Privacy Policy
How we handle your data.
This is a draft policy for our early-access period and will be updated. It is not intended as final legal advice. Please contact us at expospecai@gmail.com if you have questions.
This draft privacy policy explains what data ExpoSpec collects, how we use it, and the controls available to workspace owners and users during our early-access period.
Data controller
EVENTON INDIA ENTERPRISES / ExpoSpec is the data controller for information collected through the ExpoSpec website and authenticated design studio.
Information we collect
We collect the information you provide directly: name, email, company name, phone number, messages submitted through enquiry or demo forms, and workspace profile details. We also collect authentication data, workspace membership and role information, usage events, and design inputs such as briefs, component dimensions, materials and project metadata.
How we use information
We use your data to provide, secure and improve ExpoSpec; respond to enquiries; authenticate users; enforce workspace access controls; generate design outputs from your briefs and component rules; and communicate service updates. We do not sell personal data to third parties.
Workspace data isolation
All project, component library, material and uploaded file data is scoped to your company workspace. Access is enforced through authentication, role-based permissions and row-level security policies. Workspace owners control who is invited and what role each member has.
AI processing
Authenticated AI workflows process the briefs, components and constraints you submit to structure inputs and produce design outputs. Do not upload information you are not authorised to use or share. AI outputs remain scoped to your workspace unless you choose to export or present them.
Cookies and analytics
We use essential cookies for authentication and session management. We may use analytics tools to understand how the public website and product are used, provided they do not identify individual workspace members without consent.
Data retention
We retain your data for as long as your account and workspace are active, or as needed to provide the service, comply with legal obligations, resolve disputes and enforce agreements. When a workspace is closed, associated project data may be deleted in accordance with our internal retention schedule.
Your rights and data requests
You may request access to, correction of, or deletion of your personal data by emailing us at expospecai@gmail.com. Workspace owners may also request export or deletion of workspace data. We will respond within a reasonable timeframe and in accordance with applicable Indian law.
Third-party services
We use trusted third-party providers for hosting, authentication, email delivery and payment processing. These providers process data only on our behalf and under appropriate contractual protections. We do not share workspace design data with AI providers in a way that exposes it to other customers.
Security
We implement technical and organisational measures to protect your data, including encryption in transit, access controls, audit logging and row-level isolation. No system is completely secure; please keep your credentials safe and report suspected breaches to expospecai@gmail.com.
Children's privacy
ExpoSpec is not intended for users under the age of 18. We do not knowingly collect personal data from children.
Changes to this policy
This policy may be updated as the product matures. We will notify users of material changes by email or in-product notice. Continued use after the effective date constitutes acceptance of the updated policy.
Contact
For privacy questions, data access requests or concerns, contact us at expospecai@gmail.com.