About this notice

We built ExpoLead OS to help trade professionals manage their exhibition leads, buyers, suppliers, and opportunities in one place. This notice explains what information we collect when you use ExpoLead OS, how we use it, and what rights you have over your data.

If you have any questions, contact us at hello.expolead@tradesoil.com.

1. Who we are

ExpoLead OS is the data controller for the personal data described in this notice, meaning we decide how and why your personal data is processed. We do not process data on behalf of any third party.

2. What information we collect

• Account signup: Your email address and password. Your password is encrypted before storage and we never store or see your plain-text password. You may optionally provide your name.
• Platform usage: Any business data you enter, including connections, buyers, suppliers, opportunities, exhibition records, notes, sample details, and follow-up records. This is your business data and you own it at all times.
• Website visits: Basic technical information your browser sends automatically, such as your IP address, browser type, and operating system. We use this only for security monitoring and debugging.
• What we do not collect: We do not collect sensitive personal data such as health information, financial account numbers, government ID numbers, or political views.

3. Cookies

ExpoLead OS uses only essential cookies, the minimum required to keep you logged in and your session secure. We do not use advertising cookies, tracking cookies, or third-party analytics cookies. You do not need to accept or reject a cookie banner because we only use cookies that are strictly necessary to operate the service.

4. How we use your information

We use the information we collect only to run ExpoLead OS for you. Specifically:

• To create and maintain your account
• To store and retrieve the business data you enter
• To send you transactional emails such as account confirmation, welcome email, trial expiry reminders, and security alerts
• To monitor for security issues and prevent fraud
• To respond to your support requests
• To comply with legal obligations if required

We do not use your data for advertising. We do not sell your data. We do not share your data with marketing companies.

5. Who we share your data with

We share your data only with the third-party services we use to operate ExpoLead OS:

• Supabase stores your account and business data (hosted on AWS infrastructure)
• Vercel hosts and delivers the ExpoLead OS application
• Resend sends transactional emails on our behalf

Each provider receives only the minimum data needed to do their job. They are contractually required to keep your data confidential and cannot use it for their own purposes. We do not share your data with advertisers, data brokers, or partners.

6. Legal requests

If a court, regulator, or law enforcement agency issues a valid legal order requiring us to disclose your data, we are legally obligated to comply. Where permitted by law, we will notify you before disclosing. We will only disclose what the order specifically requires and nothing more.

7. How we protect your data

We take reasonable steps to keep your data secure:

• All data is encrypted in transit using HTTPS
• Passwords are hashed and never stored in plain text
• Each user's data is strictly isolated, no other user can access yours
• Authentication is handled by Supabase, an industry-standard security platform

No system is 100% secure. If you believe your account has been compromised, contact us immediately at hello.expolead@tradesoil.com.

8. International data transfers

ExpoLead OS is operated from Sri Lanka. Your data is stored on Supabase infrastructure hosted on AWS, which may be located in data centres outside your home country. By using ExpoLead OS, you acknowledge that your data may be processed internationally. We rely on the security and contractual commitments of our service providers to protect it during any such transfers.

9. How long we keep your data

We keep your data for as long as your account is active. If you close your account and request deletion, we will permanently delete your personal data and business records within 30 days. We may retain certain information for longer only if required by law.

10. Children

ExpoLead OS is a business tool intended for professionals aged 18 and above. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has created an account, contact us at hello.expolead@tradesoil.com and we will delete the account.

11. Third-party links

ExpoLead OS may contain links to external websites or services. We are not responsible for the privacy practices of those third parties. We recommend reading their privacy notices before sharing your data with them.

12. Your rights

Depending on where you are located, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correct — ask us to fix inaccurate or incomplete data
• Delete — ask us to delete your personal data
• Export — download your business data using the CSV export feature inside the platform, available on any paid plan. If you are on a free trial, email us and we will provide a copy of your data
• Object — ask us to stop processing your data in certain circumstances
• Withdraw consent — where we rely on consent, you can withdraw it at any time

To exercise any of these rights, email us at hello.expolead@tradesoil.com. We will respond within 7 business days. We may ask you to verify your identity before processing your request.

13. Changes to this notice

We may update this notice as ExpoLead OS grows or if legal requirements change. If we make significant changes, we will notify active users by email. The date at the top of this page always shows when it was last updated.

14. Contact us

For any questions about this notice or how we handle your data, email us at hello.expolead@tradesoil.com.