Privacy Policy

XpoKit helps expo visitors and stall exhibitors exchange contact details. This policy explains what XpoKit (“we”) collects, why, who sees it, and the choices you have. It applies to the XpoKit mobile app and to xpokit.com.

What we collect

• Account details: your email address (or Google account email) used to sign in.
• Your card: name, mobile number, and optionally email, company, designation, city, website and LinkedIn.
• Stall details (exhibitors): company name, description, products, offer, WhatsApp number, website, logo and brochures you upload.
• Stall team: the name and job title of each person on a stall's team are shown on that stall's public page, so visitors can say who they spoke with. Their phone number and email are not shown.
• Visits: which stalls you shared your card with, when, what you said you were interested in, and any message you wrote.
• Exhibitor notes: what an exhibitor records about a conversation with a visitor (rating, notes, follow-up date).
• Technical data: your network address, used briefly to stop abuse.

We do not read your phone’s contact list, location, photos (other than a logo or file you choose to upload) or microphone. The camera is used only to scan QR codes; images are not stored.

How your details are shared

• Only when you choose. A stall receives your card only when you tap “Share my details” for that stall, or when you show your personal QR code and their staff scan it.
• Each stall sees only the visitors who shared with that stall. Stall team members see the same list.
• Your QR code is your business card. Anyone who scans it, or opens the card link you share, sees the details on your card, the same as if you handed them a paper card. Show or share it only with people you want to have your details.
• Stall pages (company, products, offer, brochures) are public to anyone with the stall’s QR code or link.
• We do not sell personal data and do not show advertising.

Service providers

We use Supabase (database, sign-in and file storage), Google (if you choose Google sign-in), and Expo (app builds and updates). They process data on our behalf under their own security commitments.

How long we keep it

• Your account and card: until you delete your account.
• A card you shared with a stall stays with that exhibitor, because you chose to give it to them, until they or you ask for it to be removed.
• Abuse-prevention records of network addresses: about one day.

Your choices and rights

• See and correct your details any time in the app under Profile.
• Delete your account in the app (Profile → Delete my account) or through the delete account page.
• Ask a stall to remove your card, or ask us to do it for you, by writing to [email protected].
• Withdraw consent or raise a concern under India’s Digital Personal Data Protection Act by writing to [email protected].

Children

XpoKit is a business tool and is not intended for anyone under 18.

Security

Data is encrypted in transit. Database rules ensure an exhibitor can read only their own stall’s visitors. No system is perfectly secure; if we learn of a breach affecting you, we will tell you.

Changes

If we change this policy we will update the date above and, for significant changes, tell you in the app.

Contact and grievances

Grievance Officer, XpoKit: [email protected]. We aim to respond within 7 working days.