Boothlyo Privacy Policy

Last updated: October 5, 2026

Boothlyo ("Boothlyo," "we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you access or use the Boothlyo website, application, and related services (collectively, the "Service").

By using the Service, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

We collect information necessary to provide, maintain, secure, and improve the Service.

Account Information

When you create a Boothlyo account, we may collect information such as:

• Name
• Email address
• Organization or company name
• Password or other authentication credentials
• Account and subscription information
• Information you provide when contacting Boothlyo support

If you create or access your Boothlyo account using Google Sign-In, Google provides additional information as described in the Google User Data section below.

Boothlyo Content and Information You Provide

When you use Boothlyo, you may provide information such as:

• Trade show and event information
• Event dates and locations
• Tasks and checklists
• Budgets and expenses
• Inventory and asset information
• Travel and staffing information
• Shipment and logistics information
• Notes, files, and other content you upload or enter
• Information you provide when communicating with Boothlyo or requesting support

We use this information to provide the features and functionality of the Service.

Information About Other People

Boothlyo users may enter information about other people, such as trade show leads (for example, name, company, job title, contact details, and notes), staff and team members, and meeting contacts. We process this information on behalf of the Boothlyo customer who entered it, to provide the Service to that customer. Customers are responsible for having the right to collect and enter this information into Boothlyo. If your organization connects an integration such as HubSpot, lead information may also be sent to that service as described in Integrations You Connect.

Usage and Technical Information

We may automatically collect information about how you use the Service, including:

• Pages and features viewed or used
• Approximate location derived from IP address
• Device type
• Browser type
• Operating system
• IP address
• Dates and times of activity
• Diagnostic and technical information

We use this information to operate, secure, troubleshoot, and improve the Service.

Cookies and Similar Technologies

We may use cookies, local storage, and similar technologies to:

• Maintain authenticated sessions
• Remember preferences
• Provide essential functionality
• Understand how the Service is used
• Measure and improve product performance

You may control cookies through your browser settings and, where applicable, through controls provided within the Service.

2. Google User Data

Boothlyo uses Google APIs for two optional features: Google Sign-In and the Google Calendar integration. This section explains what Google user data we receive and how we handle it.

Google Sign-In

If you sign in with Google, Google provides Boothlyo with basic information associated with your Google account: your name, email address, profile picture, and a unique Google account identifier. We use this information only to authenticate you, create and identify your Boothlyo account, and keep you signed in.

Google Sign-In does not give Boothlyo access to your Gmail messages, contacts, files, or any other content in your Google account.

Google Calendar Integration

Connecting Google Calendar is optional. If you connect it, Boothlyo can create, update, and delete events on Google calendars you own. We use this access only to add your trade show events and booth meetings to your calendar and keep them in sync when you change them in Boothlyo. Boothlyo does not read or use any other events on your calendar.

To keep the integration working, we store encrypted authorization tokens and the identifiers of the calendar events Boothlyo created.

You can disconnect Google Calendar at any time from the Integrations page in Boothlyo. When you disconnect, Boothlyo deletes the stored authorization tokens and revokes its access with Google. You can also remove Boothlyo's access in your Google Account settings.

How We Protect and Limit Google User Data

Boothlyo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

• We use Google user data only to provide the Google Sign-In and Google Calendar features described above.
• We do not sell Google user data, and we do not use it for advertising, retargeting, creditworthiness determinations, or lending.
• We do not use Google user data, including Google Workspace data, to train, improve, or fine-tune generalized AI or machine learning models, and we never send it to AI service providers.
• We do not transfer Google user data to third parties except as necessary to provide these features (for example, to our hosting and database providers), to comply with applicable law, or to protect the security of the Service.
• Our personnel do not read Google user data unless you give us permission, it is necessary for security purposes, or it is required by law.
• Google user data is encrypted in transit using TLS, and access is restricted to the systems and personnel that need it to operate the Service.
• We keep Google user data only as long as needed to provide these features. When you disconnect Google Calendar, we delete the stored authorization tokens. When you delete your Boothlyo account, we delete the associated Google user data, except where we must keep it to comply with law.

3. How We Use Information

We use information collected directly through Boothlyo to:

• Provide, operate, maintain, and improve the Service;
• Create and administer user accounts;
• Authenticate users;
• Provide trade show and event management functionality;
• Process subscriptions and payments;
• Provide customer support;
• Communicate with users about the Service, including service announcements, security notices, and support matters;
• Protect the Service against fraud, abuse, unauthorized access, and security threats;
• Diagnose and resolve technical problems;
• Analyze Boothlyo product usage in aggregate to understand and improve product performance and user experience; and
• Comply with applicable laws and respond to lawful requests from public authorities.

Google user data is used only as described in the Google User Data section.

4. AI Features

Boothlyo offers optional AI features, such as lead scoring, booth copy suggestions, follow-up email drafts, post-show summaries, show recommendations, and performance insights. AI features run only when you or a member of your organization requests them.

When you use an AI feature, Boothlyo sends the information needed to generate the result to our AI service provider, Anthropic, which processes it and returns a response. Depending on the feature, this may include:

• Event details, such as event name, venue, location, dates, and booth number
• Budget and spending figures
• Lead information you have entered, such as name, company, job title, notes, form answers, status, and score
• Event notes, learnings, and ratings
• Staff names and counts
• Your organization's name and industry

Anthropic processes this information on Boothlyo's behalf to provide the AI features and, under its commercial terms, does not use it to train its models.

Boothlyo does not use your content to train generalized AI or machine learning models.

AI features do not receive Google user data. Information obtained through Google Sign-In or the Google Calendar integration is never sent to AI service providers.

