Hospitable Rewards Privacy Notice

Version 1.0 · Effective October 28, 2026

This notice explains how we handle personal information when you take part in Hospitable Rewards (the "Program"). It applies only to the Program. Our main Privacy Policy covers everything else.

1. Who is responsible

Hospitable R&D BV, a private company with limited liability established under Dutch law, company number 867550636, or any of its successors or assignees, ("Hospitable", "we") is the controller of the personal information described here.

Hospitable R&D BV, a private company with limited liability established under Dutch law, company number 867550636, or any of its successors or assignees, ("Hospitable", "we") is the controller of the personal information described here.

2. What we collect and where it comes from

2. What we collect and where it comes from

Information

Where it comes from

Name, email, account and user ID, role (primary or secondary user)

You and your Hospitable account

Record of your acceptance: terms version, date and time, language, IP address and device

You, when you join

Community activity: posts, answers, likes given and received

Our Community platform

Event registration and minutes attended

Our webinar and event platforms (for example Zoom, Contrast)

Feedback and roadmap activity; participation in Point-eligible surveys

Our feedback and survey tools

Product usage: which Hospitable features are enabled on your account, for how long, and which milestones you reached

Your Hospitable account and our systems

Testimonials, competition entries, and tools or integrations you submit to the MCP Library

You

Whether you submitted a review, and a link to it

G2, through our review campaign

Your Instagram handle and a screenshot of any Story you submit for Points

You and Instagram

Points balance, earning and redemption history, billing credits applied

Our Rewards and billing systems

Shipping name, address and phone number for merchandise

You

Messages you send us about the Program

You

Signals used to detect fraud or abuse (for example duplicate accounts or automated activity)

Our systems and the platforms above

We match activity on other platforms to your account using the email address on your Hospitable account, or the Instagram handle you give us. We don't collect sensitive information (such as health or financial account details) for the Program. Joining is voluntary. If you don't give us the information above, we can't award or redeem Points.

We match activity on other platforms to your account using the email address on your Hospitable account, or the Instagram handle you give us. We don't collect sensitive information (such as health or financial account details) for the Program. Joining is voluntary. If you don't give us the information above, we can't award or redeem Points.

3. Why we use it and our legal basis

Purpose

Legal basis (EU/UK)

Running the Program: awarding, tracking and redeeming Points (including checking product milestones and the quality of Community contributions), applying credit, shipping merchandise, sending Program emails

Contract: providing the Program you signed up for

Matching your activity on other platforms to your account

Legitimate interests: running the Program accurately without asking you to report every action

Checking that social posts carry the required ad disclosure

Contract, and our legal obligations under advertising law

Preventing fraud and abuse, and handling disputes

Legitimate interests: protecting the Program and other participants

Reusing content you licensed to us (reviews, Stories, testimonials, case studies, MCP Library submissions)

Contract: the licence in the Rewards Terms

Keeping tax, accounting and consent records

Legal obligation

Understanding how the Program performs (aggregated reporting)

Legitimate interests

We don't use Program data for advertising profiles, and we don't sell it. Points are awarded automatically, including automated or AI checks of whether a Community contribution meets our quality standards; you can ask for a person to review the result.

Any decision to reverse Points or remove someone for suspected abuse is reviewed by a person, and you can ask for it to be looked at again.

You can object to processing based on legitimate interests at any time (see section 7). Because matching is how the Program works, objecting to it means leaving the Program.

We don't use Program data for advertising profiles, and we don't sell it. Points are awarded automatically, including automated or AI checks of whether a Community contribution meets our quality standards; you can ask for a person to review the result.

Any decision to reverse Points or remove someone for suspected abuse is reviewed by a person, and you can ask for it to be looked at again.

You can object to processing based on legitimate interests at any time (see section 7). Because matching is how the Program works, objecting to it means leaving the Program.

4. Who we share it with

Recipient

Role

What they get

Hosting, Rewards and billing systems

Processors: act only on our instructions, under a data processing agreement

Everything needed to run the Program

Community, event, feedback and survey platforms

Processors

Your email and activity on that platform

Merchandise fulfiller

Processor

Shipping name, address, phone and order

Email delivery provider

Processor

Email address and Program messages

G2

Independent controller: uses your data under its own privacy policy

Your review and account with G2

Instagram (Meta)

Independent controller

Your Stories and account with Instagram

Authorities, advisers, or a buyer of our business

As the law requires or allows

Only what is needed

The current list of our processors, with their locations, is on our Trust Center. G2 and Instagram decide how they use your data; please read their privacy policies.

The current list of our processors, with their locations, is on our Trust Center. G2 and Instagram decide how they use your data; please read their privacy policies.

5. How long we keep it

Information

Kept for

Points balance and history, redemptions, acceptance records

While your account is active, plus 12 months after cancellation, plus 12 months to handle claims

Story screenshots and disclosure checks

24 months

Review campaign records

3 years

Shipping details

90 days after delivery

Tax and accounting records

7 years (or otherwise as long as tax law requires)

Data received from platforms for matching

Deleted once Points are awarded

After that, we delete the information or make it anonymous.

After that, we delete the information or make it anonymous.

6. International transfers

We and our processors store and access Program data in the EU, and the United States. When data leaves the EEA or the UK for a country without an adequacy decision, we use the European Commission's Standard Contractual Clauses (with the UK Addendum for UK data), or rely on the EU-US Data Privacy Framework where the recipient is certified. You can ask us for a copy of the safeguards.

We and our processors store and access Program data in the EU, and the United States. When data leaves the EEA or the UK for a country without an adequacy decision, we use the European Commission's Standard Contractual Clauses (with the UK Addendum for UK data), or rely on the EU-US Data Privacy Framework where the recipient is certified. You can ask us for a copy of the safeguards.

7. Your rights

Depending on where you live, you can ask us to:

  • give you a copy of your information, including in a portable format;

  • correct it (for example, Points that went to the wrong account);

  • delete it (this ends your participation, and any balance is lost, so redeem first);

  • restrict or object to our use of it;

  • withdraw any consent you gave, without affecting earlier use.

Email [email protected]. We may need to verify your identity. We reply within one month (EU, UK), 45 days (California) or 30 days (Canada, Australia), and tell you if we need longer where the law allows. We won't treat you differently for using your rights.

You can also complain to a data protection authority, for example:

  • Netherlands: Autoriteit Persoonsgegevens, www.autoriteitpersoonsgegevens.nl 

  • your own EU country's authority, such as the CNIL in France (www.cnil.fr)

  • UK: Information Commissioner's Office, www.ico.org.uk

  • Canada: Office of the Privacy Commissioner, www.priv.gc.ca;

  • Australia: Office of the Australian Information Commissioner, www.oaic.gov.au (after first contacting us)

Depending on where you live, you can ask us to:

  • give you a copy of your information, including in a portable format;

  • correct it (for example, Points that went to the wrong account);

  • delete it (this ends your participation, and any balance is lost, so redeem first);

  • restrict or object to our use of it;

  • withdraw any consent you gave, without affecting earlier use.

Email [email protected]. We may need to verify your identity. We reply within one month (EU, UK), 45 days (California) or 30 days (Canada, Australia), and tell you if we need longer where the law allows. We won't treat you differently for using your rights.

You can also complain to a data protection authority, for example:

  • Netherlands: Autoriteit Persoonsgegevens, www.autoriteitpersoonsgegevens.nl 

  • your own EU country's authority, such as the CNIL in France (www.cnil.fr)

  • UK: Information Commissioner's Office, www.ico.org.uk

  • Canada: Office of the Privacy Commissioner, www.priv.gc.ca;

  • Australia: Office of the Australian Information Commissioner, www.oaic.gov.au (after first contacting us)

8. California residents

Notice at collection. In the last 12 months, for the Program we collected these categories of personal information: identifiers (name, email, account ID, IP address, social handle); commercial information (Points, redemptions, credits); internet or other electronic network activity (Community, event and platform activity, and which Hospitable features you use); and, for merchandise, postal address and phone number. We use them for the purposes in section 3 and keep them for the periods in section 5. We don't sell or share Program data for cross-context behavioral advertising, and we don't collect sensitive personal information for the Program.

