data is handled directly by Stripe.
3. How we use your data
To operate the Platform and your account; to process orders, payments and payouts; to enable messaging and notifications between Brands and Creators; to provide support; to prevent fraud and abuse; and to comply with legal obligations.
4. Service providers (processors)
We share data with trusted providers only as needed to run the Platform: Supabase (database, authentication, file storage), Stripe (payments, payouts and identity/KYC verification), Resend (transactional email), Vercel (hosting), and Upstash(rate limiting). Each processes data under its own terms and security measures.
5. Sharing with other users
When you transact, the other party to an Order sees the information needed to complete it (e.g. your display name, brief, messages and deliverables). We do not sell your personal data.
6. Cookies
We use strictly necessary cookies for authentication and session management, and a preference cookie to remember your language (NEXT_LOCALE). We do not use advertising or cross-site tracking cookies.
7. Retention
We keep personal data for as long as your account is active and as required to provide the service, resolve disputes, and meet legal, tax and accounting obligations. You may request deletion (see your rights below).
8. Your rights
Subject to applicable law, you may request access to, correction, deletion or a copy of your personal data, and object to or restrict certain processing. To exercise these rights, contact support@ugcmatch.io.
9. International transfers and security
The Platform is operated from the UAE and uses providers that may process data in other regions; we rely on those providers’ safeguards. We apply reasonable technical and organisational measures (encryption in transit, access controls, row-level security) to protect your data, but no system is perfectly secure.
10. Children
The Platform is not intended for anyone under 18, and we do not knowingly collect their data.
11. Changes and contact
We may update this Policy; material changes will be notified through the Platform. Questions or requests: support@ugcmatch.io.