← Back to app

Privacy Policy

Last updated: April 10, 2026

1. Introduction

This Privacy Policy describes how hashtag.org (“we,” “us,” or “the Service”) handles personal information when you use our websites, apps, and related features—including discovery on the map, creator portals, messaging, voice/video sessions, optional paid vault or subscription features, marketplace and partner programs, and Web3 naming integrations where offered.

By using the Service, you agree to this policy. If you do not agree, please do not use the Service. For cookie and similar technologies, see our Cookie Policy. For how we protect data, see our Security Overview.

2. Who is responsible

The organization that operates hashtag.org is the data controller for personal information processed through this deployment. Some features rely on subprocessors (for example payment processing). Where another company processes data solely on our instructions, they act as processors.

3. Information we collect

We may collect the following categories of information, depending on how you use the Service:

  • Account and profile: email address, display name, password hash, and settings you choose (for example theme or preferences stored in the browser).
  • Location and map-related data: coordinates, addresses, or place information you associate with portals, map views you request, and related metadata needed to show portals on the map and to operate discovery features.
  • Content you submit: text, images, videos, links, portal descriptions, and other materials you upload or publish—including optional subscriber-only or age-gated vault content where creators enable those features.
  • Communications: messages sent through in-app chat, call-related metadata, and support or safety contacts you initiate.
  • Payments and payouts: when you subscribe, tip, purchase access, or receive creator or partner payouts, our payment providers (such as Stripe) collect payment method details, billing address, tax or identity elements required for compliance, and transaction records. We receive limited payment metadata from those providers—not your full card number.
  • Technical and usage data: IP address, device and browser type, approximate region, timestamps, pages or API routes accessed, error logs, security signals, and anti-abuse data. We may use a session identifier cookie to understand repeat visits to public portal pages.
  • Authentication: HTTP-only session cookies or equivalent tokens that keep you signed in securely.

4. How we use information

We use personal information to:

  • Provide, operate, and improve the Service (including maps, portals, chat, and calls).
  • Create and manage accounts, authenticate users, and prevent fraud and abuse.
  • Process payments, subscriptions, creator earnings, and partner commissions as described at checkout.
  • Display public or shared content according to your settings and portal visibility rules.
  • Comply with law, respond to lawful requests, and enforce our Terms of Service.
  • Send service emails (for example password resets, receipts, or critical notices).

We do not sell your personal information. We do not use your content to train generalized AI models for third parties.

If you are in the European Economic Area, United Kingdom, or similar regions, we rely on appropriate legal bases such as: performance of a contract, legitimate interests (for example security and product improvement, balanced against your rights), consent where required (for example certain cookies or marketing), and legal obligation.

6. Sharing and subprocessors

We may share information with:

  • Service providers who host infrastructure, send email, process payments, provide maps or video (for example map tiles or real-time communication), analytics that we configure, or customer support—under contractual confidentiality and data-processing terms where required.
  • Other users according to what you make public or share (for example portal pages, marketplace listings, or messages you send).
  • Authorities when required by law or to protect rights, safety, and integrity.
  • Business transfers in connection with a merger or acquisition, subject to this policy or notice.

The principal subprocessors we currently rely on, and what each one does:

  • Stripe, Inc. — payment processing, subscriptions, creator and partner payouts (Stripe Connect Express), and tax/identity collection where required by law.
  • Privy — authentication, wallet linking, and session identity for users who sign in with email or a Web3 wallet.
  • Anthropic, PBC — large language model inference for the GIGI agent and for AI-powered services you may opt into (for example portal Q&A, content drafts, AI visibility checks). Per Anthropic's API terms, your inputs and outputs are not used to train Anthropic's general models.
  • ElevenLabs — voice synthesis and conversational voice for the GIGI agent. When you opt in to Voice Persona Cloning, ElevenLabs Instant Voice Cloning is used to train a clone of your own voice from an audio sample you record on /settings/persona; you can revoke it at any time and we delete the upstream voice.
  • Tavus, Inc. — real-time talking-head video used by the optional Video Persona Cloning feature. When you opt in, a short training video you record on /settings/persona is sent to Tavus to train a replica that the embed widget can speak through live. You can revoke it at any time and we delete the upstream replica. Every video reply carries a visible "AI replica of [you]" watermark in compliance with deepfake-disclosure laws in CA, NY, IL, and TN.
  • Mapbox and MapLibre map tile providers — map rendering, geocoding, and place lookup for portal placement and discovery.
  • Upstash — Redis-backed rate limiting and ephemeral state.
  • Sentry — error and performance monitoring (technical/diagnostic data only; we do not send full user content to Sentry).
  • Hosting and email — VPS infrastructure for the application and database, plus a transactional email provider for service notifications.

AI-assisted features. When you use AI services (such as draft generation, AI visibility checks, brand-voice setup, or the chat agent on a portal or embedded website), the inputs you provide and the outputs we return are sent to and from the model providers listed above. We do not knowingly send sensitive categories of data to those providers. If you ask GIGI a question that contains personal information, that input is processed for the purpose of answering you. We do not retain AI conversation transcripts longer than needed to deliver the service and to support troubleshooting and abuse prevention. You can disable AI features on portals you control at any time from your settings.

7. Google user data and Gmail access

If you connect a Gmail account to the AI Inbox Autopilot feature, you grant hashtag.org access to that account through Google OAuth so your assigned #name AI agent can work your inbox on your behalf. We request the gmail.modify scope, which lets the agent read, organize, and label messages, move messages to Trash, and send replies for you. This scope cannot permanently delete messages. Anything the agent removes goes to Trash and stays recoverable.

Limited Use. hashtag.org's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, for the Gmail data we access:

  • We use it only to provide and improve the Inbox Autopilot features you have turned on (triage, replying on your behalf, organizing, and responding to inbound messages), acting under your #name's revocable authorization.
  • We do not transfer it to others except as necessary to provide or improve those user-facing features, to comply with applicable law, or as part of a merger or acquisition with notice to you.
  • We do not use it for advertising, and we do not sell it.
  • We do not allow humans to read it, except with your explicit consent for specific messages, where necessary for security or to comply with law, or where the data has been aggregated and anonymized for internal operations.
  • We do not use it to train generalized or general-purpose AI models. AI processing is scoped to running your own assistant on your own data, at your request.

You control this access. You can disconnect Gmail at any time from the Connectors area, which revokes the agent's authority and stops processing, and stored access tokens are deleted on disconnect. You can also revoke access directly from your Google Account permissions page.

8. Retention

We retain information as long as your account is active and as needed to provide the Service. We may retain certain records longer where required for tax, accounting, fraud prevention, dispute resolution, or law. Backup and cached copies may persist for a limited period. When deletion is requested, we remove or anonymize data except where retention is legally required.

9. Your choices and rights

Depending on your region, you may have the right to access, correct, delete, or export personal information, or to object to or restrict certain processing. You may also withdraw consent where processing is consent-based.

To exercise rights, contact the operator of this deployment. You may also lodge a complaint with a supervisory authority in your country.

10. Children

The Service is not directed at children under the age where they cannot lawfully consent to data processing in their region (often 16 or 13 with parental consent). We do not knowingly collect personal information from children. Vault or adult-labeled content may require age confirmation where implemented.

11. International transfers

If you access the Service from outside the country where servers or providers are located, your information may be transferred internationally. We use appropriate safeguards where required (for example standard contractual clauses).

12. Changes

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date. Continued use after changes constitutes acceptance unless we are required to obtain additional consent.

13. Contact

For privacy questions or requests, contact the hashtag.org team. If you use a branded or hosted instance, that operator’s contact details may also appear elsewhere on the site.