← Back to home

Privacy Policy

Effective date: 19 August 2026 · Last updated: 19 August 2026

1. Who we are

BoothRally is a service operated by Honky Consulting AB (org. nr. 559152-6032), a company registered in Sweden. Address: Lurgränd 1, 239 36 Skanör, Sweden.

For any question about this policy or your personal data, contact us at privacy@boothrally.com.

Honky Consulting AB is the data controller for the personal data of our account holders (the people who sign up to use the app). We act as data processor for the lead data that our customers capture in the app about the business contacts they meet at trade shows.

2. What data we collect

2.1 Account data (you, our customer)

When you create a BoothRally account we collect:

• Name
• Email address
• Password (stored as a hash, never in plain text)
• Organisation name and role
• Billing details (processed by Stripe, we do not store card numbers)

2.2 Lead data (business contacts you capture in the app)

When you use BoothRally at a trade show, you capture information about the people you meet. This typically includes:

• Contact name
• Company name
• Email address (optional)
• A short note about the conversation
• The fair or event where you met

You choose what to capture. You are responsible for having a lawful basis to collect this data (in most B2B trade-show contexts, legitimate interest under GDPR Article 6(1)(f) applies).

2.3 Usage data

Basic technical data to keep the service running:

• IP address (in server logs, retained for 30 days for security)
• Browser type and device
• Timestamps of key actions (sign-in, scan, draft, export)

We do NOT use analytics trackers, advertising cookies, session recording, or any third-party tracking on our website or in the app.

3. Why we collect it (legal basis)

4. How we use AI

BoothRally uses a third-party artificial intelligence model to draft personalised follow-up emails from the notes you capture in the app. Every draft is prepared for you to review and edit before you send it. The AI never sends emails on your behalf.

4.1 What the AI sees

When you request a follow-up draft, the following is sent to our AI vendor:

• Your name (as the sender)
• The contact's name
• The contact's company name
• The name of the fair or event
• Your short note about the conversation
• The product or topic you discussed
• Your saved style preferences and email signature

The contact's email address is NOT sent to the AI vendor.

4.2 Which AI vendor

We use Anthropic Inc. (Claude models) via API. Anthropic processes this data under a Data Processing Agreement that includes Standard Contractual Clauses for transfers outside the EU. Anthropic does not use API inputs to train their models.

4.3 Your choice

If you prefer not to use the AI-drafting feature, you can capture leads and export data without ever requesting a draft. The rest of the app works without AI.

4.4 AI Act transparency

BoothRally is a limited-risk deployer of an AI system under the EU AI Act. Every AI-generated draft is human-reviewed by you before it is sent, which places our use outside the Article 50(4) obligation to mark AI-generated text.

5. Who we share data with

We use the following processors and sub-processors to run BoothRally. Each is bound by a Data Processing Agreement.

We do NOT sell your data, we do NOT share it with advertisers, we do NOT use it for marketing purposes outside the direct service.

6. Where your data is stored

Your account data and lead data are stored in the EU (Supabase, Frankfurt region).

When you use the AI-drafting feature, the request is processed by Anthropic on servers located in the United States. Standard Contractual Clauses are in place for this transfer, as required by GDPR.

7. How long we keep data

• Account data: for as long as your account is active. If you close your account, we delete your account data within 30 days, except where we are legally required to retain some (e.g. invoices, which we keep for 7 years under Swedish accounting law).
• Lead data: stored under your organisation for as long as you keep it. You can delete individual leads or entire events any time in the app.
• Server logs: 30 days, then automatically deleted.
• Support emails: 2 years, then deleted.

8. Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict how we process your data
• Data portability, export your data in a machine-readable format
• Object to processing based on legitimate interest
• Withdraw consent at any time where consent is the basis
• Lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or the equivalent authority in your country

To exercise any of these rights, email privacy@boothrally.com. We respond within 30 days.

Business contacts whose data has been captured by a BoothRally customer should first contact the customer directly. We will forward such requests to the responsible customer within 5 working days.

9. Cookies

BoothRally does not use tracking, advertising, or analytics cookies.

We use the minimum technical cookies required to keep you signed in and to remember your app preferences. These are strictly necessary under GDPR and do not require consent.

10. Data security

We take reasonable and appropriate measures to protect your data:

• All data is transmitted over encrypted connections (TLS)
• Data is stored encrypted at rest by our infrastructure providers
• Access to production data is restricted to the founder and any authorised team members
• We follow the principle of least privilege for internal access
• We use Row Level Security in our database so no customer can access another customer's data

If we ever become aware of a personal data breach that is likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours and notify affected users without undue delay.

11. Children

BoothRally is a B2B service intended for professional use. It is not directed at children under 16. We do not knowingly collect data from children.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our service, our processors, or the law. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page. The current version is always available at boothrally.com/privacy.

13. Contact