Privacy Policy
Last updated: May 14, 2026
This policy explains what personal information Burkhart Digital LLC collects, how we use it, and what rights you have. It applies to the LatinaUGC platform at latinaugc.com, our WhatsApp business number, and any related services we operate.
If anything here is unclear, write to us at [email protected].
1. Who we are
LatinaUGC is a service operated by Burkhart Digital LLC, a limited liability company registered in the State of Wyoming, United States ("LatinaUGC", "Burkhart Digital", "we", "us", "our"). We operate an online marketplace where creators license short-form video content to brands, agencies, and resellers.
- Registered office: 30 N Gould St #21068, Sheridan, WY 82801, USA
- Privacy contact: [email protected]
Burkhart Digital LLC does not have offices, subsidiaries, or legal representatives in Colombia, Brazil, Mexico, Argentina, or any country in the European Union or United Kingdom.
2. Scope
This policy covers personal information processed in connection with:
- The LatinaUGC website at latinaugc.com and any sub-domains we operate
- Account registration, onboarding, and use of the platform as a creator, buyer (brand or agency), or reseller
- Our WhatsApp business number used for creator intake and support
- Any related applications, APIs, and integrations we offer
This policy does not cover third-party services you may use alongside LatinaUGC (for example, your bank, your social media accounts, or external messaging apps). Their privacy practices are governed by their own policies.
3. Information we collect
We collect information differently depending on how you interact with us.
3.1 Creators
If you sign up as a creator, we collect:
| Information | When and why |
|---|---|
| Phone number | At signup; used as your account identity and to send you account-related messages via WhatsApp |
| Email address | During onboarding; used for legal notices, payout confirmations, and account recovery |
| Full name | During onboarding; required for identity verification and tax-related disbursement records |
| Government-issued identification document (e.g., cédula, RG, INE, passport) | During onboarding; required to verify your age (must be 18 or over) and your identity before we approve your account and send payouts |
| Payout details (bank account, Wise, PayPal information) | During onboarding; required to pay you for licensed content |
| Country, city, social media handles, content niche | During onboarding; used internally to match you with relevant opportunities. Of these, only your country may be shown to buyers in the catalog — your city, social media handles, and other profile details are used internally and are never displayed publicly or shared with buyers |
| Video content you upload and related metadata | When you upload; the content is the product you're licensing, and metadata enables search and matching |
| Earnings and payout history | Generated as you work with us; used for your dashboard and for tax-related recordkeeping |
| Messages exchanged with our WhatsApp business number | When you message us; used for support, audit, and to operate the autoresponder |
| IP address, device information, login session data | When you sign in; used for security, fraud prevention, and account integrity |
3.2 Buyers (brands, agencies, resellers)
If you sign up as a buyer, we collect:
| Information | When and why |
|---|---|
| Business name and contact name | At signup; used for your account and invoicing |
| Email address | At signup; used for authentication, communications, and invoices |
| Google account profile (name, email address, profile picture) | If you choose to sign in with Google; received from Google and used to create and authenticate your account |
| Billing address and tax identification number | When you purchase; used for invoicing and tax compliance |
| Payment method details | When you purchase; handled directly by Stripe — we do not see or store your card numbers |
| Wallet balance, purchase history, and downloaded content history | Generated as you use the platform; used to operate your account, audit license usage, and enable re-download rights |
| IP address, device information, login session data | When you sign in; used for security and fraud prevention |
Resellers using our API additionally have:
- API key (stored as a hashed value; the raw key is shown only at creation)
- API request and webhook delivery logs
3.3 Site visitors
If you visit the site without signing in, we collect:
- Aggregate visit information through Pirsch, a privacy-respecting analytics service that does not use cookies or collect personally identifying data
- Your IP address temporarily, for rate-limiting and abuse prevention
We do not use Meta Pixel, Google Analytics, or any cookie-based advertising tracker.
3.4 Cookies and similar technologies
We use a small number of strictly functional cookies. We do not use advertising, cross-site tracking, or third-party analytics cookies.
| Cookie | Purpose |
|---|---|
| Authentication / session cookie | Keeps you signed in and maintains your session securely |
Language preference (PARAGLIDE_LOCALE) |
Remembers the language you selected so the site displays in that language |
Because these cookies are essential to operate the website and deliver the service you have asked for, they do not require consent under most privacy laws. You can block or delete cookies in your browser settings, but the site may not function correctly without the authentication cookie.
