Privacy policy

What personal data XpoDay handles, why, and the choices you have.

Placeholder, for the owner. Draft adapted from the old site for this smaller product. It has had no legal review and is not in force.

1. Who we are

XpoDay is built, hosted and supported by Softwaller Technologies Private Limited (CIN U62099TN2024PTC172175), 3-15/8 Singandi Lakshmana Mudhali Street, Tharamangalam, Salem 636502, Tamil Nadu, India.

For organiser accounts and people who contact us, Softwaller decides how the data is used. For people who register for an event, the event's organiser decides, and we process the data on the organiser's behalf.

2. What we collect

Organisers and their staff: your name and email, and a hash of your password, never the password itself.
Sign-in records: a short description of your browser, and when each session began and was last used, so you can see and end your sessions. No IP address is kept with them.
People who register for an event: what the organiser's form asks for, which link brought you there, and whether you asked for your badge on WhatsApp.
Sending badges: the email address or phone number each badge was sent to, and whether it arrived at the sending service.
Attendance: each badge scan, with your name and company, the type of scan, the gate or booth, the device, the name of the person scanning if given, and the time.
Short links: for each click, the link and the time.
People who contact us: your name, email, phone, company and message. Each enquiry is also emailed to our platform admin.
Organisers who use their own WhatsApp service: the keys for that account, stored encrypted.

The service uses your address to limit abuse and does not keep it in its database. [Owner to confirm: how long server logs are kept]

3. Why we use it

To run accounts and the features organisers use.
To keep XpoDay secure and stop abuse.
To send the emails the service needs, such as password resets, and your badge.
To send your badge on WhatsApp, only if you tick the box asking for that on the form. It starts unticked.
To answer people who contact us.

We do not sell personal data.

4. Cookies and browser storage

One cookie, xpoday.auth, keeps an organiser or staff member signed in for up to 14 days. People who register for an event get no cookie. The browser also keeps your light or dark theme, your place in lists, and, on scanning devices, scans waiting to be sent. This site uses no analytics or advertising cookies.

5. Who helps us

Zoho: sends our email.
Meta: delivers WhatsApp messages sent from Softwaller's number.
SmartPing and AiSensy: deliver WhatsApp messages only for an organiser who chooses to use their own account there.

[Owner to confirm: the hosting provider and its country]

6. How long we keep it

[Owner to confirm: how long accounts, registrations, scans and enquiries are kept]

7. Your choices

You may ask to see, correct or delete your data. If you registered for an event, ask its organiser first, because the organiser decides about that data. Organisers can change their own details in their account.

8. Contact and complaints

Write to info@softwaller.com. Grievance officer: [Owner to confirm: name and email]