Data Protection & Privacy

Privacy Policy

Effective Date: August 3, 2026 · Last Updated: August 2026

Thinkraft Technologies ("Thinkraft", "we", "our", or "us") operates Xposcan ("the App", "Service"), a real-time lead capture, organization, and event management platform. This Privacy Policy details how we collect, process, store, disclose, and protect personal and event information when you use our mobile and web applications.

By registering for an account or using Xposcan, you acknowledge and agree to the data practices described in this Privacy Policy. If you do not agree with any terms, please discontinue app usage immediately.

1. Information We Collect

We collect information strictly necessary to provide live exhibitor lead capture, OCR business card extraction, badge QR decoding, and multi-user team lead management.

a. Account Registration & Identity Data

  • Full Name, Company / Organization Name, and Job Title
  • Work Email Address & Mobile Phone Number (used for OTP verification)
  • Account Credentials & Profile Settings

b. Lead & Visitor Contact Data Captured

When exhibitors capture attendee details via Card Scan (AI OCR), Badge QR, or Manual Entry:

  • Full Name, Designation, Company Name, & Industry
  • Phone Numbers, Email Addresses, Physical Addresses, & Website URLs
  • Custom tags, ratings, follow-up priority notes, and voice/text comments
  • Event metadata (Event Name, Booth ID, Scanner Staff ID, Timestamp)

c. Device & Technical Usage Data

  • Device Model, Operating System (iOS / Android), App Version, & System Language
  • IP Address, Network Connectivity Status (Online / Offline Buffer Logs)
  • Performance diagnostics, crash logs, and feature interaction analytics

2. Mobile Device Permissions

To enable live lead scanning and offline synchronization, Xposcan requests specific mobile operating system permissions:

Camera Permission

Required solely for live business card camera OCR scanning and Badge QR code decoding. Camera frames are never stored or transmitted without user initiation.

Storage / Media Access

Required to select pre-existing card photos from your gallery or export generated CSV/Excel lead spreadsheets to local device storage.

3. How We Use Information

  • Service Delivery: To parse business card images via AI OCR, decode event badge QR codes, and construct lead contact records.
  • Real-Time Team Synchronization: To enable instant lead list availability across multi-device exhibitor teams during live events.
  • CRM Export & Reporting: To allow 1-click export of captured leads to Excel, CSV, or direct CRM integration.
  • Security & Account Protection: To verify user identity via mobile OTP, prevent unauthorized access, and isolate organization accounts.
  • Customer Support & Updates: To respond to technical inquiries, send transactional service notices, and announce app updates.
🛡️ Strict No-Data-Selling Policy: Thinkraft Technologies does NOT sell, rent, trade, or monetize your captured lead contact data or customer databases to advertisers, brokers, or third parties.

4. Data Security & Encryption

We deploy robust technical, organizational, and physical security measures to safeguard visitor and user data:

  • Encryption in Transit: All communication between mobile devices and server endpoints is secured using TLS 1.3 / SSL encryption.
  • Encryption at Rest: Database records and media assets are stored using AES-256 cloud encryption.
  • Offline Storage Security: Offline scan buffers are stored securely in encrypted local app storage until synced.
  • Account Isolation: Strict multi-tenant access control ensures lead data is accessible only by authorized team members of your organization.

5. Data Retention, Ownership & User Rights

You maintain full ownership of all attendee contact data captured using Xposcan. You possess the following rights at any time:

  • Right to Access & Export: Export your lead data in standard CSV/Excel formats anytime.
  • Right to Deletion: Request permanent deletion of specific event lead lists or your entire organization account.
  • Right to Rectification: Edit or update any contact details directly within the lead detail screen.

6. Children's Privacy

Xposcan is a professional B2B software application designed exclusively for corporate exhibitors, trade show representatives, and business attendees. We do not knowingly collect personal data from individuals under 18 years of age.

7. Contact & Privacy Officer

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact our privacy compliance team:

Thinkraft Technologies

Email: connect@thinkraft.tech

WhatsApp Support: +91 884 985 4100