This policy explains what personal data ExhibitionBase collects through ExhibitionBase, why, and the choices you have.
What we collect
- Account data — your name, work email, hashed password, job title and workspace membership.
- Onboarding answers — your role, company details, show volume, goals and how you heard about us. We use these to tailor the product and understand our customers.
- Workspace content — exhibitions, companies, contacts, notes, tasks, deals and files you upload. We process this on your behalf as a processor.
- Billing data — handled by Dodo Payments; we store only subscription status and customer references, never card numbers.
- Usage and marketing attribution — privacy-friendly page analytics and, if you accept cookies, the campaign or site that referred you.
How we use it
- To provide, secure and improve the service, and to support you.
- To send service emails (password resets, invitations, billing).
- To send product news and tips only if you opted in — you can opt out at any time.
Service providers
We use trusted providers to run ExhibitionBase: hosting and databases (Vercel, Supabase), payments (Dodo Payments), AI document processing (OpenRouter and the model providers it routes to), B2B contact data providers, page rendering (Browserless) and email delivery. They process data only to provide their service to us.
Cookies
We use an essential cookie to keep you signed in. With your consent we set a cookie that remembers which campaign brought you to our site. You can accept or decline in the cookie banner.
Retention and security
We keep your data while your account is active. Deleting your account removes your login and workspaces you own alone. Sign-in is handled by our authentication provider (Supabase), uploaded files are kept in private storage, and workspaces are isolated from one another.
Your rights
Depending on where you live, you can access, correct, export or delete your personal data and object to certain processing. Contact support@exhibitionbase.com and we'll respond within 30 days.