Privacy Policy

1. Introduction

Palconf Inc. ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered conference networking platform ("Service").

2. Information We Collect

2.1 Information You Provide

• Account information: Email address used for registration and authentication
• Phone number (mobile): Mobile phone number you provide when you opt in to receive text messages from us (see Section 5)
• Profile data: Professional goals, industry preferences, company information, and networking objectives you share through the chat interface
• Chat messages: Conversations with our AI assistant used to build your professional profile
• Event preferences: Events you select and your stated goals for attending

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, briefing reports generated, and interaction patterns
• Device information: Browser type, operating system, and device identifiers
• Log data: IP address, access times, and referring URLs

2.3 Information from Third Parties

We aggregate publicly available information about event exhibitors, attendees, and companies from event websites, public directories, and other open sources to power our matching and recommendation features. We may also supplement information we collect at events with data from third-party data enrichment providers to keep company and contact details accurate and up to date.

2.4 Information Collected at Events

When you interact with us at a conference, we may collect your name, company, job title, and contact information — including by taking a photo of or scanning your event badge, or through a business-card QR opt-in at our booth.

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service, including generating match scores and briefing reports
• Build and refine your professional profile through AI-powered analysis of your stated goals and preferences
• Match you with relevant exhibitors, attendees, and networking opportunities
• Send you briefing reports and notifications related to your selected events
• Authenticate your identity and maintain account security
• Improve and optimize the Service, including our matching algorithms and AI models
• Respond to your requests and provide customer support
• Comply with legal obligations

4. AI Processing

Our Service uses artificial intelligence (including large language models) to process your profile data and generate personalized recommendations. Your chat conversations and profile information are sent to third-party AI providers (currently Google Gemini) for processing. These providers process data according to their own privacy policies and data processing agreements we have in place. We do not use your personal data to train AI models.

5. SMS and Mobile Messaging

We collect mobile phone numbers when you opt in to receive text messages from us — for example, by texting us directly or by scanning our business card and sending the pre-filled message. We use your mobile number to send you match results and related updates about your selected events.

Message frequency varies. Message and data rates may apply. Reply STOP to opt out, HELP for help.

Mobile opt-in data and consent are never shared or sold to third parties or affiliates for marketing or promotional purposes.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service providers: Third-party vendors who assist in operating the Service (hosting, email delivery, AI processing), bound by data processing agreements
• Matched users (double opt-in): Contact information is shared with another user only after both parties have explicitly opted in to connect. We never share contact details with another user without that mutual consent.
• Legal requirements: When required by law, court order, or governmental authority
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users
• With your consent: When you explicitly authorize sharing for a specific purpose

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Chat session data and briefing reports are retained for up to 24 months after generation. You may request deletion of your data at any time (see Section 9). Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), secure authentication mechanisms (httpOnly cookie-based JWT with OTP verification), and access controls. Authentication tokens are stored exclusively in httpOnly cookies that are inaccessible to client-side JavaScript, mitigating the risk of token theft through cross-site scripting (XSS). However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing of your data for certain purposes
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, contact us at privacy@palconf.com. We will respond within 30 days.

10. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you additional rights regarding your personal information.

• Notice at collection: We inform you of the categories of personal information we collect and the purposes for which we use them at or before the point of collection, as described in this Policy.
• Right to opt out of sale or sharing: You have the right to opt out of the "sale" or "sharing" of your personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• Right to opt out of marketing messages: You may opt out of marketing or promotional SMS messages separately from service-related messages. Opting out of marketing messages will not affect transactional or service-related communications necessary to provide the Service.
• Right to know, delete, and correct: You may request access to, deletion of, or correction of your personal information, as described in Section 9 (Your Rights).
• Non-discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise these rights, contact us at privacy@palconf.com. We do not sell your personal data.

11. Cookies and Tracking

We use essential httpOnly cookies for authentication (JWT access and refresh tokens) and session management. These cookies are strictly necessary for the Service to function and cannot be accessed by client-side scripts. We do not use local storage for authentication tokens. We do not currently use third-party advertising or analytics cookies. If this changes, we will update this policy and provide appropriate notice and consent mechanisms.

12. International Data Transfers

Your data may be processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

13. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: