Privacy Policy

1. Who we are

ExpoLinkUp is an exhibition engagement platform operated by GoannaAI Pty Ltd (ABN 40 696 831 660), based in Australia. In this policy, "we", "us", and "our" refer to GoannaAI Pty Ltd.

2. What information we collect

We collect the following personal information when you use the ExpoLinkUp website, admin portal, or mobile application:

• Account information — email address, first name, last name, and optionally your job title, company, and phone number.
• Profile information — display name, profile photo, and sharing preferences you configure.
• Exhibition activity — QR code scans, lead captures, exhibitor interactions, and competition entries.
• Device and usage data — IP address, browser or device user-agent string, and timestamps of your interactions.
• Feedback — messages and ratings you submit through the in-app feedback feature.

The mobile app also requests the following device permissions when you choose to use the related features:

• Camera — used to scan exhibitor and patron QR codes. Camera frames are processed on-device only and are not stored or transmitted.
• Photos / image library — used when you choose a profile photo from your device. Only the photo you select is uploaded.
• Biometrics (Face ID, Touch ID, fingerprint) — used to unlock the app on subsequent sign-ins. Biometric data never leaves your device; ExpoLinkUp only receives a yes/no result from the operating system.

3. How we use your information

• To authenticate you via magic link or one-time code sign-in.
• To provide exhibition services including lead capture, QR code scanning, and exhibitor discovery.
• To enable exhibitors and patrons to connect and share contact details.
• To run and manage competitions and prize draws.
• To send transactional emails (sign-in links, codes).
• To improve the platform based on aggregated usage and feedback.

4. How we share your information

We do not sell your personal information. We share data only in these limited circumstances:

• With exhibitors and patrons — when you scan a QR code or capture a lead, the information you have chosen to share is exchanged between the parties involved.
• With exhibition administrators — administrators of exhibitions you attend can see your activity within their exhibition.
• Service providers — we use Microsoft 365 for transactional email delivery. These providers process data on our behalf under contractual obligations.
• Legal requirements — we may disclose information if required by law or to protect our legal rights.

5. Data storage and security

Your data is stored on servers located in Australia. We use industry-standard security measures including HTTPS encryption, hashed authentication tokens, and secure server infrastructure. Authentication tokens on the mobile app are stored using device-level secure storage (Keychain on iOS, Keystore on Android).

6. Data retention and deletion

We retain your account and profile data for as long as your account is active. Exhibition-specific data (leads, scans, competition entries) is retained for the duration of the exhibition and a reasonable period afterwards for reporting purposes.

You can delete your account at any time using either of the following options:

• In the mobile app — open the side menu, tap Settings, scroll to the Account section and tap Delete my account.
• On the web — visit expolinkup.com.au/account/delete and follow the email confirmation steps. This is for users who no longer have the app installed.

When you delete your account, your profile, contact details and avatar are removed from our systems. Leads that exhibitors have already captured remain with those exhibitors, but the personal information on those leads is replaced with "[deleted]" so you can no longer be identified. Pending competition entries are removed; competition results that have already been drawn are kept as a historical record.

7. Your rights

Under the Australian Privacy Act 1988 and applicable privacy laws, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Withdraw consent for optional data processing.

To exercise these rights, contact us at hello@expolinkup.com.au.

8. Cookies and tracking

The ExpoLinkUp website uses session cookies for authentication purposes only. We do not use advertising cookies or third-party tracking. The mobile app does not use cookies but stores an authentication token locally on your device.

9. Children's privacy

ExpoLinkUp is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting a notice on the website. Your continued use of ExpoLinkUp after changes are posted constitutes acceptance of the updated policy.

11. Contact us

If you have questions about this privacy policy or how we handle your data, contact us at: hello@expolinkup.com.au