Privacy Policy

01Who we are

HackMeridian is a developer hackathon held in Lisbon, Portugal, on 25–26 October 2026. The HackMeridian website (the "Site") is operated by Grow with Guava LLC ("Guava", "we", "us", or "our"), which acts as the data controller responsible for the personal information described in this policy. HackMeridian takes place within the Stellar ecosystem; Stellar Development Foundation, EasyA, and event partners are separate organizations with their own privacy practices.

If you have any questions about this policy or how we handle your information, contact us at hello@growwithguava.com.

02Scope of this policy

This policy explains how we collect, use, disclose, and safeguard personal information when you visit the Site, apply to or register for HackMeridian, contact us, or otherwise interact with us online. It applies to the Site and related web pages that link to it.

It does not apply to third-party websites, platforms, or services that we link to or embed — including the registration platform, translation service, and the services of our event partners — each of which is governed by its own privacy policy. See Third-party services below.

03Information we collect

Information you provide to us

When you apply, register, or communicate with us, you may provide:

• Identity & contact details — name, email address, and (optionally) phone number, country/city, and social or professional profile links.
• Application & participant details — experience level, track of interest, team information, project ideas, dietary or accessibility needs, and travel-support requests where applicable.
• Communications — the content of emails or messages you send us, and your preferences for updates about the event.

Most application and registration data is collected through our registration provider, Bizzabo, on our behalf. Please provide only the information requested and avoid sharing sensitive personal information that is not needed for the event.

Information we collect automatically

When you visit the Site, we and our service providers may automatically collect:

• Device & connection data — IP address, browser type, operating system, and device characteristics.
• Usage data — pages viewed, referring pages, links clicked, and the dates and times of your visits.
• Cookie data — identifiers and preferences stored through cookies and similar technologies, subject to your consent. See Cookies.

Information from third parties

We may receive information about you from our registration provider, event partners and sponsors (for example, if you consented to be introduced to them), and analytics or hosting providers that support the Site.

04How we use your information

We use personal information to:

• Review applications, manage registrations, and run HackMeridian, including team formation, logistics, and travel support.
• Communicate with you about your application, schedule changes, and important event updates.
• Provide and maintain the Site, including translation and other on-page features you enable.
• Understand and improve how the Site and event are used (with your consent for analytics cookies).
• Send you updates, invitations, or marketing about HackMeridian and future events where you have opted in or where otherwise permitted by law — you can opt out at any time.
• Protect the security and integrity of the Site, prevent fraud or abuse, and comply with legal obligations.

05Legal bases for processing (GDPR)

If you are in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

• Consent — for non-essential cookies, optional analytics, and marketing communications. You may withdraw consent at any time.
• Contract — to process your application and let you participate in the event you registered for.
• Legitimate interests — to operate, secure, and improve the Site and event, provided your rights do not override those interests.
• Legal obligation — where we must process data to comply with applicable law.

06Cookies & similar technologies

Cookies are small files stored on your device. We use them to run the Site, remember your preferences, and — only with your consent — to understand usage and support marketing. On your first visit, a consent banner lets you accept all, reject non-essential cookies, or set your preferences by category.

You can change your choices at any time via the Cookies Settings link in the footer of every page. We honor the Global Privacy Control (GPC) signal: if your browser sends it, analytics and marketing cookies stay off by default.

You can also block or delete cookies through your browser settings, though some parts of the Site may not function as intended if you do.

07How we share information

We do not sell your personal information. We share it only as follows:

• Service providers (processors) — vendors who process data on our behalf under contract, such as registration, hosting, translation, email, and analytics providers.
• Event partners & sponsors — only where you have consented (for example, opting in to be contacted by a sponsor) or as clearly disclosed at the point of collection.
• Legal & safety — where required to comply with law, enforce our terms, or protect the rights, property, or safety of participants, the public, or us.
• Business transfers — in connection with a merger, acquisition, or reorganization, subject to this policy.

08Third-party services on the Site

The Site relies on the following third-party services, each with its own privacy policy:

• Vercel — website hosting and content delivery.
• Bizzabo — event application and registration platform (loads when you open the application flow, subject to your functional-cookie choice).
• Transifex — on-page translation/localization (subject to your functional-cookie choice).
• Google Fonts — web font delivery, which involves a request to Google's servers to load fonts.

We encourage you to review these providers' privacy notices to understand how they handle your information.

09International data transfers

We are based in the United States, and our service providers may process data in the United States and other countries. Where we transfer personal information from the EEA, UK, or Switzerland to a country that has not been deemed to provide adequate protection, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum, where applicable). You may request more information about these safeguards using the contact details below.

10Data retention

We keep personal information only for as long as needed for the purposes described in this policy — to run the event, meet legal, accounting, or reporting requirements, and resolve disputes. Application and registration data is generally retained for the duration of the event cycle and a reasonable period afterward, after which it is deleted or anonymized. Marketing preferences are kept until you opt out.

11How we protect your data

We use reasonable technical and organizational measures designed to protect personal information against loss, misuse, and unauthorized access — including HTTPS encryption in transit and access controls with our providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12Your rights (EEA / UK)

If you are in the EEA or UK, you have the right to:

• Access the personal information we hold about you and receive a copy.
• Rectify inaccurate or incomplete information.
• Erase your information ("right to be forgotten") in certain circumstances.
• Restrict or object to certain processing, including direct marketing.
• Data portability — receive your data in a portable format.
• Withdraw consent at any time, without affecting prior processing.

To exercise any of these rights, email hello@growwithguava.com. You also have the right to lodge a complaint with your local data protection authority. In Portugal this is the Comissão Nacional de Proteção de Dados (CNPD); in the UK, the Information Commissioner's Office (ICO).

13Your rights (California — CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you specific rights regarding your personal information.

Categories of personal information we collect

We collect these categories for the business purposes described in How we use your information, and disclose them to service providers as described in How we share information.

Your California rights

• Know / access — request the categories and specific pieces of personal information we have collected about you.
• Delete — request deletion of your personal information, subject to exceptions.
• Correct — request correction of inaccurate personal information.
• Opt out of sale/sharing — we do not sell or share personal information as those terms are defined under the CPRA. We also honor the Global Privacy Control (GPC) signal.
• Limit use of sensitive PI — we do not use sensitive personal information for purposes that require this option.
• Non-discrimination — we will not discriminate against you for exercising your rights.

To exercise these rights, email hello@growwithguava.com. We will verify your request using the information we hold, and you may use an authorized agent where permitted.

14Other U.S. state privacy rights

Residents of other U.S. states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, and Texas) may have similar rights to access, correct, delete, and opt out of targeted advertising or the sale of personal information. We do not sell personal information or use it for cross-context behavioral advertising. To exercise any available rights, contact us using the details below.

15Children's privacy

HackMeridian and the Site are intended for adults and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

16Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice. Your continued use of the Site after an update means you accept the revised policy.

17Contact us

For any privacy question or to exercise your rights, reach us at: