Privacy Policy

1. Information We Collect

We follow the principle of "minimum necessary" and collect information only to the extent needed to deliver specific features:

• Account information: the email address, login password (stored encrypted), company name, contact name, contact phone number, and invite code you provide when registering.
• Visitor enquiry information: when you submit an enquiry or request a proposal without registering, we collect your company name, target exhibition, contact email, contact phone number, budget range, exhibition goals, and similar details.
• Project and requirement information: booth size and opening orientation, brand materials (such as your company's Chinese and English names and logo), your conversations with the "Needs Advisor / Xiao BAI" AI assistants, and the requirement specifications generated from them.
• Materials you upload: images (such as logos, brand and booth images), documents, videos, and other files you upload; and the content of web links you provide that we crawl to assist with design.
• Transaction information: your order and payment records, including the payment method (e.g., Alipay / WeChat Pay / bank card / bank transfer), amount, currency, transaction status, and invoicing details. Online payments are processed by third-party payment service providers: sensitive payment details such as your card number and payment-account credentials are provided by you directly to the payment provider (which may be located outside your country/region), and we do not collect or store them — we retain only the payment result and transaction reference. Offline payments such as bank transfers are reconciled manually by us.
• Builder onboarding information (if you apply as a builder): business license, the legal representative's ID document (front and back), unified social credit code, insurance documents, and contact details. The ID document and similar items are sensitive personal information; we collect them only with your separate consent, for the purpose of qualification review, and we apply stricter protection measures.
• Information we collect automatically: to keep you signed in and to protect security, we store a login token in a cookie; to understand and improve the service, we use basic visit analytics. See Section 6 for details.

2. How We Use Your Information

• Providing core services: generating booth design proposals from your requirements, estimating quotes, producing 3D and rendered images, and connecting you with designers and builders.
• Account management and notifications: creating and maintaining your account, sending verification and login links, and sending service notices and information you have subscribed to.
• Customer support and communication: responding to your enquiries and handling complaints and after-sales matters.
• Security and compliance: identity verification, fraud prevention, safeguarding system and data security, and meeting our legal obligations.
• Improvement and training: to the extent permitted by law, we may analyze your data (including de-identified / anonymized design requirements, interaction records, and design patterns) to improve existing features and to train and optimize our AI models and service quality. We do not sell your personal information for profit; we do not disclose the brand materials you upload or your specific design proposals to other customers; and your sensitive personal information (such as ID documents) is not used for model training.

3. How We Use Third Parties to Process Your Information

To deliver the features above, we rely on third-party service providers to process some data:

• AI generation services: to generate designs and copy, we send your requirement descriptions, conversation content, and relevant images you upload to third-party AI model providers located both inside and outside China for processing.
• Infrastructure and operational services: we use third-party cloud computing and storage, payment processing, email delivery, task queue, font loading, visit analytics, and internal notification services to run and maintain the platform.

We provide information to these providers only to the extent necessary to achieve the purposes described in this Policy, and we require them by contract to protect your information to a standard no lower than this Policy. If you would like the specific list of third-party providers we currently use and where they are located, you may request it using the contact details at the end of this Policy.

4. Cross-Border Transfer of Personal Information

Because BoothAI's owner is located in Singapore, and some of the AI and infrastructure providers we use are located outside the People's Republic of China, your personal information (such as requirement descriptions, conversation content, images you upload for design generation, and necessary account information) may be transferred to our affiliate in Singapore and other overseas service providers and stored or processed outside China, in order to provide the service and for operational and technical support. Where required by law, we will obtain your separate consent for this and adopt the safeguards required by applicable law. If you do not agree to such cross-border transfer, some features that rely on overseas processing may be unavailable to you.

5. Sharing, Transfer, and Public Disclosure

• Sharing: in addition to the providers described in Section 3, when you ask us to connect you with a designer or builder, we provide them the information necessary to complete the collaboration; and in other situations to which you have separately consented.
• Transfer: if your personal information must be transferred because of a merger, acquisition, or asset transfer, we will require the successor to remain bound by this Policy, failing which we will require it to seek your consent again.
• Public disclosure: only with your consent, or where required by laws, regulations, or regulatory and judicial authorities.
• We do not sell your personal information.

6. Cookies and Local Storage

• We use essential cookies (such as the login token boothai-token, valid for about 7 days) to keep you signed in and to protect security.
• We use browser local storage (localStorage / sessionStorage) to temporarily save your form drafts and session state so you can resume after an interruption.
• We use basic visit analytics to understand how the service is used and to improve the product. We currently do not use advertising-tracking cookies or pixels.
• You can manage or clear cookies and local storage through your browser settings, but this may affect the normal operation of some features.

7. Storage, Retention, and Security

Storage and retention

Your information is stored in cloud database and object-storage services used by us and by the providers we engage (which may be located inside or outside China). We retain your personal information only for as long as necessary to achieve the purposes described in this Policy and for the periods required by law; beyond those periods we delete or anonymize it. You may also ask us to delete it earlier at any time, and we will act on your request to the extent permitted by law.

Security measures

We take commercially reasonable technical and organizational measures (such as access control, encryption in transit and at rest, and least-privilege permissions) to protect your information against unauthorized access, disclosure, or alteration. Please understand, however, that the internet is not an absolutely secure environment, and we keep working to raise our level of protection. In the event of a personal-information security incident, we will notify you and report to the authorities as required by law.

8. Your Rights

Subject to applicable law, you have the right to:

• access and copy your personal information;
• correct or supplement inaccurate or incomplete information;
• delete your personal information in the circumstances provided by law;
• change the scope of your authorization or withdraw consent you previously gave;
• close your account;
• file a complaint about our handling of personal information.

You can exercise these rights using the contact details in Section 11. To protect account security, we may first need to verify your identity, and we will respond within the period required by law.

9. Protection of Minors

Our service is intended for businesses and professional users, not for minors. We do not knowingly collect the personal information of minors. If you are a minor, please use the service under the guidance of a guardian; if we find that we have inadvertently collected a minor's personal information, we will delete it as soon as possible.

10. Updates to This Policy

We may update this Policy from time to time. When we do, we will publish the new version on this page and update the effective date; for material changes, we will notify you separately by appropriate means (such as an in-site notice or email). If you continue to use the service after the changes take effect, you are deemed to accept the updated Policy.

11. How to Contact Us

If you have any questions, comments, or complaints about this Policy or our handling of personal information, or if you would like to exercise your rights or request the list of third-party providers, you can contact us at:

• Owner / responsible entity: Rising Success Investment Pte. Ltd. (Singapore)
• Registered address: 84A Lor 2 Toa Payoh #21-311, Singapore 311084
• China operating entity: authorized by Rising Success Investment Pte. Ltd.; to be updated once confirmed
• Data Protection Officer: contact@boothai.co
• Email: contact@boothai.co

We will verify and address your request as soon as possible after we receive it.