Privacy policy

Last updated: October 29, 2026

Got UGC (“Got UGC”, “we”, “us”), operated by Go Bolder Media Inc., is a Shopify app that helps brands work with content creators. This policy explains what personal information we collect when a Shopify store (a “merchant”) installs the app and when creators use the pages the app provides, how we use it, and the choices you have.

Who this policy covers

Merchants: Shopify stores that install Got UGC, and their staff who use it.
Creators: people who apply to work with a merchant, or whom a merchant adds, and who use the application form and creator portal.

For creator information, the merchant decides what to collect and how to use it, and Got UGC processes it on the merchant’s behalf. If you’re a creator, the brand you applied to is responsible for your information, and its own privacy policy also applies.

Information we collect

From merchants and Shopify

Store details: store name, myshopify domain, storefront address and the store’s contact email.
Details of the staff member using the app that Shopify provides when they sign in, such as name, email address and locale, along with the access tokens Shopify issues to the app.
Product information (titles, variants, images and stock) so merchants can choose which products creators may pick.
Orders the app creates to send free product to creators, and their fulfillment and tracking status.
App settings, such as sender name, sending address, email templates and application form text.

From creators

Application details: name, email address, social media handles, website or portfolio, rates, whether you’re open to gifted collaborations, niche, location and anything you write about yourself.
Shipping details: address and phone number, entered in your creator portal.
The products, sizes and colours you choose.
Links to content you share, such as Google Drive folders or Instagram posts.
Messages and emails exchanged between you and the merchant through the app.

Created by merchants about creators

Internal notes, ratings, reminders and collaboration status that merchants add in the app.

Technical information

Our hosting provider keeps standard server logs (such as IP address, browser type and the pages requested) for security and troubleshooting. We don’t use advertising or analytics cookies. Inside Shopify admin, Shopify’s own session handling applies.

How we use information

To provide the app: show creators to the merchant, run the application form and creator portal, and create orders for free product.
To send emails between merchants and creators and route creators’ replies back to the right conversation.
To keep the service secure, fix problems and provide support.
To meet legal obligations.

We don’t sell personal information, share it for advertising, or use creator information for any purpose other than providing the service to the merchant.

Who we share it with

We share information only with the service providers we need to run Got UGC:

Shopify: the platform the app runs on, which receives orders the app creates.
Render: hosts the app and its database in the United States.
Postmark: sends and receives the app’s emails.
Cloudflare: provides DNS and email routing for our domain.

Creator information is visible to the merchant the creator applied to or was added by. We may also disclose information if required by law, or as part of a merger or sale of the business, in which case this policy continues to apply.

Where information is stored

Information is stored in the United States. If you’re outside the United States, your information is transferred there, with safeguards required by applicable law.

How long we keep it

We keep information for as long as the merchant has Got UGC installed. When a merchant uninstalls the app, Shopify notifies us 48 hours later and we then delete that store’s data, including all of its creator records, messages and notes. Merchants can delete individual creators at any time. Our email provider keeps copies of sent and received emails for a limited time under its own retention policy.

Security

All traffic is encrypted with HTTPS. Each creator portal is reached through a private, hard-to-guess link, and requests from Shopify are verified. No system is perfectly secure, but we work to protect your information and to limit who can access it.

Your rights

Depending on where you live (for example in the EU, UK, California or Canada), you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or restrict how it’s used. Creators should contact the brand they work with first; you can also contact us at support@gotugc.com and we’ll help or pass your request to the brand. We respond within the time the law requires and won’t treat you differently for making a request. You may also complain to your local data protection authority.

Children

Got UGC isn’t meant for anyone under 16, and we don’t knowingly collect information from children. If you believe a child has given us information, contact us and we’ll delete it.

Changes to this policy

We may update this policy from time to time. We’ll change the date at the top and, for significant changes, let merchants know in the app or by email.

Contact

Questions or requests about privacy: support@gotugc.com.