Privacy Policy

1. Who we are & scope

ShowIO, LLC ("Show.IO," "we," "us," or "our") provides a conference intelligence platform that helps B2B exhibitors and sales teams capture leads, view real-time show-floor data, and measure conference ROI (the "Service"). This Privacy Policy explains how we handle personal data when you visit our website, use the Service, or otherwise interact with us.

This policy applies to two broad groups of people: our customers and their users (the sales and marketing teams who log into Show.IO), and the leads, prospects, and event attendees whose information our customers capture and process through the Service.

2. Data we collect

We collect the following categories of personal data, depending on how you interact with us:

We do not intentionally collect special categories of data (such as health, biometric, or political data). Please do not enter such information into the Service.

3. How we use data

We use personal data to:

• Provide, operate, and maintain the Service, including lead capture, floor intelligence, and ROI reporting;
• Authenticate users, manage accounts, and provide customer support;
• Process payments and manage subscriptions;
• Improve and develop features, and analyze how the Service is used;
• Send service-related communications and, where permitted, marketing about Show.IO (you can opt out at any time);
• Detect, prevent, and address fraud, abuse, and security incidents; and
• Comply with legal obligations and enforce our agreements.

We do not sell personal data, and we do not use the lead data our customers process for our own marketing.

4. Legal bases for processing (GDPR)

If you are in the European Economic Area (EEA) or the United Kingdom, we process personal data only where we have a legal basis to do so:

• Contract — to provide the Service to our customers and their users under our terms.
• Legitimate interests — to secure, improve, and market our Service, balanced against your rights and interests.
• Consent — for certain marketing communications and non-essential cookies; you may withdraw consent at any time.
• Legal obligation — to comply with applicable laws, tax, and accounting requirements.

5. Lead & attendee data (controller vs. processor)

A core function of Show.IO is helping customers capture and manage leads and attendee information at conferences. For this data:

• Our customer is the data controller and is responsible for having a lawful basis to collect and share the data with us and for honoring data subject requests.
• Show.IO acts as a processor, handling the data only on the customer's documented instructions under a data processing agreement.

If you are a lead or attendee and want to access, correct, or delete your data, please contact the company that captured you. If you're unsure who that is, contact us and we will help route your request to the relevant customer.

6. How we share data

We share personal data only as described below, and never sell it:

• Service providers / sub-processors — hosting, analytics, payment, email, support, and AI vendors who process data on our behalf under contract (including the AI providers described in Section 7).
• Within your organization — with other authorized users on your customer account.
• Integrations you enable — CRMs, badge-scan tools, and other systems you connect, at your direction.
• Legal & safety — when required by law, to enforce our terms, or to protect rights, safety, and security.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

7. AI & automated processing

Show.IO uses artificial intelligence to turn unstructured inputs into usable lead data. Most notably, a rep can dictate a voice note recording their own recollection of a conversation, and we use AI services to transcribe that recording and extract structured information such as contact details, summaries, and interest tags. These are the rep's own spoken notes — Show.IO does not record the other party to a conversation. We may use AI in similar ways to process business cards, notes, and other inputs you provide.

AI providers we use

We rely on enterprise AI services from third-party providers, including Google (Gemini, via Google Cloud Vertex AI), to perform this processing. These providers act as our sub-processors and may process the relevant content (for example, the audio in a voice note and its transcript) solely to provide the processing we request.

How your data is handled

• Data is sent to our AI providers only to perform the processing we ask for — such as transcription and field extraction — and is returned to the Service.
• Under our enterprise terms, this content is not used to train the providers' general or public AI models.
• We send only the data needed for the task and retain AI-derived results as part of your lead records, subject to Section 9.

No solely automated decisions

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. AI output is a tool to assist our customers' sales teams, who remain responsible for how they use it.

8. Cookies & tracking

We use cookies and similar technologies to keep you signed in, remember preferences, measure performance, and understand how our website and Service are used. Essential cookies are required for the Service to function; analytics and marketing cookies are used only where permitted.

You can control non-essential cookies through your browser settings or any cookie banner we present. Disabling some cookies may affect how the Service works.

9. Data retention

We retain personal data for as long as needed to provide the Service and for legitimate business or legal purposes. Account data is kept for the life of the account and deleted or anonymized within a reasonable period after closure. Lead and attendee data is retained according to our customers' instructions. Backup copies are purged on a rolling schedule.

10. Security

We use technical and organizational measures designed to protect personal data, including encryption in transit, access controls, and regular security reviews. No system is perfectly secure, so we cannot guarantee absolute security, but we work continuously to protect your information and will notify affected parties and regulators of breaches as required by law.

11. International data transfers

We may process and store data in countries other than where you live, including the United States. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

12. Your rights (EEA / UK — GDPR)

If you are in the EEA or UK, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten");
• Restrict or object to certain processing;
• Data portability — receive your data in a portable format;
• Withdraw consent at any time where processing is based on consent; and
• Lodge a complaint with your local supervisory authority.

To exercise these rights, contact us at paul@tryshow.io. For lead/attendee data, see Section 5.

13. Your California rights (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose;
• Access and obtain a copy of your personal information;
• Delete personal information we have collected, subject to exceptions;
• Correct inaccurate personal information;
• Opt out of any "sale" or "sharing" of personal information; and
• Limit use of sensitive personal information.

To submit a request, email paul@tryshow.io. We will verify your identity before responding and may ask for additional information. You may use an authorized agent to submit requests on your behalf.

14. Children's privacy

The Service is a business tool intended for adults and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the revised policy.

16. Contact us

If you have questions about this policy or how we handle your data, reach out: