Legal
Privacy Policy
Last updated: August 13, 2026
Peguy UGC operates a self-hosted social media scheduling tool used to plan and publish video content to social media accounts that we own or are authorised to manage on behalf of a client. This policy explains what that tool accesses, why, and what we do with it.
1. Who we are
Peguy UGC ("we", "us") is a user-generated content production business operated by Peguy, based in Lawrence, Massachusetts, United States. You can reach us at letswork@peguyugc.com.
2. Scope of this policy
This policy covers our scheduling application, which connects to social media platforms through their official APIs, and this website. The application is used by Peguy UGC and its authorised operators only. It is not offered to the general public, has no public sign-up, and does not collect data from visitors other than the account data described below.
3. What we access, and why
When a social media account is connected to our scheduling tool, that platform's API provides a limited set of information. We access only what is required to publish content and confirm it published correctly.
| Data | Purpose |
|---|---|
| Account identifier, username, display name, avatar | To show which account a scheduled post will publish to, so content is not sent to the wrong profile |
| Profile link, bio, verification status | To confirm the correct account is connected |
| Access and refresh tokens | To publish scheduled content on our behalf without re-authorising before every post |
| Post and video metadata (IDs, publish status, basic performance metrics) | To confirm publication succeeded and report on content performance |
| Video and image files we upload | To deliver the content being published |
TikTok specifically
Where we connect a TikTok account, we request the scopes user.info.basic,
user.info.profile, video.upload and video.publish. These allow us to
identify the connected account and publish video content to it. We do not read private messages, we do not
access other users' data, and we do not use TikTok data for advertising, profiling, or model training.
4. What we do not do
- We do not sell, rent, or trade any data obtained through a platform API.
- We do not use it for advertising or to build advertising profiles.
- We do not use it to train machine learning or AI models.
- We do not share it with third parties except the infrastructure providers listed below.
- We do not collect data belonging to people other than the account holders who authorised us.
5. Where data is stored
Account tokens and scheduled content are stored on a private server we control, hosted with Hostinger International Ltd. in the United States. Access tokens are stored so that scheduled posts can publish at their scheduled time. Access to the server is restricted to Peguy UGC operators.
6. Service providers
- Hostinger — server hosting for the scheduling application.
- Social media platforms — TikTok, Meta (Facebook, Instagram, Threads), X, LinkedIn and YouTube, each of which receives the content we publish to it and handles it under its own privacy policy.
7. Retention and deletion
We keep account tokens for as long as the account remains connected to the tool. When an account is disconnected, its tokens are deleted from our systems. Published content remains on the relevant platform and is governed by that platform's policies.
How to revoke our access
An account holder can disconnect us at any time, without contacting us first:
- TikTok — Profile → Settings and privacy → Security & permissions → Manage app permissions
- Meta — Settings → Accounts Center → Apps and websites → Business integrations
- X, LinkedIn, YouTube — the connected apps section of each account's settings
Revoking access immediately stops our ability to publish to that account. To also have stored data deleted, email letswork@peguyugc.com and we will remove it within 30 days.
8. Your rights
Depending on where you live, you may have the right to request a copy of the personal data we hold about you, ask us to correct or delete it, or object to how we use it. Email letswork@peguyugc.com and we will respond within 30 days. We do not sell personal information as defined under the California Consumer Privacy Act.
9. Children
Our services are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
10. Security
We use HTTPS for all connections, restrict server access to authorised operators, and store credentials in a private environment. No system is perfectly secure, but we take reasonable measures appropriate to the scale of our operation.
11. Changes
If we change this policy we will update the date at the top of this page. Material changes affecting how we handle platform data will be reflected here before they take effect.
12. Contact
Peguy UGC · Lawrence, Massachusetts, United States
letswork@peguyugc.com · peguyugc.com