4. How we use your information
We use your information only for the purposes set out below:
- Operating your account — authenticating you, displaying your dashboard, processing your transactions, sending notifications you've requested
- Delivering the service — making creator content available to buyers, processing payments, disbursing payouts to creators, providing the WhatsApp autoresponder and admin support
- Verifying identity and age — confirming creator identity and age (18+) before account approval and payouts, validating phone numbers, preventing fraudulent accounts
- Improving the catalog — generating embeddings and classifications of uploaded content to enable search and matching (described further in section 4.1)
- Communications — sending account-related messages, support replies, legal notices, and (with consent) marketing communications
- Security and fraud prevention — detecting unusual activity, enforcing terms of service, responding to security incidents
- Legal compliance — meeting tax reporting obligations, responding to lawful requests, enforcing our agreements
We do not sell your personal information, and we do not share it with third parties for their independent marketing purposes.
When creators license content, buyers see the video itself and, at most, the creator's country. We do not show buyers a creator's name, city, social media handles, or contact details, and creators appear under aliases in any moderated communication.
4.1 Automated processing of video content
Uploaded videos are processed automatically to generate metadata (descriptions, tags, embeddings, technical attributes). This processing uses third-party AI services (Google Gemini or Anthropic Claude, depending on configuration) and a self-hosted embedding model. The output affects how your content appears in the catalog and is matched to buyer searches.
If you believe an automated classification has affected your content visibility unfairly, you may request human review by writing to [email protected].
4.2 Manual review of identification documents
Identification documents uploaded by creators are reviewed manually by authorized administrators to confirm age and identity. We do not use third-party automated identity-verification services for this step.
Access to identification documents is limited to authorized personnel and logged. Documents are stored in encrypted private storage and are not visible to other creators, buyers, or the public.
5. Legal bases for processing
Depending on where you live, the law may require us to identify a legal basis for processing your personal information. The bases we rely on are:
- Performance of a contract — most processing related to operating your account, delivering the service, processing payments, and disbursing payouts is necessary to perform the agreement between you and LatinaUGC.
- Legal obligation — some processing (tax records, identity and age verification, responses to lawful requests) is required by law.
- Legitimate interests — security, fraud prevention, audit logging, and aggregate analytics are based on our legitimate interests in operating a secure and well-functioning platform, balanced against your rights.
- Consent — marketing communications and any optional features that go beyond contract performance are based on your consent, which you may withdraw at any time.
6. Sub-processors
We use the following third-party services to operate the platform. Each receives only the information necessary for its specific purpose:
| Sub-processor | Purpose | Location |
|---|---|---|
| Stripe | Payment processing (buyer charges) | United States, European Union |
| Wise | Creator payouts | United Kingdom, European Union |
| PayPal | Creator payouts (alternative) | United States, European Union |
| Bancolombia | Creator payouts (Colombia local rail) | Colombia |
| Cloudflare R2 | Object storage for video files and thumbnails | Global edge infrastructure |
| Hetzner | Server hosting (application and database) | Germany |
| Meta Platforms (WhatsApp Cloud API) | WhatsApp business messaging | United States, European Union |
| Twilio | Phone number validation and SMS where applicable | United States |
| Resend | Transactional email delivery | United States |
| Pirsch | Privacy-respecting website analytics | Germany |
| Google (Gemini) and/or Anthropic (Claude) | AI-based video classification | United States |
| Google (Sign-In / OAuth) | Optional sign-in for buyers via a Google account | United States |
| Veriphone | Phone country and line-type verification | United States |
We update this list as our infrastructure changes. The version published on this page is current as of the "last updated" date at the top.
7. International data transfers
Burkhart Digital LLC is established in the United States. Our database and application servers are hosted in Germany. Sub-processors are located in the United States, European Union, United Kingdom, and Colombia. Buyers and creators are located worldwide.
This means your information will be transferred across borders as part of normal platform operation. Where we transfer data from the European Economic Area, the United Kingdom, or other jurisdictions with restrictions on international transfers, we rely on the standard contractual clauses or equivalent transfer mechanisms made available by our sub-processors and on the limited scope of the data each sub-processor receives.
If you have questions about a specific transfer, contact us at [email protected].
8. Data retention
We keep personal information only as long as we need it for the purposes set out in this policy, and longer only where the law requires it. In practice:
- Account information (phone, email, name, country, social handles) — for the life of your account, and afterward only as long as needed to meet tax and other legal recordkeeping obligations.
- Identification documents — for the life of your account; deleted within a reasonable period after account closure unless retention is required by law.
- Payout details and earnings records — for the life of your account, and afterward as required to meet tax recordkeeping obligations.
- Video content and metadata — for the period during which licenses are active and downloadable by buyers. Original master files are retained while any license to the content remains in force.
- WhatsApp conversation logs, communication records, and support history — for as long as needed to operate support, maintain audit records, and meet our legal obligations.