5. Sharing of Information

We do not sell your personal information.

We may share information with service providers that help us operate and provide the Service, such as providers of:

• Hosting and database infrastructure;
• Authentication services;
• Email delivery;
• AI processing;
• Payment processing;
• Security and fraud prevention;
• Analytics and product infrastructure; and
• Other technical services necessary to operate Boothlyo.

These service providers receive only the information reasonably necessary to perform the services they provide to Boothlyo and are subject to appropriate confidentiality, security, and data protection obligations.

Integrations You Connect

If your organization connects a third-party service to Boothlyo, such as HubSpot, Boothlyo sends information to that service at your organization's direction. For example, when HubSpot is connected, Boothlyo creates or updates contacts in your organization's HubSpot account using lead information captured in Boothlyo, such as name, email address, phone number, company, job title, location, and lead status. Information sent to a connected service is handled under that service's terms and privacy policy and your organization's agreement with that provider. You can stop this sharing by disconnecting the integration. Disconnecting does not delete information already sent to the connected service.

We may also disclose information when reasonably necessary to comply with a legal obligation, enforce our agreements, protect the rights or property of Boothlyo or our users, investigate fraud or security issues, or protect the safety of users or others.

6. Data Storage and Security

Boothlyo uses third-party infrastructure providers to securely operate the Service.

Application data is hosted using Supabase managed infrastructure, including authentication and database services.

Payment processing is handled by Stripe, as described below.

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, use, alteration, disclosure, or destruction.

Information transmitted between your browser and Boothlyo is protected using industry-standard TLS encryption.

Access to stored information is restricted based on authorized access requirements and operational needs.

No method of transmission or electronic storage is completely secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security.

7. Payment Processing

Subscription and payment processing is handled by Stripe.

Boothlyo does not store complete payment card numbers on its own servers.

Stripe processes payment information in accordance with its own privacy policy and applicable security requirements.

Boothlyo may receive limited billing and subscription information, such as subscription status, billing identifiers, and limited payment metadata, to manage your Boothlyo account and subscription.

8. Cookies and Analytics

We may use first-party and third-party cookies and similar technologies for:

• Essential Service functionality;
• Authentication and session management;
• Remembering preferences;
• Security;
• Understanding aggregate product usage; and
• Improving the performance and user experience of Boothlyo.

Analytics information may include information such as pages viewed, features used, approximate location derived from IP address, device information, browser information, and timestamps.

Where analytics services are used, they are intended to help us understand the use and performance of Boothlyo.

We use Google Analytics to understand how visitors use our website and the LinkedIn Insight Tag to measure the effectiveness of our advertising on LinkedIn. These services may set cookies and collect information such as pages visited, device and browser information, IP address, and referring pages. Their use of this information is governed by their own privacy policies. You can opt out of Google Analytics using Google's opt-out browser add-on, and you can manage LinkedIn advertising preferences in your LinkedIn account settings.

You may control cookies through your browser settings and any applicable controls provided by the Service.

9. Data Retention

We retain information for as long as reasonably necessary to provide the Service, maintain your account, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce our agreements, and protect the security of the Service.

Different categories of information may be retained for different periods depending on their purpose.

10. Data Deletion

You may request deletion of your Boothlyo account and associated personal information by contacting us at:

hello@boothlyo.com

When you request account deletion, we will take reasonable steps to delete or de-identify your personal information, subject to information we are required or permitted to retain by law, for legitimate security purposes, to resolve disputes, or to enforce our agreements.

Certain information may remain in backups for a limited period before being securely deleted in accordance with our backup and retention procedures.

11. Your Privacy Rights

Depending on your location and applicable law, you may have rights regarding your personal information, including the right to:

• Access personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of personal information;
• Request portability of certain information;
• Object to or restrict certain processing activities; and
• Withdraw consent where processing is based on consent.

To exercise applicable rights, contact:

hello@boothlyo.com

We may need to verify your identity before fulfilling certain requests.

12. International Data Transfers

Boothlyo may use service providers and infrastructure located in countries other than the country in which you reside.

As a result, your information may be transferred to and processed in countries that may have different data protection laws than your jurisdiction.

Where required by applicable law, we take reasonable steps to provide appropriate safeguards for international transfers of personal information.

13. Third-Party Services

Boothlyo relies on certain third-party services to operate portions of the Service, including infrastructure, authentication, payment processing, email delivery, security, and other operational services.

Examples include:

• Supabase for application infrastructure, authentication, and database services;
• Vercel for website and application hosting;
• Stripe for subscription and payment processing;
• Resend for email delivery;
• Anthropic for AI features;
• Google for Google Sign-In, the optional Google Calendar integration, and Google Analytics;
• LinkedIn for advertising measurement;
• HubSpot, when your organization chooses to connect it, to sync lead information to your HubSpot account; and
• Other service providers that may be used to operate and support Boothlyo.

Third-party services operate under their own privacy policies and terms. We encourage users to review the privacy policies of third-party services where appropriate.

14. Children's Privacy

Boothlyo is intended for business and professional use and is not directed to children under the age of 16.

We do not knowingly collect personal information from children under 16.

If you believe that a child has provided personal information to Boothlyo, please contact us at hello@boothlyo.com so that we can take appropriate steps to delete the information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Service, our data practices, legal requirements, or other operational needs.

When we make changes, we will update the Last updated date at the top of this Privacy Policy.

If we make material changes to how we collect, use, disclose, or otherwise process personal information, we will provide additional notice where required by applicable law.

16. Contact Us

If you have questions about this Privacy Policy, our data practices, or your personal information, please contact us:

Boothlyo

Email: hello@boothlyo.com