You have the right to know, access, delete and correct your information, to opt out of sale or sharing (which we don't do), and not to be discriminated against for using these rights. You can use an authorized agent. To make a request, email [email protected].

Notice of Financial Incentive. The Program is a financial incentive under California law, because it gives you Points, credit and merchandise in connection with collecting and using the information above.

  • What you get: Points for the actions listed on the Rewards page, redeemable for billing credit (up to US$100 per redemption, once a month) or merchandise, as described in the Rewards Terms.

  • What information is involved: the categories listed above.

  • How to join: by opting in on the Rewards page after reading this notice and the Rewards Terms.

  • How to leave: at any time from the Rewards page or by emailing us. Leaving ends your participation, and unredeemed Points are lost.

  • Value of Your Data: We estimate that a participant’s personal information is worth approximately the value of the Points, billing credits, and merchandise they receive through the Program, depending on their activity. Billing credits are capped at US$100 per month, and participants may hold no more than 30,000 Points (worth US$300 in credits) at a time. This estimate is based on the cost of providing rewards, a method permitted under California regulations, as the Program’s broader benefit to Hospitable, customer engagement, cannot reasonably be attributed to individual participants.

Notice at collection. In the last 12 months, for the Program we collected these categories of personal information: identifiers (name, email, account ID, IP address, social handle); commercial information (Points, redemptions, credits); internet or other electronic network activity (Community, event and platform activity, and which Hospitable features you use); and, for merchandise, postal address and phone number. We use them for the purposes in section 3 and keep them for the periods in section 5. We don't sell or share Program data for cross-context behavioral advertising, and we don't collect sensitive personal information for the Program.

You have the right to know, access, delete and correct your information, to opt out of sale or sharing (which we don't do), and not to be discriminated against for using these rights. You can use an authorized agent. To make a request, email [email protected].

Notice of Financial Incentive. The Program is a financial incentive under California law, because it gives you Points, credit and merchandise in connection with collecting and using the information above.

  • What you get: Points for the actions listed on the Rewards page, redeemable for billing credit (up to US$100 per redemption, once a month) or merchandise, as described in the Rewards Terms.

  • What information is involved: the categories listed above.

  • How to join: by opting in on the Rewards page after reading this notice and the Rewards Terms.

  • How to leave: at any time from the Rewards page or by emailing us. Leaving ends your participation, and unredeemed Points are lost.

  • Value of Your Data: We estimate that a participant’s personal information is worth approximately the value of the Points, billing credits, and merchandise they receive through the Program, depending on their activity. Billing credits are capped at US$100 per month, and participants may hold no more than 30,000 Points (worth US$300 in credits) at a time. This estimate is based on the cost of providing rewards, a method permitted under California regulations, as the Program’s broader benefit to Hospitable, customer engagement, cannot reasonably be attributed to individual participants.

9. Australia

Australia. We collect personal information about you only for the Program and mostly from you or from the platforms listed in section 2. We may disclose it to recipients in the EU, and the United States. You can ask to access or correct it, and you can complain to us at [email protected]; we'll respond within 30 days. If you're not satisfied, you can contact the OAIC. You can't take part in the Program anonymously, because Points have to be tied to your account.

Australia. We collect personal information about you only for the Program and mostly from you or from the platforms listed in section 2. We may disclose it to recipients in the EU, and the United States. You can ask to access or correct it, and you can complain to us at [email protected]; we'll respond within 30 days. If you're not satisfied, you can contact the OAIC. You can't take part in the Program anonymously, because Points have to be tied to your account.

10. Age and changes

The Program is only for people aged 18 or over. If we change this notice in a way that matters, we'll email participants before the change takes effect and post the new version here with its effective date.

The Program is only for people aged 18 or over. If we change this notice in a way that matters, we'll email participants before the change takes effect and post the new version here with its effective date.