Privacy & Cookies

Welcome to Hashtag’d, a brand social content platform operated by Xeio Ltd, a company registered in England and Wales with company number 8134729.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it. We are registered with the UK Information Commissioner’s Office, with registration reference Z3404574.

Depending on who you are and how you use our services, our privacy obligations to you will vary. We have split this document into three sections: for “Visitors” to our website, who may be future Business Users or have questions about a campaign we power; for “Business Users” and their representatives, who are using our technology to power their campaigns; and for “Participants” whose content may be featured in a Business User campaign:

Last updated: November 2024

1. Visitors

Data Controller

Xeio Ltd. is the Data Controller for the personal data of visitors to the Hashtag’d website.

Information We Collect

• Contact Information: When you express interest in our services, we may collect your name, email address, phone number, and company name.
• Usage Data: We collect information about your interaction with our site, such as your IP address, browser type, pages visited, and time spent on the site.
• Cookies: We use cookies to track your activity on our site to improve user experience. You can control cookie settings through your browser.

How We Use Your Information

• To Respond to Inquiries: We use your contact information to respond to your questions or comments.
• To Improve Our Website: Usage data helps us understand how visitors interact with our site, allowing us to improve its functionality and user experience.
• Marketing: With your consent, we may send you promotional materials or newsletters.

Sharing Your Information

• Third-Party Service Providers: We may share your data with third-party service providers who assist us in website management, marketing, and data analysis.
• Legal Requirements: We may disclose your information if required by law or to protect the rights, property, or safety of Xeio Ltd., our users, or others.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

2. Business Users

Data Processor

Xeio Ltd. acts as the Data Processor for personal data processed on behalf of our Business Users and their representatives in connection with campaigns using the Hashtag’d platform. The Business User company is the Data Controller.

Information We Process

• Business User Representative Information: We collect names, email addresses, phone numbers, and job titles of Business User representatives.
• Campaign Data: We process data related to UGC campaigns, which may include participant information, content, and analytics.

How We Use Your Information

• To Provide Services: We use the collected data to manage and operate UGC campaigns on behalf of our Business Users.
• Customer Support: We use Business User representative information to provide support and respond to inquiries.
• Platform Improvement: Campaign data helps us enhance the functionality and performance of the Hashtag’d platform.

Sharing Your Information

• With Business Users: We share processed data with the Business User company that controls the campaign.
• Third-Party Service Providers: We may share data with service providers who assist us in delivering our services.

Data Retention

We retain Business User-related data for as long as necessary to provide our services or as required by the Business User or law.

3. Participants

Data Collection

We collect data from participants who upload content directly to a Business User campaign or whose data is gathered from Instagram or Twitter as part of a Business User campaign.

Information We Collect

• Uploaded Content: Names, email addresses, photos, videos, captions, and other content uploaded by participants.
• Social Media Data: Publicly available data from Instagram or Twitter, such as usernames, profile pictures, and content.

How We Use Your Information

• Campaign Execution: We process participant data to execute and manage UGC campaigns on behalf of our Business Users.
• Content Display: Uploaded content may be displayed on Business User websites, social media channels, or other marketing materials, as per the Terms presented to you by the Business User which is the Data Controller.
• Analytics: We analyze participant data to provide insights and performance metrics to our Business Users.

Sharing Your Information

• With Business Users: We share participant data with the Business User company running the campaign. Business Users may use that data as they wish, subject to agreements with the participant which we may facilitate.

Data Retention

We retain participant data for the duration of the campaign or as required by the Business User or law.

Applicable to all groups

Sub-processors and third parties

Hashtag’d works with a number of third parties to deliver our products and services. We have detailed each below with a description of how we use their services. Our service providers are subject to contract terms designed to ensure that these service providers process personal data only for the purposes of providing services to Hashtag’d and in accordance with our commitments to Business Users and applicable data protection laws.

Google Cloud EMEA Limited, a company registered in Ireland: We contract with Google Cloud EMEA Limited to provide website hosting and associated technical services as part of their Google Cloud Platform offering. In delivering this functionality they may have access to Personal Data from Business Users, their Representatives, and Visitors. Their privacy policy can be found at https://cloud.google.com/terms/cloud-privacy-notice

Cloudflare, Inc., a company registered in Delaware, USA. We contract with Cloudflare to provide technical services associated with serving our website and application, including DNS resolution, security and server functionality. In delivering this functionality they may have access to Personal Data from Business Users, their Representatives, and Visitors. Their privacy policy can be found at https://www.cloudflare.com/en-gb/privacypolicy/

Chaport LLC, a company registered in California, USA. We contract with Chaport LLC to provide live chat services on our website and application. We do not routinely share Personal Data with them, however they process conversations between ourselves and our Business Users and their Representatives, and Visitors which may include Personal Data. In addition, given their live chat service is loaded by visitors to our website they will have access to IP address and other metadata which may be considered Personal Data. Full details of their privacy policy can be found at https://www.chaport.com/privacy

OpenAI LLC, a company registered in Delaware, USA. We contract with OpenAI LLC to provide content analysis services. We do not routinely share Personal Data with them, however they process uploaded content which Participants have shared with our Business Users and this could include Personal Data if the Participant included it. Their privacy policies are available at https://openai.com/policies/privacy-policy/

Stripe (various legal entities; see https://stripe.com/gb/legal/privacy-center) We interact with Stripe to handle payment processing’ personal data which Stripe may pass on to us on behalf of our Business Users may include name, email address, and other metadata related to purchases. Stripe may also pass on personal data about Business Users and their Representatives subject to their privacy policy at https://stripe.com/gb/privacy which is used on the basis of contractual obligation to our customers.

Cookies

We set and use the following first-party cookies:

XSRF-TOKEN: A random string used to ensure requests are made by a user intentionally and not by a third party.

hashtagd_session: A random string used to ensure your session is maintained, allowing you to sign in to Hashtag’d and use our services.

chaport-XYZ (Where XYZ is various character combinations.): Used by our live chat provider Chaport LLC to provide chat support, subject to their privacy policy at https://www.chaport.com/privacy

Your Rights

You have the right to access, correct, or delete your personal data. If you wish to exercise these rights where we act as the Data Controller, or have any questions about this Privacy Policy, please contact us at info@hashtagd.net

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify Business Users of significant changes by email or through a notice on our website.

Contact Us

If you have any questions about this Privacy Policy, please contact us via live chat or by email to info@hashtagd.net