Privacy Policy
Last updated: May 26, 2026
This Privacy Policy explains how UGC Forge — a content workflow and publishing platform operated by 633 Media Ltd — collects, uses, and protects information when you use our platform and services.
1. Introduction
UGC Forge (“we,” “our,” or “us”) is a content workflow and publishing platform operated by 633 Media Ltd, a company registered in the United Kingdom. The platform is used to create, manage, schedule, and publish marketing content and creative assets across connected social media accounts.
We respect your privacy and are committed to protecting your information. This Privacy Policy explains how we collect, use, and protect information when you use our platform.
2. Information We Collect
We may collect personal information such as your name, email address, company name, billing information (if applicable), and account login details when you create an account or use the platform.
We may also collect usage data such as uploaded content, scripts, captions, project data, uploaded files, browser type, device information, IP address, and platform activity logs.
We use cookies and similar technologies to improve platform functionality, analyze usage, and enhance user experience.
3. How We Use Your Information
We use your information to operate and maintain the UGC Forge platform, manage user accounts, process payments if applicable, improve platform performance, provide support, and communicate important service updates.
We may also use information to maintain platform security, prevent fraud or abuse, and analyze usage to improve features and performance.
We do not sell your personal data.
4. AI & Generated Content
UGC Forge may include AI-assisted tools that help generate or assist with content creation. AI-generated content may not be unique and may contain errors or inaccuracies.
You are responsible for reviewing and ensuring content complies with applicable laws, copyright requirements, and platform policies before publishing.
We are not responsible for how generated content is used or where it is published.
5. Data Storage & Security
We implement appropriate technical and organizational measures to protect your data. However, no system is completely secure and we cannot guarantee absolute security.
Data may be stored on secure servers operated by third-party hosting and infrastructure providers.
6. TikTok Integration & Content Posting
UGC Forge allows users to optionally connect their TikTok account via TikTok Login Kit so they can schedule, publish, and manage their own short-form content from our dashboard.
We request the OAuth scopes user.info.basic, video.upload, and video.publish — only the scopes required to read the user's basic profile (to display the connected account in the UI) and to upload and publish content the user explicitly creates inside UGC Forge or attaches from their device.
We do not read, index, or repost any content from your TikTok account that you did not produce through UGC Forge. We do not run automated mass-posting; every post is initiated by the connected creator (either immediately or via the user-defined schedule they set inside the platform).
TikTok OAuth tokens (access + refresh tokens) are encrypted at rest and used solely to fulfil the publishing actions you initiate. Privacy, comment / duet / stitch, and branded-content disclosure flags you select in the UGC Forge composer are passed honestly to the TikTok Content Posting API.
Our use of TikTok APIs adheres to TikTok's Developer Terms of Service and Content Sharing Guidelines (https://developers.tiktok.com/doc/content-sharing-guidelines/).
You can revoke UGC Forge's access to your TikTok account at any time from the Accounts & Connections page in our dashboard, which immediately removes the stored tokens and disconnects future posting on your behalf. You can also revoke access from your TikTok account settings under Manage Connected Apps.
7. Google API Services & Drive Access
UGC Forge allows users to optionally connect their Google account to export finished assets to Google Drive. When you connect Google Drive, we request the 'drive.file' scope, which grants access only to files that were created or uploaded by UGC Forge — not your entire Google Drive.
We use this access solely to let you upload and back up media files (videos, images) from your UGC Forge workspace to a folder in your Google Drive. We do not read, index, or process any pre-existing Google Drive content.
Google Drive access tokens are stored securely and are used only to perform file upload operations you explicitly initiate within the platform. We do not use Google Drive data for advertising, analytics sold to third parties, or any purpose unrelated to the asset export workflow.
UGC Forge's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. See https://developers.google.com/terms/api-services-user-data-policy.
You can revoke UGC Forge's access to your Google account at any time by visiting your Google Account permissions page at https://myaccount.google.com/permissions.
8. Third-Party Services
We may use third-party services including cloud storage providers (such as Supabase and Vercel), AI model providers (such as Anthropic, OpenAI, Google Gemini), social media publishing APIs (such as TikTok, Instagram, Facebook, Pinterest, YouTube), and infrastructure providers to operate the platform.
These providers only access data necessary to perform their specific services and are subject to their own privacy policies.
9. Your Rights
Depending on your location, you may have the right to access, correct, or request deletion of your personal data, including any social-platform OAuth tokens we hold on your behalf.
To make a request, please contact us using the contact details below.
10. Data Retention
We retain data only as long as necessary to provide services, operate the platform, and comply with legal obligations.
Social-platform access tokens (TikTok, Google Drive, Instagram, etc.) are retained only while the relevant connection is active. You can disconnect from Accounts & Connections at any time to trigger deletion of the stored tokens.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of the platform after changes are posted means you accept the updated policy.
12. Contact
If you have any questions about this Privacy Policy, or wish to exercise your data rights, please contact us at:
Operator: 633 Media Ltd
Email: ugcforgeapp@gmail.com
Address: Brompton Close, Luton, LU3, United Kingdom