In short: we keep your email to run your account, and only hashes of your sign-in codes, sessions, API keys and IP address. Your card goes to Dodo Payments, never to us. We use no advertising cookies, and page analytics are cookieless. You can delete your account at any time.
- Operator
- ugcMaxx (ugcmaxx.com), India
- Payments for Pro
- Dodo Payments, Merchant of Record
- Contact
- getviral@ugcmaxx.com
What we collect
| Data | Why | How long |
|---|---|---|
| Your email address | Your account, sign-in codes, receipts and service emails | Until you delete your account |
| Sign-in codes | To sign you in. We keep only a keyed hash | 10 minutes |
| Session cookie | To keep you signed in. We keep only a hash of it | Up to 30 days, renewed while you use the service |
| API keys | To check API calls. We keep only a hash and the first characters | Until you revoke them or delete your account |
| Usage counts | For limits and abuse prevention: calls, searches and library pages per day | About 31 days |
| IP address | For rate limits and abuse prevention. Stored only as a keyed hash | About 31 days |
| Purchase records from Dodo | Your plan, payment and subscription status, and Dodo’s customer id. We never see or store your card | As long as needed for your access, and as tax law requires |
| Campaign planner input | The app link or website you enter, and the plan we make | Up to 30 days (plans are cached per app) |
| Newsletter | Only if you tick the box: your email on our weekly letter list | Until you unsubscribe |
Who processes data for us
- Dodo Payments, Merchant of Record: payments, taxes, invoices and receipts. Dodo’s privacy policy.
- Cloudflare: hosting, database, rate limits and the human check (Turnstile).
- Vercel: hosting of the website, cookieless page analytics (Vercel Web Analytics) and bot protection on forms (Vercel BotID).
- Brevo: sign-in emails, service emails and the newsletter.
- Anthropic: the campaign planner sends public information about an app to Anthropic’s API to write the plan.
These providers may process data outside India. We use them only to run the service.
Cookies
__Host-ugcm_session: keeps you signed in. It is HttpOnly, only for ugcmaxx.com, and strictly necessary.ugcm_hint: says whether you are signed in as free or Pro, so the page knows what to load. It holds no personal data.- We use no advertising cookies. Page analytics are cookieless.
Your rights
- Delete your account at any time on your account page. This deletes your email, sessions, keys and usage records. Purchase records stay with Dodo as tax law requires.
- Ask for a copy of your data, or a correction, at getviral@ugcmaxx.com. We answer within 30 days.
- Unsubscribe from the newsletter with the link in every email.
- Depending on where you live (for example the EU, the UK, California or India), you may have more rights under local law. Write to us to use them.
Security
Sign-in codes, sessions and API keys are stored only as hashes. All traffic uses HTTPS. Payment data never reaches our servers.
Children
The service is not for children under 18.
Changes and contact
We update the date above when this policy changes. Contact: getviral@ugcmaxx.com.
