UGC Scout Privacy Policy
Last updated: July 30, 2026
This policy explains what personal information Burkhart Digital LLC collects through UGC Scout, how we use it, and what rights you have. It applies to the UGC Scout web application at ugcscout.app and all related services we operate.
If anything here is unclear, write to us at hi@ugcscout.app.
1. Who We Are
UGC Scout is a service operated by Burkhart Digital LLC, a limited liability company registered in the State of Wyoming, United States ("UGC Scout", "Burkhart Digital", "we", "us", "our"). UGC Scout is a business-to-business platform that helps brands and agencies discover, evaluate, and reach out to content creators for paid partnerships.
- Registered office: 30 N Gould St #21068, Sheridan, WY 82801, USA
- Privacy contact: hi@ugcscout.app
2. Scope
UGC Scout is offered to businesses and agencies, not to individual consumers. This policy covers two categories of personal information:
- Account data, about the individuals who sign up for and use UGC Scout on behalf of their business ("Customer", "you"); and
- Creator data, about third-party content creators whose public information is indexed and surfaced through the Service so Customer can evaluate and contact them.
This policy does not cover third-party services Customer may use alongside UGC Scout, such as the social platforms Creators post on, or messaging channels Customer uses to contact a Creator entirely outside the Service. Email outreach sent through the Service's own reply-to address, and any Creator reply to it, is covered by this policy (see Sections 3.2 and 4.1).
3. Information We Collect
3.1 Account Data
When Customer signs up and uses UGC Scout, we collect:
| Information | When and why |
|---|---|
| Email address | At signup, used for authentication and account-related communications |
| Google account profile (name, email, profile picture) | If Customer signs in with Google OAuth, received from Google to create and authenticate the Account |
| Password (stored as a salted hash) | If Customer signs in with email and password, to authenticate the Account; we never store the plain-text password |
| Business/product information Customer enters | During onboarding and use, to power creator search and AI-generated recommendations |
| Billing address and payment method | When Customer subscribes to a Plan or purchases a Credit Pack, handled directly by Stripe; we do not see or store full card numbers |
| Subscription status, Credit balance, purchase history | Generated as Customer uses the Service, to operate billing and enforce Credit balances |
| Team member emails and roles | When Customer invites teammates to a shared account |
| IP address, device information, session data | When Customer signs in, for security and fraud prevention |
| Support and outreach message logs | When Customer logs outreach activity or contacts support, to operate the inbox and support features |
3.2 Creator Data
To provide creator discovery, UGC Scout processes personal information about third-party Creators, sourced from public social media platforms via one or more third-party data providers. This includes:
- Public handle, display name, and profile bio
- Follower counts, average views, and other public engagement statistics
- Publicly posted content, hashtags, and content themes
- Where available, public contact information a Creator has listed on their profile
- Email replies a Creator sends to a Customer's outreach message, when that outreach is routed through the Service's own reply-to address, including any content submission or removal request contained in the reply
We do not collect a Creator's private social media messages, private account data, or any public-platform information a Creator has not made public. The email replies described above are provided directly to the Service by the Creator, as part of an outreach conversation the Customer initiated. Creator data is used solely to power Customer's search, evaluation, and outreach workflow, and is not sold or used for any purpose unrelated to operating the Service. Creators can request removal of their information; see Section 9.
3.3 Cookies and Local Storage
We use a small number of functional cookies and browser local storage entries:
| Item | Type | Purpose |
|---|---|---|
| Authentication / session cookie (Better Auth) | Cookie | Keeps Customer signed in and maintains the session securely |
| Theme preference | Local storage | Remembers whether Customer prefers light or dark mode |
These are strictly necessary to operate the Service and do not require consent under most privacy laws. We do not use advertising or cross-site tracking cookies. Our website uses Pirsch, a privacy-respecting analytics service that does not use cookies or collect personally identifying data.
4. How We Use Information
- Operating the Account - authenticating Customer, displaying the dashboard, processing subscriptions and Credit purchases, sending requested notifications
- Delivering the Service - running creator searches, generating AI-assisted keyword strategies and outreach drafts, tracking campaigns, deals, content, and generating payment reports
- Billing - processing Plan subscriptions and Credit Pack purchases through Stripe, enforcing Credit balances
- Communications - sending account-related messages, support replies, and legal notices, and, with consent, product updates
- Security and fraud prevention - detecting unusual activity, enforcing our Terms of Service, protecting the integrity of the Service
- Legal compliance - meeting tax and accounting obligations, responding to lawful requests
We do not sell personal information and do not share it with third parties for their own independent marketing purposes.
