Privacy Policy

About Prexpo

Prexpo AB ("Prexpo", "we", "us") is responsible for the processing of personal data described in this Privacy Policy.

Information we collect

When you request an activation, we collect the information you provide through the activation request form:

• • name;
• • email address;
• • brokerage;
• • property address or listing URL, desired timing and message, if provided.

We also record the submission time, request reference and follow-up status. We review requests personally and follow up by email.

On property pages, submitted feedback includes your selected answers, optional free text, a feedback reference, the property and responsible broker, and submission time. Feedback is saved when you choose to send it. If you separately submit a property enquiry, we also save your name, the email address and/or telephone number you provide, an enquiry reference linked to your feedback, and any optional budget response. Your submitted contact details and answers are shared with the named responsible broker for follow-up. Feedback alone does not create a broker enquiry. Draft answers and contact details are retained in your browser session while you complete the journey.

We also record limited operational information relating to your request, such as when it was submitted, its follow-up status and internal notes relating to our communication with you.

We may also process personal data that you provide when you communicate with us directly, for example by email.

Our website and hosting providers may process limited technical information necessary to deliver, operate and secure the website, such as request and security logs. We do not add browser, device, location or behavioural tracking data to your activation request record.

How we use your information

We use personal data to:

• • review and respond to activation requests;
• • communicate with you about Prexpo and potential collaboration;
• • evaluate whether Prexpo is relevant for you or your organisation;
• • manage relationships with brokers, property owners and strategic partners;
• • operate, protect and improve our website and services;
• • comply with applicable legal obligations.

We do not use information submitted through activation request to make solely automated decisions that produce legal or similarly significant effects.

Legal basis

When you request an activation or contact us, we generally process your personal data based on our legitimate interests in responding to enquiries, evaluating potential users and partners, developing our business relationships and operating Prexpo.

Where processing is necessary to enter into or perform an agreement with you, we may process information on that basis.

We may also process information where necessary to comply with a legal obligation.

Where applicable law requires consent for a particular type of processing, we will request consent before carrying out that processing.

How long we keep your information

We keep personal data only for as long as necessary for the purposes for which it was collected.

If a activation request submission does not result in an active business relationship, we generally retain the information for up to 24 months after our last meaningful contact with you, after which it will be deleted or anonymised unless we have a reason or legal obligation to retain it for longer.

If you enter into an ongoing relationship with Prexpo, relevant information may be retained for the duration of that relationship and afterwards for as long as necessary to meet legal, accounting, contractual or legitimate business requirements.

Who we share information with

We use trusted service providers to operate our website, infrastructure, data storage and business communications.

At launch, these include:

• Vercel, which hosts and delivers the Prexpo website and server-side activation request functionality; and

• Google, whose Google Cloud and Google Sheets services are used to securely authenticate and store activation request submissions, and whose Google Workspace services support our business communications and collaboration.

These providers process personal data subject to their respective roles, agreements and applicable data-protection obligations.

For a property enquiry, the responsible broker identified before submission receives your contact details, submitted answers and any budget response to handle your enquiry.

We may also disclose information where required by law or where necessary to establish, exercise or defend legal claims.

We do not sell your personal data.

International data transfers

Some service providers we use may process or make personal data accessible outside the European Economic Area.

Where personal data is transferred outside the EEA, we rely on an applicable legal transfer mechanism, such as an adequacy decision or appropriate safeguards including the European Commission's Standard Contractual Clauses, where required.

Your rights

Under applicable data protection law, you may have the right to:

• • request access to the personal data we hold about you;
• • request correction of inaccurate or incomplete information;
• • request deletion of your personal data;
• • request restriction of certain processing;
• • object to processing based on legitimate interests;
• • receive certain personal data in a portable format where applicable;
• • withdraw consent where processing is based on consent.

These rights are subject to the conditions and limitations provided by applicable law.

To exercise your rights or ask a question about our use of personal data, contact hello@prexpo.ai.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or another competent supervisory authority.

Security

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure.

activation request submissions are sent through server-side infrastructure and stored in Google Sheets. Authentication between the Prexpo website infrastructure and Google uses short-lived federated credentials rather than long-lived service-account private keys.

Cookies and similar technologies

At launch, Prexpo does not use analytics or advertising cookies on the public website.

We may use technologies that are strictly necessary to deliver, operate and secure the website.

If we later introduce analytics, advertising or other non-essential cookies or similar technologies, we will update this policy and, where required, obtain consent before using them.

Changes to this policy

We may update this Privacy Policy as Prexpo and our services develop.

The current version will always be available on this page, together with the date it was last updated.

Contact