SundayUGC Privacy Policy

Effective Date: September 12, 2025

  1. Introduction & Scope

This Privacy Policy describes how SundayUGC LLC (“SundayUGC,” “we,” “our,” or “us”) collects, uses, shares, and safeguards personal information when you use our creator marketplace platform (the “Platform”), which includes our mobile and web application (the “App”) and our website at [www.cyan-hamster-194145.hostingersite.com] (the “Website”).

This Privacy Policy applies to all individuals who use our Platform as Creators, Brands, Brand Representatives, or visitors, and to our vendors and business partners. We operate solely in the United States, and this Policy is designed to comply with applicable U.S. privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and similar state laws in Virginia, Colorado, Connecticut, and Utah.

  1. Categories of Personal Information Collected

We collect the following categories of personal information:

  • Identifiers: name, username/display name, email address, phone number, device IDs, IP address, login credentials (hashed), profile photo, social handles, and government-issued tax IDs if required by law.
  • Professional/Employment Information: company name, role or title, brand affiliation, and other related business contact information (for Brand Representatives).
  • Commercial Information: transaction and payment records, payout details, invoice history, order history, and tax-related documentation.
  • User-Generated Content: videos, photos, captions, briefs, submissions, drafts, approvals, disputes, and chat messages exchanged on the Platform.
  • Device and Internet Activity: browser type, operating system, app version, referring/exit pages, clicks, time spent, crash reports, and session logs.
  • Location Data: approximate location derived from IP address.
  • Inferences: profile interests, category preferences, and automated match scores (non-sensitive).
  1. Sources of Personal Information

We collect personal information from the following sources:

  • Directly from you when you register, create a profile, submit content, request support, or communicate with us.
  • Automatically from your device and browser through cookies, pixels, SDKs, and similar technologies when you use our App or Website.
  • From other users on the Platform (e.g., Brands reviewing Creators or vice versa).
  • From third-party service providers (e.g., payment processors, fraud prevention services, shipping carriers, analytics platforms).
  • From publicly available sources (e.g., LinkedIn, Instagram, business websites) where lawful.
  1. Purposes of Use

We use your personal information for the following business purposes:

  • Provide and operate the Platform: Account setup, authentication, managing profiles, delivering briefs, facilitating communications, shipping samples, and enabling content submission, approvals, and payouts.
  • Trust and safety: Detect, investigate, and prevent fraud, abuse, spam, security incidents, and other harmful or illegal activity.
  • Improve and develop services: Analyze usage trends, fix bugs, enhance user experience, personalize content, and test new features.
  • Communicate with you: Send service, support, and transactional communications and (if permitted) marketing communications.
  • Comply with legal obligations: Tax, accounting, and regulatory requirements; responding to lawful requests from government authorities.
  • Marketing and publicity: Use testimonials, reviews, and non-sensitive content in SundayUGC marketing materials, only if you have provided your consent.
  1. Disclosure of Personal Information

We disclose personal information only as needed for business purposes:

  • Service Providers and Contractors: Cloud hosting, analytics, crash reporting, payment processing, communications, identity verification, customer support, legal and accounting services, and shipping providers, under written agreements that limit use to providing services for us.
  • Platform Counterparties: Limited Creator information shared with Brands (and vice versa) to facilitate briefs, deliverables, samples, approvals, and payments.
  • Advertising and Analytics Partners: Only if you have consented to non-essential cookies or tracking technologies (see Section 7).
  • Professional Advisors and Authorities: Legal counsel, auditors, courts, regulators, and government agencies when required by law or to protect our legal rights.
  • Corporate Transactions: In connection with mergers, acquisitions, financing, or sale of all or part of our business, subject to confidentiality protections.
  • With Your Consent: Where you direct or authorize us to share your information.

We do not sell personal information for money. We may “share” identifiers and internet activity with advertising partners for cross-context behavioral advertising, but only if you consent (see Section 10 to opt out).

  1. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to comply with legal, tax, accounting, and regulatory requirements, to enforce our agreements, and to resolve disputes.