4.1 AI Processing
Product descriptions, search criteria, and outreach drafting requests Customer submits are sent to our AI provider (Anthropic) to generate keyword strategies, creator recommendations, and draft outreach messages. Creator data may also be included in these requests to generate relevant, personalized suggestions. When a Creator replies to an outreach message routed through the Service, the content of that reply is automatically screened by our AI provider to classify it (for example, to identify a submitted content link, judge whether the message needs a response, and produce a short summary for the Customer) and, when Customer requests a draft reply, to help generate one. When a Creator's first reply arrives in a conversation, the Service may also automatically send a single acknowledgement email to the Creator on the Customer's behalf, confirming receipt and indicating that the Customer will respond. This processing is used only to power the Service's AI features and is not used by us to train third-party foundation models.
4.2 Embeddings
We generate vector embeddings of Creator data (for semantic search) using a self-hosted embedding model that runs on our own infrastructure, not a third-party API. Embeddings are derived data used to power the "similar creators" and pool search features.
5. Legal Bases for Processing
Where applicable law requires a legal basis for processing:
- Performance of a contract - most processing needed to operate the Account and deliver the Service
- Legitimate interests - security, fraud prevention, product analytics, processing of publicly available Creator data to enable a business-to-business discovery tool, and operating Customer-initiated outreach conversations (including automated classification of Creator replies), balanced against Creator interests
- Legal obligation - billing records and responses to lawful requests
- Consent - optional marketing communications, which can be withdrawn at any time
6. Sub-processors
We use the following third-party services. Each receives only the information necessary for its specific purpose:
| Sub-processor | Purpose | Location |
|---|---|---|
| Stripe | Subscription and Credit Pack payment processing | United States |
| Google (OAuth) | Optional sign-in via Google account | United States |
| Resend | Transactional and outreach email delivery, including receiving Creator email replies | United States |
| Anthropic | AI processing: keyword strategies, creator recommendations, outreach drafting, and automated classification of Creator email replies | United States |
| Third-party data providers | Creator discovery data aggregation (public social profile data) | United States |
| Hetzner | Server and database hosting | Germany |
| Pirsch | Privacy-respecting website analytics | Germany |
We may in the future engage additional third-party data providers for content and profile data collection from public platforms; this list will be updated before any such provider begins processing personal information.
We update this list as our infrastructure changes. The version published on this page is current as of the "last updated" date above.
7. International Data Transfers
Burkhart Digital LLC is established in the United States. Our application and database are hosted in Germany, and other sub-processors are located in the United States and the European Union. This means personal information may be transferred across borders as part of normal operation of the Service. Where we transfer personal information out of the European Economic Area or United Kingdom, we rely on the limited scope of data shared with each sub-processor and, where applicable, standard contractual clauses or equivalent safeguards.
8. Data Retention
- Account data - retained for the life of the Account, and afterward only as long as needed to meet billing, tax, and legal recordkeeping obligations.
- Billing records - retained as required by tax and accounting law.
- Creator data - retained for as long as it remains relevant to the discovery and outreach service, refreshed periodically from source platforms, and removed on Creator request as described in Section 9.
- Technical and session logs - retained only as long as necessary for security and troubleshooting.
When Customer closes its Account, we delete or de-identify Account data except where we are required to retain it by law or a legitimate ongoing obligation (for example, billing records or an active dispute).
9. Your Rights
9.1 Account Holders (Customer)
You may request access to, correction of, or deletion of your Account data, request a portable copy of it, object to processing based on our legitimate interests, and withdraw any consent previously given. To exercise these rights, write to hi@ugcscout.app. We will respond within the time frame required by applicable law and may need to verify your identity first.
If you are located in the European Economic Area, the United Kingdom, or a US state with its own privacy law (such as the California Consumer Privacy Act), you have corresponding rights under that law, including the right to lodge a complaint with your local data protection authority. UGC Scout does not sell personal information and does not share it for cross-context behavioral advertising.
9.2 Creators
If you are a Creator and believe your public information has been indexed by UGC Scout and you would like it removed from our system, write to hi@ugcscout.app with the profile handle in question. We will remove your information from our index, subject to any records we are legally required to retain and any information already delivered to a Customer prior to the removal request.
10. Security
We take reasonable technical and organizational measures to protect personal information, including encryption of data in transit (HTTPS/TLS), access controls limiting administrative access to authorized personnel, hashed storage of credentials, and regular security patching of our infrastructure. No system is perfectly secure. If you believe your Account has been compromised, contact us immediately at hi@ugcscout.app.
11. Children
UGC Scout is a business-to-business product not directed to children and is not intended for use by anyone under 18. If we become aware that we have collected personal information from someone under 18, we will delete it promptly. If you believe a minor has used the Service, contact us at hi@ugcscout.app.
12. Changes to This Policy
We may update this policy to reflect changes in our practices, the services we offer, or applicable law. When we make material changes, we will update the "last updated" date above and, where appropriate, notify Customer by email or through the Account.
13. Contact
For any privacy-related question, request, or complaint:
Email: hi@ugcscout.app
Postal mail: Burkhart Digital LLC 30 N Gould St #21068 Sheridan, WY 82801, USA