Privacy Policy

1. General Information

Protecting your personal data is important to us at Ugcs UG (haftungsbeschränkt) i.G. (“we”, “us”). This Privacy Policy informs you about the type, scope, and purpose of processing personal data on our platform and online services. Our offerings include AI-generated video software, AI avatars, text-to-video functionalities, and voice generation. This policy also explains data handling concerning newsletters, Google Analytics, Microsoft Clarity, and other tracking and analysis tools.

2. Data Controller

The data controller according to the GDPR is:

We currently do not have a designated Data Protection Officer. For privacy-related inquiries, please contact us directly at the above address.

3. Categories of Collected Data

Depending on your usage, we collect and process different categories of personal data:

• Identification and Contact Data: Name, email, phone number (if provided), billing or payment information (for paid services).
• Login and Authentication Data: Username, encrypted password, authentication data via external providers (e.g., Clerk).
• Usage and Metadata: IP address, browser type/version, operating system, timestamps of access (log files), location data derived from IP address.
• User-Generated Content: Uploaded scripts/texts for video or voice generation (processed via HeyGen/ElevenLabs), uploaded images/videos, AI-generated videos and avatars.
• Communication Data: Messages sent via contact forms or email, newsletter subscription data.

4. Purpose of Data Processing

We process personal data primarily for:

• Providing and managing our AI-powered video software and online services, including personalization and avatar generation.
• Payment processing via Stripe (for paid services).
• Communication regarding customer support or important service updates.
• Analyzing, improving, and securing our services (error handling, technical analysis, performance optimization).
• Sending newsletters and marketing materials.
• Compliance with legal obligations (e.g., tax and commercial laws).

5. Legal Basis for Data Processing

Our processing activities are based on:

• Contract fulfillment or pre-contractual measures (Art. 6(1)(b) GDPR).
• User consent (e.g., newsletters, marketing cookies, Art. 6(1)(a) GDPR).
• Legitimate interests (e.g., security, preventing abuse, Art. 6(1)(f) GDPR).
• Legal obligations (Art. 6(1)(c) GDPR).

6. Newsletter and Marketing Communication

We use your email address, provided during registration, to send newsletters unless explicitly opted out.

Unsubscribe: You can unsubscribe at any time via the provided unsubscribe link in newsletters or by contacting us at kontakt@ugcs.io. The legality of prior processing remains unaffected by withdrawal.

7. Data Sharing with Third Parties

We share data with third parties only when:

• Required for fulfilling contractual obligations.
• You have given explicit consent.
• Legally required.
• Necessary to protect our legitimate interests (e.g., legal enforcement).

Recipients of your data include:

• HeyGen / ElevenLabs (AI avatars & voice generation, possibly processed in the USA).
• Stripe (payment processing).
• Google Cloud / GoDaddy (hosting infrastructure).
• Clerk (authentication).
• beehiiv (newsletter).
• Altan.ai (AI functionalities).

8. Cookies and Tracking Technologies

We use cookies to operate and improve our services. Certain cookies are essential; others serve analytics or marketing purposes.

9. Data Retention

We retain personal data only as long as necessary or required by law (up to 10 years). Videos and other content generated through our services can be deleted upon request. User accounts can be deleted upon request. However, backup copies may persist temporarily after deletion until routine removal.

10. Your Rights

Under GDPR, you have rights regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent (Art. 7(3) GDPR)
• Complaint with supervisory authority (Art. 77 GDPR)

To exercise these rights, contact us at the provided contact information. Verification of your identity may be required.

11. Amendments to this Privacy Policy

We reserve the right to update this Privacy Policy due to changes in legal requirements or our services. The current version is available on our website. Significant changes will be communicated, if possible, via email or prominently on our website.

12. Contact

For questions regarding data processing or exercising your rights, contact:

Thank you for your trust. If you have any further questions, please contact us directly.