Privacy policy
Effective 7 October 2026.
This policy states what UGCFans collects, how it is used, who receives it, how long it is kept and the choices an account has. Using ugc.fans, the MCP server at mcp.ugc.fans or any connected client means agreeing to the practices it describes.
Who runs the service
UGCFans runs ugc.fans and the MCP server at mcp.ugc.fans. Write to support@ugc.fans with a question about this policy or a request about an account.
Operator: UGCFans.
What UGCFans collects
Sign-in
An account begins at the first sign-in with Google or GitHub. UGCFans receives an identifier, an email address and a display name, and stores them with the provider, the times the account was created and last updated and the account id, a hash of the provider and the identifier. Each sign-in refreshes the email address and the name.
Content
UGCFans stores what a member uploads, enters and connects, and everything the service generates for the member: files, pictures, clips, prompts, scripts, plans, people, voices, brand kits and the websites it captures, with the jobs and requests that produced them, on the service's own servers and in Cloudflare R2. A consent for a real person who appears or speaks in a render stores the person, what it covers, the grantor's name and contact, the statement agreed to, the capacity, an adult attestation, the purpose, any evidence file and the dates of grant, expiry and withdrawal.
Billing and usage
Card details are entered on Stripe's hosted pages and do not reach UGCFans. UGCFans stores the Stripe customer id, each subscription's identifiers, state and price, the credit balance, the credits granted and the cost and outcome of every job.
Connected AI clients and platforms
A connected AI client stores the client, the server it is for, the scopes, a label and the times it was created, last used, due to expire and revoked; codes and tokens are stored as hashes. A tool call runs as the account that connected and what it makes is stored as any other work of the account. Each connection also adds rows that record the stage it reached, the client's name, the address it called and the account. A connected Meta, Google Ads or TikTok account stores that platform's tokens, sealed.
Usage, device and log data
UGCFans collects how the service is used: the pages and tools called, the requests made and their outcome, timing, failures, the approximate location of a request, the browser and device, the address a request came from and identifiers that cookies and similar technologies hold. The request log records each event with a hashed account id and no token, cookie or argument.
Cookies and similar technologies
UGCFans uses cookies and similar technologies to keep an account signed in, to measure and analyse use of the service, and may use them, with its partners, for advertising and marketing, including remarketing and to show advertising based on interests on the service and across the internet. Partners may associate this activity with other information they or others hold. The service does not respond to Do Not Track signals. UGCFans may give advertising partners an email address, location and cookie information and let them match it against information from other networks and sites. A browser can refuse or delete cookies; the sign-in cookie is needed to use an account.
How UGCFans uses information
- To provide, operate, maintain, secure and improve the service, to run jobs, apply credits and plans, check consent before a real person is rendered, and screen for abuse.
- To develop new products, features and services, and for research and analysis.
- To train, evaluate and improve the artificial intelligence and machine learning models, systems and workflows that power the service, including with the inputs a member provides and the outputs the service generates.
- To promote the service, including by using content a member has made available and the outputs made for them, with or without attribution, in marketing and as showcases of what the service makes.
- To communicate about the account, the service, new features and offers.
- To comply with law, enforce the terms, resolve disputes and protect UGCFans, its members and others.
- In aggregated, de-identified or otherwise anonymised form, for any purpose without further notice or consent, including sharing with prospective investors, affiliates, partners and advertisers, during and after the life of the account.
Rights in content
A member keeps ownership of what they upload and of the outputs made for them. By using the service the member grants UGCFans a non-exclusive, irrevocable, perpetual, worldwide, royalty-free, fully paid, transferable and sublicensable licence to host, store, reproduce, modify, adapt, prepare derivative works of, analyse, publicly display, publicly perform, distribute, sublicense and otherwise use inputs and outputs, and any name, username or likeness in them, to provide, improve, train, promote and develop the service and for the other purposes in this policy and the terms of service. The licence survives the end of the account, and deleting an account does not affect inputs and outputs already incorporated into UGCFans' systems, models, showcases or aggregated data.
