Privacy Policy

1. About BoothLoader

BoothLoader is a SaaS platform that allows exhibiting companies (Customers) to capture leads at trade shows and events through interactive booth activities, including games and demos. BoothLoader is operated by BoothLoader Ltd., governed by the laws of the State of Israel.

In the context of attendee data, BoothLoader acts as a data processor: the exhibiting company that deployed the booth activity is the data controller responsible for lawful collection from their attendees.

2. Data We Collect

When an attendee participates in a BoothLoader booth activity, the following data may be collected:

• Name and email address (from lead capture forms)
• Custom form fields configured by the exhibiting company (e.g. job title, company name, phone number)
• Game scores and activity results
• Device session identifiers (httpOnly cookies scoped to the activity page, expire after 24 hours)
• Timestamp and activity ID of each interaction

BoothLoader does not collect payment card numbers, government IDs, or sensitive personal categories as defined under GDPR Article 9.

3. Purpose of Processing

Data collected through booth activities is processed for the following purposes:

• Delivering the booth activity experience (game, demo, or lead capture)
• Storing captured leads on behalf of the exhibiting company (Customer)
• Generating leaderboard and analytics summaries for the Customer
• Enabling the Customer to export and manage their leads

4. Sub-Processors

BoothLoader uses the following sub-processors to deliver the platform:

• Authentication provider — Manages Customer account sign-in and organization access
• Cloud database provider — Stores lead data, event configurations, and game results in the EU
• Cloud file storage provider — Stores activity branding assets such as logos and uploaded documents

5. Data Retention

Lead data captured through booth activities is retained for the duration of the event plus two (2) years, unless the Customer requests earlier deletion. Customers may delete their leads at any time through the BoothLoader dashboard. Account and organization data is retained for as long as the Customer account is active.

6. Your Rights Under GDPR

If you are an attendee whose data was collected at a booth activity, your data rights are primarily exercisable against the exhibiting company that operated the booth (the data controller). You may contact BoothLoader to assist with:

• Right of access: request a copy of personal data held about you
• Right to erasure: request deletion of your personal data
• Right to portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests

BoothLoader also complies with Israeli privacy law (Protection of Privacy Law, 5741-1981) and its amendments.

7. Security

BoothLoader uses industry-standard security measures including encrypted data transmission (TLS), httpOnly cookies for session management, and access controls that restrict data to the originating organization. Lead data is scoped per organization and cannot be accessed cross-tenant.

8. Governing Law

This policy is governed by the laws of the State of Israel, with respect to international GDPR obligations for EU-based data subjects. Any disputes shall be resolved in the competent courts of Israel.

9. Contact

For privacy-related inquiries, contact us at privacy@boothloader.com.