Privacy Policy

KinUGC (“we”, “us”) runs a marketplace connecting UGC creators with brands in Australia, at kinugc.com.au and in the KinUGC phone app. This policy explains what personal information we collect, why, where it's kept and your choices. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What we collect

• Account details: your name or business name, email address and password. We only store your password in a scrambled (hashed) form that can't be turned back into the password.
• Profile content you add: photos or logos, bio, location (suburb and state), niches and values, social media handles and follower counts, stats, rates and past ad results.
• Marketplace activity: briefs you post, applications and pitches you send, and their status.
• Beta list: if you join our beta list, your name or business name, email, whether you're a creator or brand, your state, and the social handle or website you give us.
• Device information: if you allow notifications in the app, a push notification token for your device.
• Reports: if you report content, the report and any details you include.
• Technical information: like most websites, our hosting provider records basic request logs (such as IP address, browser type and pages requested) for security and to fix problems. We don't use advertising or tracking cookies; we use one essential cookie to keep you logged in.

How we use it

• To run the marketplace: show creator profiles and briefs, and deliver applications to brands.
• To share contact details: your email is only shared with the other party once a brand hires a creator.
• To email you about your account and activity, such as password resets, new applications, and being shortlisted or hired.
• To send push notifications you've allowed in the app.
• If you joined the beta list, to contact you about joining KinUGC. You can ask us to stop at any time by replying to any email.
• To keep the platform safe, including reviewing reports and preventing misuse.

We don't sell your personal information, and we don't use it for third-party advertising.

What's public

Creator profiles (excluding email) and open briefs (including the brand's business profile) can be seen by anyone. Pitches are only visible to the brand you applied to. The beta list is never public.

Where your information is stored

Our database and uploaded photos are stored in Sydney, Australia, and our website runs on servers in Sydney. Some of the service providers that help us run KinUGC are based overseas, so your information may be accessed or processed outside Australia, mainly in the United States and Japan. We only use providers that protect personal information and only process it to provide their service to us:

• Vercel Inc. (USA): Hosts the KinUGC website and app server. Our servers run in Sydney, but Vercel staff and systems in other countries may access data to operate the service.
• Supabase Inc. (USA): Our database and photo storage, kept in Sydney, Australia.
• Resend (USA): Sends our emails, such as password resets, application updates and beta-list confirmations. Emails are processed through Resend's Tokyo, Japan region.
• Google LLC (USA): Google Workspace runs our support@kinugc.com.au inbox, so messages you send us are stored by Google.
• Expo / 650 Industries (USA): Delivers push notifications to the KinUGC phone app, if you allow them.

How we protect it

• Information is encrypted in transit (https) and our database is encrypted at rest.
• Passwords are hashed, and reset links expire after 60 minutes and work only once.
• Access to our systems is limited to the people who run KinUGC.

If a data breach is likely to cause you serious harm, we'll notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

How long we keep it

We keep your information while your account is open. When you delete your account, your account, profile, briefs and applications are permanently deleted straight away; copies in our provider's backups are removed as those backups expire. We keep beta-list details until you ask us to remove them or until you create an account.

Your choices

• You can edit your profile at any time.
• You can delete your account in the app or on the website (Profile → Delete account). This permanently removes your account and associated content.
• You can turn off push notifications in your device settings.
• You can ask to be removed from the beta list by replying to any of our emails or writing to us.
• You can ask us for access to, or correction of, your personal information.

Contact

Questions, requests or complaints: support@kinugc.com.au. We aim to reply within 30 days. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).