Clear information about your data.

1. Scope and who is responsible

This Privacy Policy applies to the ExpoSnap website and application (together, the “Service”). ExpoSnap (“we”, “us”, or “our”) is responsible for personal data processed to operate the Service.

If you use ExpoSnap for an employer or another organization, that organization may separately control the contact data you add. Its privacy notice and instructions may also apply.

2. Data we collect

Account and profile information

Your name, email address, authentication identifiers, profile details, and sign-in information. You may sign in with email and password or through an available third-party sign-in provider.

Contact and card information

Business-card images, extracted names, companies, job titles, email addresses, phone numbers, websites, addresses, and any edits, tags, dates, or statuses you add.

Guest scanner trial

If you use the scanner trial before signing in, the card image is sent for AI extraction but is not written to your ExpoSnap account or database. Extracted contact fields are kept in your browser for up to seven days so they can survive the sign-in step. We also use a signed trial-session cookie and a one-way representation of the network address to enforce trial limits and prevent abuse.

Notes, audio, and follow-up content

Typed notes, recorded conversation audio, transcripts, summaries, reminders, follow-up drafts, delivery details, and related contact history.

Integrations

Connection status and authorization credentials needed to connect an optional CRM, plus the contact data you choose to sync.

Technical and support information

Device and browser information, security and error logs, basic preferences stored on your device, and information you send when asking for support.

Profile links and QR codes

When you share your ExpoSnap profile link or QR code, the link contains the profile fields shown on your shared profile, such as your name, professional details, and email address. Anyone who receives the link or scans the QR code can view and save those details. ExpoSnap does not provide a searchable public profile directory, and private settings, reminder preferences, and workspace contacts are not included in the shared link.

Please do not upload highly sensitive personal information that is not needed for ordinary professional contact management.

3. How we use data

• create and secure your account;
• scan cards and turn their contents into editable contact records;
• transcribe and summarize notes, prepare follow-up drafts, and manage reminders;
• export contacts or sync selected records to a CRM at your direction;
• maintain, troubleshoot, protect, and improve the Service;
• respond to support and privacy requests; and
• comply with law, enforce our terms, and prevent misuse.

We do not sell or rent personal data or scanned contact information for advertising.

4. AI processing

ExpoSnap uses third-party AI processing services to provide features such as business-card extraction, audio transcription and summarization, and follow-up drafting. When you use one of these features, the content needed for that request—such as a card image, audio recording, contact fields, or your instructions—is sent to an AI processing provider.

AI output can be incomplete or inaccurate. Review extracted contact fields, summaries, and drafts before saving, exporting, or sending them. ExpoSnap does not use your content to train an ExpoSnap-owned general-purpose AI model. Processing by third-party AI services is also governed by their applicable terms and privacy commitments.

5. Service providers, sharing, and integrations

We disclose data only as needed to operate the Service, follow your instructions, protect users, or comply with law. Providers may process data on our behalf for the following purposes:

• Cloud infrastructure providers: authentication, hosting, database, file storage, security, and related infrastructure;
• AI processing providers: extraction, transcription, summarization, and drafting when you request those features; and
• CRM providers selected by you: contact information you choose to sync after connecting your account.

We may also disclose information to professional advisers, authorities, or another organization involved in a corporate transaction where legally permitted and subject to appropriate safeguards.

You are responsible for having an appropriate basis to store and use information about people whose cards, conversations, or contact details you add to ExpoSnap.

6. Legal bases

Where privacy law requires a legal basis, we rely on the following as appropriate:

• Contract: to provide the Service you request;
• Legitimate interests: to secure, maintain, and improve the Service and respond to users, where those interests are not overridden by individual rights;
• Consent: where you choose an optional feature or applicable law requires it; and
• Legal obligation: to meet legal, regulatory, tax, security, or law-enforcement requirements.

7. Retention and deletion

We retain account and workspace data while your account is active and for as long as reasonably needed to provide the Service, meet legal obligations, resolve disputes, prevent abuse, and enforce agreements. Retention may vary by data type and purpose.

Guest-trial contact fields are stored locally in your browser for up to seven days unless you clear them sooner by saving the contacts or clearing your browser storage. Trial-session and rate-limit records may be retained as reasonably needed to operate the trial and prevent misuse.

You can delete individual contacts in the app and disconnect a CRM to remove the stored connection. To request deletion of your account and associated data, email hello@exposnap.app from the address linked to your account.

Deleted information may remain for a limited period in backups, security records, or where retention is legally required. When we no longer need personal data, we delete or de-identify it.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal data; object to or restrict certain processing; withdraw consent; or lodge a complaint with a privacy regulator. You will not receive discriminatory treatment for exercising a legally protected privacy right.

Send a request to hello@exposnap.app. We will respond in accordance with applicable law and may ask for information needed to verify the request. Some rights and exceptions vary by jurisdiction.

9. Security and international transfers

We use administrative, technical, and organizational safeguards designed to protect data, including encrypted network connections and access controls. No online service can guarantee absolute security, so you should also protect your credentials and sign out of shared devices.

ExpoSnap and its providers may process data in countries other than your own. Where required, we use recognized transfer mechanisms or other safeguards intended to protect personal data across borders.

The Service is intended for professional use and is not directed to children. Do not use it if you are not old enough to consent to online services under the law where you live.

10. Changes and contact

We may update this policy as the Service or legal requirements change. We will revise the effective date and provide additional notice when a material change requires it.

For questions, requests, or concerns, contact hello@exposnap.app.