Privacy Policy

You give us: name, email address, phone number, city and ZIP code, social handles and follower count (creators), business name, address, cuisine and contact details (restaurants), and anything you write in an application.

We record automatically: the referral code you arrived with, clicks on share links, and basic marketing attribution such as UTM parameters and the site that referred you. We use privacy-respecting product analytics and do not sell data.

To review your application, place you in the queue, calculate referral standings, email or text you about your status and launch, match creators with venues, prevent fraud and abuse, and understand which channels bring people to HEXA.

Only service providers that run the product on our behalf — our database and authentication host (Supabase) and our email provider (Resend) — and participating restaurants or creators once you are matched with them. We share what a match requires, not your whole record. We may disclose data if legally required.

By joining the waitlist you agree we may contact you by email, and by phone or text about your application and launch. You can opt out of texts by replying STOP and out of marketing email using the unsubscribe link. Message and data rates may apply.

We keep waitlist records while your application is active and for a reasonable period afterwards. Data is encrypted in transit and access is limited to the people who need it.

You can ask us to access, correct, export or delete your data at any time by emailing privacy@joinhexa.com. Deleting your record removes you from the queue.

HEXA is not for anyone under 18. We may update this policy; material changes will be posted here with a new date. See also our Terms of Service.