Legal
Privacy Policy
Effective Date: September 1, 2025 · Last Updated: September 1, 2025
At Hatch Social ("Hatch", "we", "us", or "our"), we value your privacy and are committed to protecting your personal data. This Privacy Policy describes how we collect, use, store, share, and protect your information when you access or use the Hatch platform, including our website, mobile applications, and related services (collectively, the "Service").
By using Hatch, you agree to the terms of this Privacy Policy and our Terms of Service. If you do not agree, you should not use our platform.
Not now. Not ever.
Section 01
What Data We Collect
1.1 Account & Identity Data
- Name, email address, password
- Profile photo, bio, role selection (e.g., creator, explorer)
- Stripe Connect verification data (e.g., government ID, tax info)
1.2 Usage Data
- IP address, browser type, device information
- Login timestamps, content interactions, click behavior
- Nest participation, subscription history, referral activity
1.3 Payment Data
- Payment method (via Stripe, Apple Pay, or Google Pay)
- Transaction history — non-sensitive; no full card data stored by us
1.4 Content Data
- Posts, livestreams, comments, and other user-generated content
- Nest names, descriptions, community tags, and media uploads
1.5 Cookies & Tracking Technologies
We use cookies and local storage for session management, analytics (via GDPR/CCPA-compliant providers), security and fraud prevention, and user preferences. You may manage or disable cookies through your browser settings.
1.6 Push Notifications
If you enable push notifications on the Hatch mobile app, we collect a device token to deliver notifications. You may disable push notifications at any time through your device settings. We do not use push notification tokens for advertising purposes.
Section 02
How We Use Your Data
We process your data for the following lawful purposes:
- To create and manage your account
- To provide platform features and match users to interests
- To process payments and distribute creator payouts
- To deliver support, notifications, and policy updates
- To detect fraud, abuse, or violations of our Terms
- To improve user experience and develop new features
- To comply with legal, financial, and tax obligations
Section 03
Legal Bases for Processing (EU/UK Users)
Under the General Data Protection Regulation (GDPR), we rely on these lawful bases:
| Purpose | Legal Basis |
|---|---|
| Account creation | Contractual necessity |
| Payment processing | Contractual necessity |
| Platform personalisation | Legitimate interests |
| Marketing communications | Consent (where required) |
| Law enforcement compliance | Legal obligation |
| User safety, abuse prevention | Legitimate interests / Legal duty |
Section 04
How We Share Your Data
- Stripe and payment processors — for payments and payouts
- Cloud service providers (e.g., AWS, Cloudflare) — for platform infrastructure
- Analytics providers — only anonymized data (e.g., Plausible)
- Government authorities — when legally required
- Successors — in case of acquisition or platform transfer
Section 05
How Long We Retain Your Data
We retain your data as long as necessary for:
- Account operation and security
- Legal or regulatory compliance
- Tax and accounting documentation
- Dispute resolution or moderation reviews
You may request deletion of your data at any time — see Section 7.
Section 06
Children's Privacy
Hatch is not intended for children under 16. We do not knowingly collect data from children. If we learn that a child has registered, we will delete the account and all related data immediately.
If you believe a child has created an account on Hatch, contact us at [email protected] and we will act immediately.
Section 07
Your Rights
Depending on your location, you have the following rights:
| Right | Availability |
|---|---|
| Access your data | All regions |
| Correct inaccurate data | All regions |
| Delete your account | All regions |
| Withdraw consent | EU, UK, California |
| Port your data | EU, UK |
| Object to processing | EU, UK |
| Opt-out of sale/sharing | California (CCPA/CPRA) |
Section 08
Data Transfers & International Storage
Your data may be stored and processed in the U.S. or other countries. If you're located outside the U.S., we ensure lawful transfer via:
- Standard Contractual Clauses (SCCs)
- Data processing agreements with third-party vendors
- Strong technical safeguards (e.g., encryption, access control)
Section 09
Security Measures
We use industry-standard measures to protect your data:
- TLS encryption in transit
- Secure password hashing
- Access controls and audit logs
- Anomaly detection and fraud prevention tools
No system is 100% secure. You are responsible for using strong passwords and keeping your account access confidential.
Section 10
Changes to This Policy
We may update this Privacy Policy to reflect platform changes or legal requirements. You will be notified via email or in-app message if material changes occur. The latest version is always available at hatch.social/legal/privacy.
Section 11
Contact Us
Privacy inquiries & requests: [email protected]
Regulatory / GDPR liaison: [email protected]
Postal: Hatch Social, Attn: Privacy Officer, [PO Box Address — To Be Added Before Launch], Colorado, United States