Privacy policy
Last updated 22 October 2026
This policy explains what [Registered business name] ("ScrollUGC", "we") collects when you use scrollugc.com and the ScrollUGC app, why, who we share it with, and the choices you have. If anything here is unclear, email hello@scrollugc.com.
What we collect
| What | Why |
|---|---|
| Your name, email and a hashed password (if you sign up with email) | To create and secure your account |
| Your Google name, email and profile picture (if you sign in with Google) | To sign you in without a password |
| The app or website links you give us, and the brief we write from the public page | To write hook lines for your product |
| Hook lines, the clips and lines you keep or skip, and edits you make | To make your videos, and to improve which hooks we suggest |
| The videos we render for you | So you can watch, download and re-download them |
| Usage counts (videos made, hook requests) and onboarding answers (role, goal, how you heard of us) | To run your free allowance and plans, and to understand who uses ScrollUGC |
| IP address and basic request logs | Security: rate limits on sign-in and abuse prevention |
We don't sell your personal data, and we don't use it for advertising.
Cookies and local storage
We set one essential cookie, sugc_session, which keeps you signed in. It's HTTP-only and secure, and it
expires after 30 days or when you log out. Your browser's local storage keeps your onboarding progress and preferences
on your device. We don't use advertising or third-party tracking cookies.
Who processes your data
- Vercel hosts the site and the app, and stores clips and rendered videos.
- Supabase stores account, usage and job records (database in Singapore).
- Anthropic (Claude) receives the public text of the app page you link and your brief, to write hook lines.
- Google handles "Sign in with Google" when you choose it.
- Our payment processor will handle payments once paid plans open. We never see or store full card numbers.
These providers process data on our behalf under their own security and privacy terms. Some are outside your country, so your data may be transferred internationally, with the safeguards those providers offer.
How long we keep it
We keep your account data and videos for as long as your account is open. When you ask us to delete your account, we delete your account, videos and personal data within 7 days, except what we must keep by law (for example payment records). Backups roll over within 30 days.
Your rights
You can access, correct, export or delete your personal data, and object to or restrict how we use it. You can change your name and password in the dashboard; for anything else, email hello@scrollugc.com from your account's address and we'll reply within 30 days. If you're unhappy with our answer, you may complain to your local data protection authority.
Security
Passwords are hashed with Argon2id, sessions are stored as one-way hashes, traffic is encrypted with TLS, and our database rejects public access. No system is perfectly secure; if we learn of a breach affecting you, we'll tell you promptly.
Children
ScrollUGC is for businesses and creators aged 18 or older. We don't knowingly collect data from children.
Changes
We'll post any change here and update the date above. For significant changes, we'll also email you.
Contact
[Registered business name], [Registered business address]. Email: hello@scrollugc.com.