Last updated: 1 September 2026
This Privacy Policy explains how Authentiq Media, trading as The UGC Workspace("we", "us" or "our"), collects, uses, discloses, stores and manages personal information when you use theugcworkspace.com and The UGC Workspace services (the "Services").
We aim to manage personal information transparently and consistently with the Australian Privacy Principles in the Privacy Act 1988 (Cth) where they apply. The Australian Privacy Principles are available from the Office of the Australian Information Commissioner.
Depending on how you use the Services, we may collect:
Please avoid entering sensitive information unless it is reasonably necessary for your use of the Services and you are authorised to provide it.
We collect information directly from you, automatically when you use the Services, from people who interact with creator-controlled forms or documents, from connected services you authorise, and from service providers involved in authentication, payments, email delivery, hosting, security and support.
We use information to:
AI-assisted features support user workflows but do not make final legal, financial, employment or other similarly significant decisions for users. You should review generated output before using it.
If you connect Gmail, the Services may access email content, sender and recipient details, subject lines, attachments and relevant metadata, and may send email when you direct the Services to do so. This supports inbox display, replies, linking communications to contacts or projects, scheduled or workflow email and AI-assisted features you choose to use.
If you connect Google Calendar, the Services may read or create relevant calendar information for meetings, tasks, projects, contracts or invoices within the permissions you grant.
Google user data is not sold or used for advertising. You can disconnect supported Google integrations in Profile > Data & Account or revoke access through your Google Account. Revocation may prevent related features from working and does not necessarily remove workspace records you previously chose to create from connected data.
We may disclose personal information where reasonably necessary to operate the Services, to service providers supporting hosting and authentication, cloud storage, payments, email delivery, Google integrations, security scanning, AI features, monitoring and professional support. Current key providers include Base44, Google, Stripe and SendGrid. We may also disclose information with your direction or consent, to protect users or the Services, during a lawful business reorganisation, or where required or authorised by law.
Some providers may process information outside Australia, including in countries where they or their subprocessors operate. Their handling of information is also governed by their own terms, privacy policies and security practices.
We do not sell personal information.
Account verification, password reset, security, billing, contract, invoice and other requested workflow messages are service communications. Marketing communications are handled separately and are sent only where permitted. Marketing messages include sender identification and an unsubscribe method. You may unsubscribe at any time without affecting essential service communications.
We use administrative, technical and access controls designed to reduce misuse, interference, loss and unauthorised access, modification or disclosure. These include authenticated access, owner-based data controls, restricted backend operations, encryption in transit and infrastructure-supported encryption at rest, security logging, billing verification and supported upload scanning.
No online service can guarantee absolute security. If we identify a data breach, we will assess and respond to it and provide notifications where required by applicable law.
We retain information while your account is active and as reasonably necessary to provide the Services, resolve disputes, prevent fraud or repeat-trial abuse, meet legal, tax, accounting and electronic-transaction obligations, maintain security evidence and enforce agreements.
Supported account tools allow you to request an export and request account deletion. Exports may exclude credentials, tokens, internal security and audit records, provider-held data, derived system data and information we cannot lawfully disclose. A deletion request removes or schedules removal of supported workspace information and revokes supported connected-service credentials, subject to documented legal, billing, fraud-prevention, security and operational retention exceptions.
Retained exceptions are limited to what is reasonably necessary and are not used to provide continued workspace access. Provider systems may have their own deletion and retention cycles.
Data export is not a guaranteed backup or restoration service. We do not currently represent that every user-created record or file can be restored after deletion, corruption or provider failure. Keep independent copies of business-critical records and final files.
You may access or update supported profile and workspace information through the Services and may request access to or correction of personal information we hold. We may need to verify your identity and may refuse or limit a request where permitted by law, explaining the reason where required.
Contact us with privacy questions, access or correction requests, or complaints. We will review the matter and respond within a reasonable period. If you are not satisfied, you may be entitled to contact the Office of the Australian Information Commissioner.
We may update this policy to reflect changes to law, providers or the Services. The current version and effective date will remain available on this page. We will provide additional notice where a material change requires it.