XpoCapturePrivacy Policy
Last updated September 18, 2026
XpoCapture ("the app") is a trade-show planning and capture tool for attendees, made by Genovate Solutions ("we", "us"). This policy explains what we collect, why, and what you can do about it. It applies to the XpoCapture mobile app and to xpocapture.com.
What we collect
| Data | Why | Where it lives |
|---|---|---|
| Name, email address, password, company name | To create and secure your account and your company workspace. | Auth0 (identity) and our database (profile, workspace). |
| Goals you type, plans you save | To rank exhibitors for you and build your checklist. | Our database. |
| Photos, voice recordings, videos and notes you choose to capture at a booth | To write up each booth visit (contacts, products, pricing, next steps) and compile your report. | Our storage and database; processed by AI providers (see below). |
| Contacts you save from business cards or type in (name, title, company, email, phone) | To keep the people you met with the booth visit and export them to your own tools (vCard). | Our database; card photos are read by Anthropic to prefill the form. |
| Email addresses you share a report with, and the codes and view log for those links | To let a colleague open your web report after confirming that address with a one-time code, and to show you who has viewed it. | Our database; codes are sent through SendGrid and expire in 10 minutes. |
| Basic technical data (app version, device type, crash information) | To keep the app working. | Google Play and our servers. |
We do not collect your location, contacts, or calendar, and we do not show ads or use advertising identifiers.
How captures are processed
When you save a booth visit, the photos, recordings and text you captured are sent to AI providers to be transcribed and structured: Anthropic (reading photos and writing up visits and reports) and OpenAI (transcribing voice notes). They process the content to return a result and do not use it to train their models under our agreements. Business cards you photograph may contain other people's contact details; you are responsible for having a legitimate reason to capture them, which a business-card exchange at a trade show ordinarily provides.
Who can see your data
- You, and administrators of your company workspace, who can see the visits and reports of everyone in the workspace so the company gets one picture of the show.
- People you share a web report with (xpocapture.com/r/…): they see that report — captures, contacts, follow-ups — after confirming their email address with a code. You can revoke a share at any time in the app.
- Service providers that run the app for us: Auth0 (sign-in), Supabase (database and file storage), Netlify (website and web reports), SendGrid (email), Anthropic and OpenAI (AI processing), Expo and Google Play (app delivery). Each only receives what it needs for its job.
- Nobody else. We do not sell your data and we do not share it with exhibitors or show organizers unless you choose to send it to them yourself.
Exhibitor directory data
The exhibitor lists and vendor descriptions in the app come from public show directories and vendors' own public websites. If you are an exhibitor and want a listing corrected or removed, email us.
Retention
Your data is kept while your account is active. Captures and reports are kept so you can return to them after the show. When you delete your account, your profile, workspace ownership, plans, captures, media files and reports are deleted within 30 days, and your Auth0 identity is removed immediately. Backups roll off within 35 days.
Your choices
- Delete your account in the app under Account → Delete account, or by following the steps at xpocapture.com/delete-account.
- Access or export your data, or correct it, by emailing hello@xpocapture.com. We answer within 30 days.
- Permissions for the camera, microphone and photo library are only requested when you use those features and can be revoked in your phone's settings.
Security
Data is encrypted in transit (TLS) and at rest by our providers. Access to your data in our database is enforced per user and per workspace at the database level.
Children
XpoCapture is a business tool and is not directed at anyone under 18.
International transfers
Our providers operate in the United States. If you use the app from elsewhere, your data is transferred to and processed in the United States.
Changes
If this policy changes materially we will note it in the app and update the date above.
Contact
Genovate Solutions · hello@xpocapture.com