Privacy Policy

Last updated: 18 July 2026

1. Who we are

The Trade Show Companion website and product are operated by Sandstone Systems F.Z.E, a Free Zone Establishment registered in the Ajman Free Zone, United Arab Emirates, under Licence and Registration No. 55415. For data you send us through this website and for the operation of the free trial we are the data controller. For CRM content that trial users capture about third parties (for example scanned business cards) the trial customer is the controller and we process that data on their behalf. You can reach us at hello@tradeshowcompanion.com. This policy applies to everyone who visits the website or uses the free trial, wherever in the world you are; where your local law gives you specific rights, for example under the UAE Personal Data Protection Law or the EU and UK GDPR, this policy is written to respect them.

2. What we collect

Website visits. Standard technical server logs (IP address, time of request) for security and operation. The website loads no external fonts, analytics or tracking scripts.

Trial signup. Company name, your name, business email address, optionally your company website, the trade fair you attend, your IP address, and a record of your acceptance of the Terms of Service (version and timestamp). A six-digit code is sent to your email address to verify it; login links are sent to the same address.

Company research (trial). If you provide your company website, we look up publicly available information about your company (for example what you sell and your industry) through an AI research provider to preconfigure your workspace. The input to that lookup is your company name and website address.

Using the trial. The CRM content you and your team create: leads, contacts, companies, notes, reminders, scanned business cards, voice notes and their AI-generated transcriptions and extractions. This content is processed to provide the product.

Demo requests. Name, email, company and your message.

Campaign links. If you open a fair-specific signup link, we record anonymous funnel events (which step of the signup was reached) keyed by a hashed session identifier. No IP address and no personal profile is stored with these events.

3. Cookies

The website itself does not set tracking cookies and runs no analytics. The product (signup and trial) uses strictly necessary session cookies for login, security (CSRF) and the signup flow. There is no advertising or cross-site tracking.

4. Why we use it, and our legal basis

We use signup and trial data to provide the trial you requested (performance of a contract; GDPR Article 6(1)(b) where it applies), to verify your email and secure the service (legitimate interest; Article 6(1)(f)), to enforce the one-trial-per-company rule (legitimate interest), and to respond to demo requests you send us (steps at your request). Under the UAE PDPL we rely on the equivalent grounds. We do not use your data for advertising and we do not carry out automated decision-making with legal effect. AI features process the content you submit to them solely to produce the requested output; our AI providers do not use this content to train their models.

5. Who we share it with

We use a small number of service providers to run the website and the product:

  • Hosting: Contabo GmbH (Germany), servers operated by us.
  • Website delivery: Cloudflare, Inc. (global CDN) for the marketing website.
  • Email delivery: Resend (transactional email such as verification codes and login links).
  • AI processing: requests to AI features are routed through our own gateway to the respective model providers (currently OpenAI, Anthropic and Perplexity) strictly to produce the requested output.

We do not sell personal data. We may also disclose data where we are required to by law.

6. Connected calendar accounts (Google and Microsoft)

If you choose to connect your Google Calendar or Microsoft Outlook calendar, we access your calendar through the Google Calendar API and the Microsoft Graph API using OAuth. We request read and write access to your calendar (Google scope calendar.events; Microsoft Calendars.ReadWrite).

We use this access solely to sync your meetings, demos and follow-ups into your own workspace, to show them alongside the relevant leads, and, only where you ask us to, to create or update events. Access tokens are stored encrypted and are used only for this purpose. You can disconnect a calendar at any time in the app, which removes the linked calendar data. Events you mark as Private in Google or Outlook are never shared with your team.

We do not sell this data, we do not use it for advertising, and we do not use it to train AI models.

Trade Show Companion's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. International transfers

We are established in the UAE and our servers are in the EU; some providers above are located elsewhere, for example in the United States. Where personal data is transferred across borders we limit it to what is necessary and rely on appropriate safeguards. You can ask us for more detail at hello@tradeshowcompanion.com.

8. How long we keep it

  • Trial CRM data: for the trial (28 days), the read-only period (14 days) and a dormant period of up to 6 months, then permanently deleted.
  • Signup registry: company name, email domain and the record of your terms acceptance are retained permanently as proof of acceptance and to enforce the one-trial-per-company rule.
  • Demo requests: as long as needed to handle your request.
  • Server logs: short rotation for security and operations.
  • Anonymous funnel events: retained in aggregate; they contain no personal data.

9. Your rights

Depending on where you are, you may have the right to access, correct, delete, restrict or object to our use of your personal data, and to receive it in a portable form or withdraw a consent you have given. To exercise any of these, email hello@tradeshowcompanion.com. If you believe we have mishandled your data, you can lodge a complaint with your local data protection authority; in the UAE, that is the UAE Data Office.

10. Changes

We may update this policy as the product evolves. The current version is always available at tradeshowcompanion.com/privacy/.