Privacy Notice

1. Data controller

Data controller: Erkan Erden (individual). Address: [address]. Contact: info@xhibits.app

2. Data we process

Demo request form: full name, company, email, phone (optional), team size, upcoming fair and message (optional), consent timestamp.

Card sharing: the name, title, company, phone, email and photo on your card, and with whom and how (AirDrop, Bluetooth, QR, form) it was shared.

Sign in with Google: the name, email and profile photo on your Google account.

Technical data: IP address and browser information, for security and abuse prevention.

3. Purposes and legal bases

Responding to your demo request (explicit consent).

Providing the digital business card service (performance of a contract).

Sending product news, only if you separately opt in (explicit consent).

Keeping the service secure and preventing abuse (legitimate interest).

4. Transfers

Data is stored with the infrastructure providers used to run the service: Supabase (database and storage), [hosting provider] (website), Anthropic (parsing business card text, only when scanning is used). Their servers may be located outside Türkiye. [Provider regions and transfer basis to be confirmed with legal counsel.]

5. Retention

Demo requests are kept for [24 months]; card data is kept until you delete your account.

6. Your rights

You can ask whether your data is processed, request access, correction or deletion, learn which third parties it was shared with, object to processing and claim damages.

Send requests to info@xhibits.app. We respond within 30 days.