Legal
Last updated: January 2026
Plain English Summary
We collect your name, email, and usage data to run Exhibra. We don't sell your data. We don't share it with expo organisers without your consent. You can delete your account and all your data at any time by emailing us.
Exhibra is an event intelligence platform for pharma export professionals, operated by Exhibra India Pvt. Ltd. ("we", "us", "our"). Our registered office is in India. For privacy-related queries, contact us at privacy@exhibra.com.
Account data: Name, work email address, company name, and password (stored as a secure hash — never in plain text).
Usage data: Pages visited, expos viewed, plans created, filters applied, and feature interactions. We use this to improve the product and understand what's useful.
Device data: Browser type, operating system, IP address, and approximate location (city-level only). Used for security and analytics.
Plan data: The expos you add to your plan and any preferences you set. This is stored against your account so your plan persists across sessions.
To provide the Exhibra service — logging you in, saving your plans, and personalising your experience.
To improve the platform — understanding which features are used, which expos are popular, and where users drop off helps us build a better product.
To communicate with you — account notifications, product updates, and (if you opt in) our curated expo intelligence newsletter. You can unsubscribe at any time.
To comply with legal obligations — including applicable Indian law and any regulatory requirements.
We do not sell your personal data to anyone, ever.
Service providers: We use third-party tools to run the platform — including cloud hosting (AWS/GCP), analytics (privacy-respecting), and email delivery. These providers process data only on our instructions and under data processing agreements.
Expo organisers: We do not share your identity with expo organisers unless you explicitly request to be connected (a feature we may introduce with clear consent flows).
Aggregated, anonymised data: We may share industry-level insights (e.g., "Indian pharma companies are most interested in MENA expos in Q1") with partners or in published reports. This data cannot be used to identify you.
Legal requirements: We may disclose data if required by Indian law, court order, or to protect the security of our platform.
We keep your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we're required to retain it for legal compliance (typically up to 7 years for financial records).
Anonymised usage data may be retained indefinitely for product improvement purposes.
Under India's Digital Personal Data Protection Act 2023, you have the right to:
Access: Request a copy of the personal data we hold about you.
Correction: Ask us to correct inaccurate data.
Deletion: Request deletion of your personal data ("right to be forgotten").
Grievance redressal: Raise a complaint with our Data Protection Officer at privacy@exhibra.com. We will respond within 30 days.
We use essential cookies to keep you logged in and remember your preferences. We use analytics cookies to understand how the platform is used. You can disable non-essential cookies in your browser settings — this will not affect your ability to use the platform.
We do not use advertising or tracking cookies.
We use industry-standard security measures including HTTPS encryption, secure password hashing, and access controls. However, no system is completely secure. If you suspect unauthorised access to your account, contact us immediately at security@exhibra.com.
We will notify you by email of any material changes to this policy at least 14 days before they take effect. Continued use of Exhibra after that date constitutes acceptance of the updated policy.
For any privacy-related questions or to exercise your rights: privacy@exhibra.com
Exhibra India Pvt. Ltd., India.