This Privacy Policy governs the manner in which Expound Software Systems ("Company," "we," "us," or "our") collects, uses, maintains, and discloses information collected from users (each, a "User") of the Visit Gaze application and website (the "Service").
1. Information We Collect
We collect information primarily to provide and improve the Service, manage accounts, and facilitate user communication. The information collected falls into the following categories:
Identification and Account Data: Username, secure password hash, and the date/time of account creation. We do not require or collect real names, phone numbers, or residential addresses unless explicitly provided by the user (e.g., in a support request).
Business Account Information: For Business Users, this includes stall name, uploaded documents, public website links, and other profile details necessary to operate a virtual expo booth.
Usage and Interaction Data: Information about your activity within the Service, including virtual expo visits, stall interactions, chat messages, and data related to the performance of CRM features.
Technical and Device Data: Internet Protocol (IP) address, browser type, device type, operating system, access times, and referring website addresses.
We explicitly do NOT collect or store sensitive personal data, nor do we directly process payment card details (which are handled by third-party payment processors).
2. Purposes of Processing and Legal Basis
We use the collected information for the following specific purposes:
Service Delivery: To create, maintain, and manage your account and to operate the core functionalities of the Service (virtual expos, chat, CRM). (Legal Basis: Contractual Necessity).
Communication: To facilitate communication between visitors and businesses via the chat function. (Legal Basis: Contractual Necessity).
Improvement: To monitor and analyze trends, usage, and activities in connection with the Service to improve its performance and functionality. (Legal Basis: Legitimate Interests).
Security and Compliance: To ensure the security of the Service and comply with applicable legal obligations. (Legal Basis: Legal Obligation & Legitimate Interests).
3. Disclosure of Information
We do not sell, trade, or rent your personal identification information to others. We may share limited information under the following circumstances:
With Other Users: Your username and chat messages are visible to other users within the Service as necessary to facilitate interaction.
Third-Party Service Providers: We employ third-party companies and individuals (e.g., hosting, database management, security analysis) to facilitate our Service. These parties have access to your information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Legal Requirements: We will disclose information when required to do so by law, such as to comply with a subpoena or similar legal process, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
4. Data Security
We adopt appropriate data collection, storage, and processing practices and security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal data stored on our Service.
User passwords are securely hashed and salted.
All data transmission between your device and our servers is secured using SSL/TLS encryption.
We perform regular security reviews and system backups.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide you the Service. If you choose to terminate your account, we will generally delete your personal data within 30 days, unless a longer retention period is required or permitted by law (such as for tax, accounting, or legal purposes).
6. Your Data Protection Rights
Depending on your location, you may have the following rights concerning your data:
Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request correction of any incomplete or inaccurate data we hold about you.
Right to Erasure ("Right to be Forgotten"): You can request the deletion or removal of your personal data, subject to certain legal exceptions.
Account Deletion: You can terminate your account at any time via the account settings or by contacting us directly.
7. Cookies and Tracking Technologies
We use essential cookies solely for the purpose of managing user sessions, facilitating secure login, and maintaining user preferences. These cookies are strictly necessary for the operation of the Service. We do not use non-essential or third-party tracking cookies for advertising or analytical purposes that require explicit consent.
8. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage Users to frequently check this page for any changes. You acknowledge and agree that it is your responsibility to review this Privacy Policy periodically and become aware of modifications.
9. Contacting Us
If you have questions about this Privacy Policy, the practices of this Service, or your dealings with us, please contact us at: