PRIVACY POLICY.

We may collect information you provide directly to us, including:

• Account and profile information, such as your name, email address, password credentials handled through our authentication provider, profile information, business information, membership level, preferences, and other information you choose to add to your account.
• OG Services and client information, such as service requests, project details, onboarding responses, files, communications, feedback, contracts, project activity, and information necessary to provide services or manage a client relationship.
• Contact and inquiry information, including information submitted through contact forms, service request forms, support requests, surveys, applications, or direct communications with us.
• Community and user-generated content, such as posts, comments, profile content, messages, responses, or other content you choose to submit through community features when those features are available.
• Transaction and subscription information, such as membership status, purchase history, subscription status, billing events, and related transaction details. Payment card information may be collected and processed directly by our payment processor rather than stored by OG Creative.
• Marketing and communication preferences, including email subscription status and how you interact with communications we send.

In addition to information you directly submit, we and our third-party service providers may automatically collect certain technical and usage information as you navigate through and interact with the Services. This information may include internet protocol (IP) addresses, browser type, operating system, device characteristics, referring/exit pages, timestamps, clickstream data, session activity, and other diagnostic or performance metrics.

We may use information we collect to:

• Create, authenticate, maintain, and secure user accounts.
• Provide and operate OGBA, OG Services, client portals, community features, resources, memberships, and other Services.
• Process memberships, purchases, subscriptions, and related transactions.
• Manage client projects, service requests, onboarding, communications, and support.
• Personalize and improve the user experience.
• Send transactional messages, account notices, service updates, security alerts, and other operational communications.
• Send marketing or educational communications when permitted and manage your communication preferences.
• Understand how the Services are used, troubleshoot problems, measure performance, and improve our products and offerings.
• Prevent fraud, abuse, unauthorized access, security incidents, and violations of our policies.
• Comply with legal obligations, enforce agreements, and protect the rights, safety, and property of OG Creative, our users, clients, and others.

We do not sell personal information for monetary or other valuable consideration.

We may disclose information to third parties when reasonably necessary to operate our business and provide the Services, including service providers that support areas such as hosting, authentication, databases, payment processing, email delivery, analytics, document and contract management, design or content tools, and other business operations.

Our technology service providers and processors may include platforms and tools such as Lovable, Supabase, Stripe, Klaviyo, PandaDoc, Google, GitHub, and other technical or administrative infrastructure providers we engage to operate the Services. Each such service provider processes information in accordance with its respective contractual obligations and applicable privacy policies.

We may also disclose information:

• At your direction or with your consent.
• To professional advisers or contractors who need access to perform services for us and are subject to appropriate obligations.
• If required by law, regulation, subpoena, court order, or other valid legal process.
• When we believe disclosure is reasonably necessary to protect rights, safety, security, investigate fraud or abuse, or enforce our agreements.
• In connection with a merger, financing, acquisition, sale, reorganization, bankruptcy, or transfer of all or part of our business or assets.

Payments and subscription transactions may be processed by third-party payment providers such as Stripe. OG Creative does not intend to store complete payment card numbers or card security codes within its own application database. Payment providers may collect and process payment information under their own privacy policies and terms.

We and our service providers may use cookies, local storage, session storage, pixels, and similar technologies to keep users signed in, remember preferences, maintain security, understand usage, improve performance, and support other functionality.

Some technologies are necessary for the Services to function. Others may be used for analytics or other optional purposes. The technologies actually used may change as the platform develops. Where required by applicable law, we will provide appropriate choices or consent mechanisms.

We may send communications necessary to administer your account or provide the Services, including authentication messages, security notices, billing or subscription information, client project communications, and important service updates.

If you opt in to marketing communications, you may unsubscribe from promotional email using the unsubscribe link included in those messages or other preference tools we provide. Unsubscribing from marketing does not prevent us from sending necessary transactional or service-related communications.

Certain OGBA features may allow users to create profiles or share content with other members. Information you intentionally make visible to other users may be seen by those users. You should avoid posting information you do not want others to access.

Information contained within client portals and private workspace environments is intended for access solely by authorized users associated with the designated client relationship and authorized personnel of the Company. We maintain administrative, technical, and physical safeguards, including role-based access controls, to restrict unauthorized access to client data.

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include authentication controls, access restrictions, database security policies, encryption provided by our infrastructure and service providers, and monitoring or security practices appropriate to our Services.

While we implement safeguards designed to protect your personal information, no method of transmission over the Internet or method of electronic storage is completely secure. Consequently, we cannot guarantee its absolute security.

We retain personal information for as long as reasonably necessary to provide the Services, maintain accounts and client relationships, fulfill the purposes described in this Privacy Policy, comply with legal, tax, accounting, or contractual obligations, resolve disputes, and enforce agreements.

Retention periods may vary depending on the type of information and why it was collected. We may retain certain records after an account or client relationship ends when reasonably necessary for legitimate business or legal purposes.

Depending on where you live and applicable law, you may have rights or choices regarding your personal information. These may include the ability to request access to, correction of, or deletion of certain personal information, or to object to or limit certain uses.

You may also update certain account information through available profile or account settings.

To submit a privacy request, contact us using the information in the Contact Us section below. We may need to verify your identity before completing a request. Some information may be exempt from a request or retained where permitted or required by law.

The Services may contain links to, integrations with, or embedded functionality provided by third parties. We do not control the privacy or security practices of third-party services. Information you provide directly to a third party is governed by that provider’s privacy policy and terms.

The Services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 in circumstances requiring deletion, we will take reasonable steps to delete it.

The Services are intended strictly for individuals who are at least 18 years of age (or the legal age of majority in their jurisdiction of residence). By using the Services, you represent and warrant that you meet this age requirement. If you are under 18 years of age, you are not authorized to access or use the Services.

OG Creative is based in the United States. If you access the Services from outside the United States, your information may be processed and stored in the United States or other countries where our service providers operate. Those locations may have data protection laws that differ from those in your jurisdiction.

If you are accessing the Services from the European Union, European Economic Area, United Kingdom, or other regions with data protection laws governing global data transfers, please note that your personal information may be transferred to, stored, and processed in the United States and other jurisdictions where our service providers operate. Where required, we rely on lawful mechanisms to transfer personal information across international borders.

We may update this Privacy Policy as our Services, technology, or legal obligations change. When we make changes, we will update the “Last Updated” date above. If changes are material, we may provide additional notice when appropriate.