Retention periods vary depending on the type of information and the nature of the relationship, and typically include:

  • Account and transaction records:
    Retained for up to 7 years after account closure, as required by tax, accounting, and financial regulations.
  • User-generated content and communications (including submissions, chats, approvals, and disputes):
    Retained for up to 3 years after campaign completion, account closure, or dispute resolution, unless a longer retention period is required for legal or compliance purposes.
  • Marketing and communication data:
    Retained until you opt out, or for up to 2 years after your last interaction with us.
  • Logs, security, and diagnostic data:
    Retained for 12–24 months to support platform security, fraud prevention, performance monitoring, and system integrity.
  • Backup data:
    Personal information stored in system backups is retained for a limited period consistent with our disaster recovery policies and is securely deleted or overwritten on a rolling basis.

In certain circumstances, we may retain information for longer periods where required by law, regulatory obligations, legal claims, audits, or ongoing investigations.

When personal information is no longer required, we securely delete it or irreversibly de-identify it so it can no longer be associated with an individual.

You may request deletion of your personal information at any time, subject to legal and contractual retention requirements (see Section 10 – Your Privacy Rights).

  1. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience.

Below is a list of the types of cookies we use:

Mandatory (technical) cookies

Cookie

Provider

Purpose

Validity period

HSID

Google / Google Analytics

Protects users from false logins, ensures user authenticity.

2 years

SIDCC

Google / Google Analytics

Ensures user authenticity.

3 months

SID

Google / Google Analytics

Ensures user authenticity.

2 years

_gid

Google / Google Analytics

Stores a unique value after each page visit.

1 day

__cfduid

Google / Google Analytics

Designed to speed up page loading.

3090 days

auth0

Auth0

Stores user login information.

3 days

__stripe_mid

Stripe

Stores a unique value associated with the user to ensure Stripe functions.

1 year

 

Analytical cookies

Cookie

Provider

Purpose

Validity period

SAPISID

Google / Google Analytics

Assists in gathering information about videos uploaded to YouTube.

Permanent

SSID

Google / Google Analytics

Helps gather information about using YouTube and GoogleMaps.

Permanent

_ga

Google / Google Analytics

Designed to uniquely identify different users.

2 years

ajs_user_id

Hotjar

Used by usage analysts online.

365 days

 

Functional cookies

Cookie

Provider

Purpose

Validity period

CONSENT

Google / Google Analytics

Stores user settings for personalized ads.

Permanent

 

Commercial cookies

Cookie

Provider

Purpose

Validity period

__Secure-3PAPISID

Google / Google Analytics

Creates a user interest profile to display ads

2 years

__Secure-3PSID

Google / Google Analytics

Creates a user profile to display ads

2 years

_fbp

Facebook

Designed to provide Facebook advertising services.

While browsing the site

 

You can manage cookies via our cookie banner or your browser/device settings. Blocking essential cookies may impair functionality.

  1. Children’s Privacy

The Platform is not intended for children under 18. We do not knowingly collect personal information from children. If we discover that we have collected personal information from a child, we will delete it promptly.

  1. Security

We implement reasonable technical, administrative, and physical safeguards to protect personal information, including encryption in transit, access controls, network monitoring, vendor risk assessments, and secure development practices. However, no system is completely secure. Please protect your account credentials and contact us immediately if you suspect unauthorized access.

  1. Your Privacy Rights

Depending on where you reside (e.g., California, Colorado, Connecticut, Virginia, Utah), you may have rights to:

  • Access the personal information we have collected about you
  • Request deletion of your personal information
  • Request correction of inaccurate personal information
  • Opt out of sale or sharing of personal information for cross-context behavioral advertising
  • Limit use or disclosure of sensitive personal information (we do not use sensitive PI for additional purposes without notice)
  • Not be discriminated against for exercising your privacy rights
  • Appeal our decision if we deny your request

To exercise your rights:

  • Email hello@sundayugc.com with the subject “Privacy Request”

We may verify your identity before processing your request. You may use an authorized agent in California by providing proof of authorization.

Opt-Out of Sale/Sharing: Use our “Do Not Sell or Share My Personal Information” link or enable Global Privacy Control (GPC) in your browser—we honor GPC where required.

 

  1. Third-Party Links

The Platform may link to or integrate with third-party sites and services. Their collection and use of your information is governed by their own privacy policies, which we encourage you to review.

  1. Changes to this Privacy Policy

We may update this Privacy Policy periodically. When we do, we will post the updated version with the new effective date. If we make material changes, we will notify you via email or prominent notice on the Platform. Your continued use of the Platform after the effective date constitutes your acceptance of the updated Policy.

  1. Contact Us

SundayUGC LLC
hello@sundayugc.com

275 SW 6th St, 3211

Miami, FL 33130