Privacy Policy

Last updated 26 October 2026

ExpoVault AI is operated by Taryto Innovations Private Limited ("we", "us"). This policy explains what data the ExpoVault AI mobile app, exhibitor web portal and website collect, why, who we share it with, and how you can delete it.

What we collect

Data you give us

Account details: name, email address, password (stored only as a one-way hash), and for exhibitors a mobile number.
Profile and preferences: city, country and interests for visitors; company name, industry, address, logo, contact details, products, brochures and price lists for exhibitors.
Recordings and notes: audio you record of booth conversations, and the transcripts, notes and summaries made from them.
Business cards and contacts: photos of business cards you scan and the contact details read from them, including details of other people.
Photos: pictures you take or upload in the app.
Event activity: the expos you join, stalls you visit, leads you capture and follow-ups you create.

Data collected automatically

Technical data: IP address, device and browser type and request logs, used to run and secure the service.
Notification token: if you allow push notifications, a token that lets us send them to your device.

We do not use advertising or analytics trackers, we do not track you across other companies' apps or websites, and we do not sell your data.

How we use it

To provide the service: your account, transcription, AI summaries, card scanning, lead management and follow-ups.
To process plan payments made on our website.
To keep the service secure, prevent abuse and fix problems.
To contact you about your account or changes to the service.

Who can see your data

Only you can see your recordings, transcripts, notes, contacts, scanned cards and photos, unless you choose to share them.
Your company: for exhibitors, the company owner and staff can see the company's leads, products and events.
Exhibitors you meet: details you give an exhibitor at their stall, such as your name, email or business card, become part of that exhibitor's leads. That exhibitor is responsible for how it uses them.
The public: an exhibitor's company profile is public when the exhibitor turns on public visibility.

Service providers

We share data only with providers that help us run the service, and only what each needs:

Amazon Web Services (Mumbai region): storage of audio, photos, card images and documents, and hosting.
Our database hosting provider: account and app data.
OpenAI (United States): speech-to-text transcription and AI summaries of your recordings and notes.
Anthropic (United States): reading contact details from business card images, and AI analysis.
PhonePe: payment processing for plans bought on our website. We do not receive or store your card or bank details.
Microsoft Azure Notification Hubs and Google Firebase Cloud Messaging: delivering push notifications, when enabled.

AI processing happens on OpenAI's and Anthropic's servers in the United States, outside India. The content being processed is sent there for that purpose only.

We may also disclose data where the law requires it, or to protect the rights and safety of our users or the public.

How long we keep it

We keep your data while your account exists.
When you delete your account, it is disabled at once and its data is erased 30 days later.
Business card scan jobs are deleted automatically after 30 days.
Payment records are kept as long as tax and accounting law requires.
Security audit logs record that an account existed and was deleted, using internal IDs only.
The database is backed up automatically, and backup copies are kept for up to 30 days. Data that has been erased disappears from backups within 30 days after that, and we never restore a deleted account from a backup.

Deleting your account

You can delete your account at any time in the app, under My Account > Delete account, or on the web at Delete your account. You will need your password.

Your account is disabled straight away and, 30 days later, permanently erased with your recordings, transcripts, summaries, contacts, scanned cards, notes, photos and uploaded files. If you change your mind, sign back in within those 30 days and the deletion is cancelled. After that it cannot be undone; erased data drops out of our backups within a further 30 days.

When an exhibitor company owner deletes their account, the whole company is deleted too, including every staff account and all company data. Staff cannot sign in during the 30 days. A staff member who deletes their own account removes only their login; the leads they captured stay with the company.

The only data we keep after deletion is described in "How long we keep it" above. Leads an exhibitor captured about you stay with that exhibitor, but are no longer linked to your account.

Your rights

Depending on where you live, you may have the right to access, correct, delete or get a copy of your data, to withdraw consent, and to complain to a data protection authority. You can correct most data and delete your account yourself in the app. For anything else, email support@taryto.com.

Grievance officer: Anmol Arora, who can be reached at support@taryto.com.

Security

Data is encrypted in transit with HTTPS. Passwords are stored as one-way hashes. Stored files (recordings, photos, card images and documents) are not publicly accessible: the app and website open them through signed links that expire within two hours. No system is perfectly secure, but we work to protect your data and will notify you of a breach where the law requires it.

Other people's data

If you record a conversation or scan someone's business card, you are responsible for having their permission where the law requires it.

Children

ExpoVault AI is a business tool and is not intended for anyone under 18.

Changes to this policy

We will post any changes on this page and update the date at the top. If a change is significant, we will tell you in the app or by email.

Contact

Taryto Innovations Private Limited, 227, Manglam Metropolis Tower, Kh No 207/378 Nirmohi Ngr, Queens Road, Ajmer Road, Shyam Nagar, Jaipur, Rajasthan 302019, India. Email: support@taryto.com.