GDPR Compliance
Last updated: 1 May 2026
Hashtag Hero is committed to full compliance with the General Data Protection Regulation (GDPR). This page describes your rights and how we uphold them.
Data Controller
Hashtag Hero Ltd is the data controller for personal data processed through our platform. You can contact our Data Protection Officer at dpo@hashtaghero.io.
Your Rights Under GDPR
Right of Access: You can request a copy of all personal data we hold about you.
Right to Rectification: You can correct inaccurate or incomplete data at any time from your account settings.
Right to Erasure: You can delete your account and all associated data. We permanently erase it within 30 days.
Right to Data Portability: You can export your posts and profile data in JSON format from your account settings.
Right to Object: You can object to processing based on legitimate interests at any time.
Right to Restrict Processing: You can request we restrict processing of your data in certain circumstances.
Lawful Basis for Processing
We process your data under the following lawful bases: Contract (to provide the Service), Consent (for marketing communications and optional analytics), and Legitimate Interests (for security, fraud prevention, and product improvement).
Data Transfers
Some of our service providers are based outside the EEA. Where data is transferred internationally, we ensure appropriate safeguards are in place (Standard Contractual Clauses or equivalent).
Data Retention
We retain personal data only for as long as necessary for the purposes described in our Privacy Policy. Account data is deleted within 30 days of account closure.
Supervisory Authority
If you believe we have not handled your data correctly, you have the right to lodge a complaint with your national data protection authority.
Exercise Your Rights
To exercise any of your GDPR rights, email dpo@hashtaghero.io or use the data management tools in your account settings. We will respond within 30 days.