Privacy policy

HashNest helps event organisers collect the photos and videos guests take at their events, turn them into recap videos, and measure how far an event travelled online. This page explains what personal data we handle, why, and what you can ask us to do with it.

Who we are

HashNest (“we”, “us”) runs hashnest.app and is the data controller for organiser accounts and the sign-up form. For photos and videos guests upload to an event, the event organiser decides how they are used; we process them on the organiser’s behalf. Contact us at hugomz2006@gmail.com.

What we collect

• Guests uploading to an event: the photos and videos you choose, the file name, size and type, the time of upload, the name or @handle you enter (optional), your agreement to the organiser using your uploads, and a random identifier stored on your phone so we can tell uploads from different phones apart. We do not ask for your email or require an account. If an upload fails, we record the error, file type and size, and a general device label (for example “iPhone · Safari”).
• Organisers: your email address and password (handled by our authentication provider), the events you create, and the numbers you add, such as turnout and social post statistics.
• Sign-up form: your name, email, event type, date, guest count and any message you send.
• Recap links and sponsor reports: we count how many times a shared link is opened. We do not record who opened it.
• Website analytics: anonymous page-view statistics through Vercel Web Analytics, which does not use cookies.
• Error reports: technical details when something breaks (browser, page and error), used only to fix bugs.

Why we use it

• To run the service you asked for: store uploads, show them to the organiser, make recap videos and reports (performance of a contract, or the organiser’s legitimate interest in recapping their event).
• To credit guests and respect their permission choices (consent you give at upload).
• To reply to sign-ups and set up test events (your request).
• To keep HashNest secure and working, and to understand how it’s used (our legitimate interest).

We do not sell personal data, and we do not use your uploads to train AI models.

Who we share it with

The event organiser sees everything uploaded to their event. If they share a recap or sponsor report link, the people they send it to can see what it contains. We also use these service providers, who process data for us under contract:

• Supabase (database and accounts) and Cloudflare R2 (file storage)
• Vercel (hosting and anonymous analytics) and Sentry (error reports)
• Creatomate or Shotstack (rendering recap videos)
• Resend (sending emails) and Meta / Google (when organisers import or sync public Instagram or YouTube posts)

Some of these providers process data outside the European Economic Area. Where they do, they rely on safeguards such as the EU Standard Contractual Clauses.

How long we keep it

Uploads and event data are kept while the organiser’s account is active, and deleted when the organiser deletes the event or their account. Sign-up form entries are kept for up to 24 months unless you ask us to delete them sooner. Upload error logs and error reports are kept for up to 90 days.

Your rights

You can ask us to access, correct or delete your personal data, to restrict or object to how we use it, or to get a copy of it. If you uploaded a photo or video and want it removed, email hugomz2006@gmail.com with the event name and roughly when you uploaded, and we will work with the organiser to remove it. You can also complain to your data protection authority; in Ireland that is the Data Protection Commission (dataprotection.ie).

Children

HashNest is not meant for children under 16. Please don’t upload if you’re under 16, and organisers should not use HashNest to collect images of children without the permission of a parent or guardian.

Changes

If we make important changes, we’ll update this page and the date at the top.