Legal

California Consumer Privacy Notice

This page supplements our Privacy Policy with the disclosures California residents are entitled to under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Effective June 2, 2026  ·  Last updated June 2, 2026  ·  Version v1.0

1. Who this notice applies to

You, if you are a natural person residing in California. We refer to you in this notice as a "California consumer."

2. Categories of personal information we collect

Within the last 12 months, we have collected or may collect the following statutory categories of personal information about California consumers.

3. Sources of personal information

• Directly from you, through forms, email, social messages, or applications
• From your devices when you visit hashtaq.com (cookies, server logs, pixels)
• From Meta and other platforms when you submit a lead form there
• From our service providers (analytics, ad platforms, applicant tracking)
• From public sources, for business outreach
• From referrals, when someone introduces you to us

4. Business and commercial purposes

• Operate, maintain, and improve hashtaq.com and our services
• Review and process job applications and partner inquiries
• Communicate with you, including replies, scheduling, and follow-ups
• Send newsletters and content you signed up for
• Run and measure advertising on Meta, Google, and similar platforms
• Understand site usage through analytics
• Detect, prevent, and respond to fraud, abuse, and security incidents
• Comply with legal obligations, respond to lawful requests, and defend our rights

5. Categories of third parties we share with

• Service providers who process data on our behalf under contract: hosting, database, email delivery, analytics, applicant tracking, customer support. See hashtaq.com/subprocessors.
• Advertising partners, including Meta and Google, for targeting and measurement.
• Government, regulators, and legal counterparties, when required by law.
• Successor entities, in the event of a merger, acquisition, financing, or asset sale.

6. Sale of personal information

We do not sell your personal information for money.

7. Sharing for cross-context behavioral advertising

Under the CCPA's broader "sharing" definition, our use of Meta Pixel, Google Analytics, and similar advertising tools may qualify as sharing personal information for cross-context behavioral advertising.

You can opt out at any time by either:

• Visiting hashtaq.com/do-not-sell, or
• Enabling Global Privacy Control in your browser (we honor it as a valid opt-out)

8. Sensitive personal information

We do not knowingly collect or use sensitive personal information for purposes that would trigger your right to limit under CPRA. We ask you not to share Social Security numbers, government IDs, financial account credentials, precise geolocation, racial or ethnic origin, religious beliefs, union membership, the contents of mail, email, or text messages, biometric data, health data, or information about sex life or orientation in free-text fields. If you accidentally share any of those, contact us and we will delete it.

9. Retention

We keep your information only as long as needed for the purposes described in this notice or as required by law. Specific retention periods by category are in our main Privacy Policy.

10. Your California rights

As a California consumer, you have the right to:

• Know what personal information we have collected, used, disclosed, and shared about you
• Access a portable copy of your personal information
• Correct inaccurate personal information
• Delete your personal information, subject to legal exceptions
• Opt out of sale or sharing for cross-context behavioral advertising
• Limit use of sensitive personal information (we do not currently use it for purposes that would trigger this right, but the right is available)
• Non-discrimination for exercising any of these rights
• Appeal a denied request

11. How to exercise your rights

Email hello@hashtaq.com with the right or rights you want to exercise. Please include:

• The right or rights you are invoking
• The email or other identifier you have used with us
• Enough information to verify your identity

We respond within 45 days. We may extend that by another 45 days if we need more time, and we will tell you if we do.

12. Authorized agents

You may designate an authorized agent to submit a request on your behalf. Send us written authorization from you, signed and dated, identifying the agent. We may still verify your identity directly.

13. Non-discrimination

We will not deny service, charge different prices or rates, provide a different level or quality of service, or suggest any of those, because you exercised your privacy rights.

14. Financial incentives

We do not offer financial incentives in exchange for the collection, sale, or sharing of your personal information.

15. Notice at collection

When we ask for your personal information, we present a short notice at or before the point of collection identifying the categories of personal information collected and the purposes for which it will be used. The detail behind those summaries lives in this notice and our main Privacy Policy.

16. Metrics

We are not currently required to publish annual request metrics under California regulations, because we buy, sell, or share the personal information of fewer than ten million California residents per year. If that threshold changes, we will publish the required metrics here.

17. Shine the Light

California Civil Code §1798.83 (the "Shine the Light" law) permits California residents to request information about disclosure of personal information to third parties for direct-marketing purposes. We do not disclose personal information to third parties for their own direct marketing. To make such a request, email hello@hashtaq.com.

18. Changes to this notice

We update this notice when our practices or applicable California law change. The "Effective" and "Last updated" dates at the top reflect the current version.

19. Contact