LEGAL
AI Data Policy
Effective 16 August 2026. This policy describes the data boundaries and choices for ExAi AI features.
Where AI is used
AI may summarize published event or exhibitor content, answer booth questions, enrich professional context from public sources, rank relevant exhibitors or sessions, create lead-intelligence reports, suggest follow-up language and assist an individual attendee with private planning.
Inputs
Depending on the feature and consent choice, inputs may include public event and exhibitor content, uploaded documents, prompts, conversation history, name, company, work email, professional profile, form answers and event activity. Passwords, authentication tokens and payment data must not be placed in prompts.
Separate choices
Sharing contact details for follow-up does not automatically authorize AI personalization. Where personal AI processing is optional, ExAi presents a separate choice. Declining it leaves public directories and non-personalized resources available. Consent receipts record the text, version, purposes and time of the choice.
Providers
Google Gemini is the production AI provider for generation and embeddings. Routine chat and extraction use Gemini Flash-Lite, while reports and lead intelligence use Gemini Flash. Supabase stores relevant product data and results. ExAi will update this policy and the Privacy Notice before a materially different provider or personal-data use begins.
Training and provider controls
ExAi does not intentionally use private customer or attendee content to train its own general-purpose model. Provider retention and training behavior depends on the selected service, account tier and configuration. Before production personal-data processing is enabled for a provider, the operator must verify its current data-use terms, retention controls and transfer safeguards.
Boundaries and human review
Organizer, exhibitor and individual-attendee workspaces remain separate. AI receives only the context authorized for the requesting journey. Output is decision support, can be wrong and must be reviewed by a person. ExAi prohibits solely automated high-impact decisions based on its output.
Retention and withdrawal
Event-intelligence identity and enrichment sessions are retained for up to 90 days; lead submissions and associated reports for up to 365 days; and standalone visitor access for 24 hours. Withdrawing AI consent prevents new personalized generation and can be requested through the privacy request form.
Questions
Contact apoorv@sessionguide.live.