- Technical logs (IP address, device, session, API request, and webhook logs) — for no longer than necessary for security, fraud prevention, and operational troubleshooting.
- Aggregate analytics — retained only in aggregated, non-identifying form.
When you close your account, we delete or de-identify your personal information except where law or a legitimate contractual obligation requires us to keep it longer (for example, tax records, ongoing license obligations to buyers, or an active legal dispute).
9. Your rights
You have rights over your personal information. The exact rights available to you depend on where you live, but the following rights are available to all users regardless of jurisdiction:
- Access — request a copy of the personal information we hold about you
- Correction — ask us to fix inaccurate or incomplete information (most fields are also editable directly from your account)
- Deletion — ask us to delete your account and personal information, subject to information we are required to retain by law
- Portability — receive your personal information in a machine-readable format
- Objection — object to processing based on legitimate interests
- Withdrawal of consent — withdraw any consent you have previously given (this will not affect processing that took place before the withdrawal)
- Complaint — lodge a complaint with the data protection authority in your country
9.1 If you are in Colombia
In addition to the rights above, Colombian residents have rights under Ley 1581 de 2012 and Decreto 1377 de 2013 ("Habeas Data"), including the right to know how your personal data is being treated and to revoke any authorization given to LatinaUGC for the treatment of your data. You may also lodge a complaint with the Superintendencia de Industria y Comercio (SIC).
9.2 If you are in the European Economic Area or the United Kingdom
You have additional rights under the EU and UK General Data Protection Regulation, including the right to restrict processing and the right to lodge a complaint with your national data protection authority. You may exercise your rights by contacting us directly at [email protected].
9.3 If you are in Brazil
You have rights under the Lei Geral de Proteção de Dados (LGPD), including the rights of confirmation, access, correction, anonymization, blocking, deletion, portability, information about sharing, and revocation of consent. You may lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).
9.4 If you are in California or another US state with privacy legislation
You have rights under the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and equivalent state laws in Virginia, Colorado, Connecticut, Utah, and other states that have adopted similar legislation. These rights include the right to know what personal information we collect, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information. LatinaUGC does not sell personal information and does not share it for cross-context behavioral advertising.
9.5 How to exercise your rights
To exercise any of these rights, write to us at [email protected]. We will respond within the time frames required by the law applicable to you. We may need to verify your identity before fulfilling certain requests to make sure we don't disclose your information to someone else.
You will not be charged a fee for exercising your rights, and we will not retaliate against you for doing so. If we cannot fulfill a request (for example, because we are legally required to keep certain records), we will explain why.
10. Security
We take reasonable technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (HTTPS/TLS for the website and APIs)
- Encryption of identification documents and other sensitive files at rest
- Access controls limiting administrative access to authorized personnel
- Audit logging of administrative access to sensitive data
- Hashed storage of credentials and API keys (raw values never stored)
- Regular software updates and security patching of our infrastructure
No system is perfectly secure. You can help protect your account by using a unique phone number for account recovery, keeping your email account secure, and notifying us immediately at [email protected] if you believe your account has been compromised.
11. Children and age verification
LatinaUGC is not directed to children. The platform is intended only for users who are 18 years of age or older.
Creators: All creator accounts require submission of a government-issued identification document, which is manually reviewed by an authorized administrator to confirm that the creator is 18 or over before the account is approved. Accounts that cannot be verified as meeting the age requirement are not approved.
Buyers: Buyer accounts represent businesses. By signing up as a buyer, you confirm that you are an adult acting on behalf of the business identified in your account.
If we become aware that we have collected personal information from a person under 18, we will delete the account and the associated information promptly. If you believe a minor has used our platform, please contact us at [email protected].
12. Changes to this policy
We may update this policy from time to time to reflect changes in our practices, in the services we offer, or in applicable law. When we make material changes, we will update the "last updated" date at the top of this page and, where appropriate, notify you by email or through your account.
We encourage you to review this page periodically. Continued use of the platform after a change indicates your acceptance of the updated policy where acceptance is the appropriate basis; otherwise, the change becomes effective on the date posted unless a later date is specified.
13. Contact
For any privacy-related question, request, or complaint:
Email: [email protected]
Postal mail: Burkhart Digital LLC 30 N Gould St #21068 Sheridan, WY 82801 USA
You may also contact the data protection authority in your country, including:
- Colombia — Superintendencia de Industria y Comercio (SIC)
- Brazil — Autoridade Nacional de Proteção de Dados (ANPD)
- European Union / United Kingdom — your national data protection authority
- United States — your state's Attorney General, or in California, the California Privacy Protection Agency (CPPA)
This document is the controlling version of our privacy policy. Earlier versions are available on request.