Privacy policy
Version: privacy-2026-10-draft · Draft for a lawyer: not yet approved.
1. Who is responsible
For the data of people who create an account and use the cabinet (name, email, password hash, company, how the service is used, billing data), the operator named at the foot of this page is the controller.
For the contacts that a company collects with Followbooth (leads), that company is the controller and the operator processes the data on its behalf. If you are a person whose details were collected at a stand, ask the company that collected them; its contact details are on the materials and messages you received.
2. What we process and why
Account data, to provide and secure the service and to answer you. Billing data, to take payment and keep accounting records; card data is handled by Stripe only. Technical data (logs, IP addresses, devices), to keep the service running and safe. Service messages (confirmation of your email, receipts, payment problems), which are not advertising.
Lead data on behalf of the company you gave it to: the details from a business card, form or QR code, notes, voice notes and their text, and the messages sent and received.
3. Where it is kept and who helps
The data is kept on servers in Helsinki, Finland (EU). The providers that help us, with what they do and where, are listed on the page "Who processes your data"; the list is current as of its date.
4. How long
Account and lead data are kept while the account exists. When a paid plan ends the data stays readable and exportable for 90 days. A company can delete leads and its whole data at any time; deleted data is removed from the service and, after the backup period, from backups. Accounting records are kept for as long as the law requires.
5. Your rights
You can ask to see, correct, delete or move your data, to restrict or object to its processing, and to complain to your data protection authority. For account data write to the operator's email at the foot of this page. For lead data, write to the company that collected it; on the page shown after a form is sent there is a button "Delete my data".
6. Cookies
The cabinet uses a cookie to keep you signed in. It does not use advertising cookies. The visitor pages store nothing about the visitor in cookies.
When you sign up we look up the country of your connection, and read the country of your phone number and of your company, to decide whether the free plan is offered where you are and for statistics. We keep the country code, never the IP address. IP geolocation by DB-IP (db-ip.com), licensed CC BY 4.0.
7. Changes
When this policy changes, the new version and its date are shown at the top of this page.