Who receives information
Service providers
Cloudflare hosts the Worker, the databases and the durable file copy and provides measurement; Stripe collects payment; Google and GitHub sign members in; the model providers UGCFans uses receive the prompts, reference pictures and clips of each generation, and the text or frames a safety screen or a reading model inspects; providers of hosting, storage, analytics, communication, advertising and marketing as the service needs them.
Connected services
Meta, Google Ads and TikTok receive draft ads for an ad account the member connected; an AI client receives the results of the tools it calls on the member's behalf.
Affiliates and partners
Current and future parents, subsidiaries and affiliates of UGCFans, and current and future business, marketing, advertising and analytics partners, for any purpose in this policy and for their own business and commercial purposes such as improving their services, training their systems and marketing to users.
The public
A file a member shares by link is readable by anyone who holds the link until the link ends; content a member publishes or posts to a platform is disclosed as broadly as that platform allows.
Business transfers
A buyer, successor or counterparty in a merger, acquisition, financing, reorganisation, sale of assets or insolvency, before or after the transaction, who may use the information for the purposes for which it was collected.
Authorities and others
Regulators, courts, law enforcement and others when UGCFans believes disclosure is required by law or protects the rights, property or safety of UGCFans, its members or others.
UGCFans does not sell personal information for money. Some sharing with advertising and analytics partners may count as a sale or a share under the law of some places; a member may write to object.
How long information is kept
UGCFans keeps information for as long as the account exists and, after that, for a commercially reasonable time and for as long as UGCFans has a valid or legitimate business purpose, which includes improving and developing the service, training its models, keeping backups, security, audits, accounting, resolving disputes and enforcing its agreements, and for as long as the law requires or permits. Content made available publicly, including by a shared link or a publication, may be kept in perpetuity. After an account is deleted, UGCFans may keep copies in backups and may continue to keep information for the purposes this policy authorises unless the law prohibits it. UGCFans also reserves the right to delete any content or information at any time without notice and owes no compensation for a deletion.
- An authorization code lasts 60 seconds and an access token 60 minutes. A connection lasts 30 days from its last refresh. A personal access token lasts 365 days.
- A session lasts until it expires or the member signs out.
- A deletion request leaves a record of the request, its ids and its times.
Where information is processed
UGCFans processes and stores information on servers in the United States, the European Union, Singapore and any other country where UGCFans, its affiliates or its providers keep facilities or staff, and the privacy law of those places may differ from the member's own. By submitting information or using the service a member consents to its transfer to, and storage and processing in, any jurisdiction in the world as permitted by law.
Children
The service is not intended for anyone under 13 years of age, and UGCFans does not knowingly collect personal information from children under 13. An account found to belong to a child is removed.
Choices and rights
The law of a member's place may give rights to access, correct, delete, restrict, port or object to the use of personal information, to opt out of targeted advertising or to withdraw consent. Where those rights apply, a request goes to support@ugc.fans; UGCFans may verify identity first, may be unable to act on a request it cannot verify, may decline a request the law does not require it to grant, and answers within the time the applicable law allows. Personal information cannot be deleted except by deleting the account, and deleting information may end access to the service.
- Download my data, on the account page, builds one archive of the account, without secrets, sealed platform tokens or the contact details of a consent grantor.
- Disconnect and Revoke, on the connections page, end a client connection or a personal access token at once.
- Delete my data, on the account page, ends every session, revokes the connections and disables the account at once; a subscription is cancelled in billing first. UGCFans then removes the account's files and records within a reasonable time, subject to the retention described above.
Changes
UGCFans may change this policy at any time. Changes are posted on this page with a new effective date and apply from posting; a member is deemed to have accepted them on their first use of the service after the change. For a material change UGCFans may also give notice by email or in the product.
Contact
Write to support@ugc.fans. A security report is sent to contact@ugc.fans. The support page lists what a message needs. The terms of service govern use of the service.