Privacy policy

Last updated 20 October 2026

This policy explains what personal data the Expo Wizard website (expo-wizard.com) collects, why, and what you can ask us to do with it. The website is run by ProMarketing Wizard (“we”, “us”). For any question about your data, write to [email protected].

What we collect, and why

When	What	Why
You request a demo	Name, work email, company, job title, how many exhibitions you attend, your next exhibition, your message	To reply and arrange the demo
You sign up or sign in	Name, email, company name; a one-time sign-in code (stored only in scrambled form)	To create your account and workspace and let you sign in
You buy a package	What you bought, the amount, and the invoice. Card details go straight to our payment provider; we never see or store them	To provide the package, invoice you and keep accounting records
You browse the site and accept analytics cookies	Which pages you visit, how you got here, your device and browser type, approximate location (country/city), and whether you requested a demo, started a trial or bought	To understand how the site is used and improve it. Only with your consent
You use your account	A record of sign-ins, wrong codes and sign-outs, with the time, your IP address and browser type	Security: to detect and stop attempts to break into accounts

When you sign up, your name, email and company are also used to create your workspace in the Expo Wizard app. What you and your team then do inside the app, including the details of your guests, is covered by our agreement with your company, not by this policy. A data processing agreement (DPA) for the app is available on request at [email protected].

Cookies

The website uses cookies it needs to work, and analytics cookies only if you accept them:

Sign-in cookie (__session): keeps you signed in to your account. It holds a random code, nothing about you, and is removed when you sign out or after 30 days.
Payment page: the card form is run by our payment provider, Cardcom, which sets its own cookies needed to process the payment.

Analytics cookies (_ga, _ga_*, set by Google Analytics): count visits and see how the site is used. Set only if you click Accept in the cookie banner, and kept for up to two years. If you reject, nothing is sent to Google. Google’s advertising features are switched off.

We do not use advertising cookies. You can change your choice at any time with Cookie settings at the bottom of every page; withdrawing consent removes the analytics cookies.

Who else handles your data

We use these providers to run the website. Each only gets what it needs for its part:

Google Cloud: hosting and database (in the European Union).
Cloudflare: protects the website from attacks and delivers it quickly.
Postmark: sends our emails, such as sign-in codes.
Cardcom: takes card payments and issues invoices.
Google Analytics: measures how the site is used, only if you accept analytics cookies.

We do not sell your data or share it for advertising.

How long we keep it

Account and purchase records: while your account exists, and afterwards as long as tax and accounting law requires.
Sign-in codes: until used, and no more than 10 minutes.
Signed-in sessions: until you sign out, or 30 days at most.
Demo requests: as long as needed to follow up with you.

Your rights

You can ask to see the personal data we hold about you, correct it, or delete it, and you can object to how we use it. Write to [email protected] and we will reply within 30 days. Some records, such as invoices, we must keep by law even if you ask us to delete them. You can also complain to your data protection authority; in Israel this is the Privacy Protection Authority.

Security

Data is encrypted in transit and at rest. Sign-in uses one-time email codes, accounts lock after repeated wrong codes, and sessions can be ended from our side at any time. See our Security page for more.

Changes

If we change this policy, we will update the date at the top and, for significant changes, tell account holders by email.