Privacy Policy
This policy explains what personal data the Exposcale platform processes, why, and what rights you have. Controllers are EXPOSCALE AGENCY LLP (wallet and top-up services) and EXPOSCALE CONSULTANCY - FZCO (store sales), each for its own services; contact for both: maximilian@expo-scale.org.
1. What we process
| Category | Examples | Why |
|---|---|---|
| Account data | Name, email, password (hashed), company, VAT number, billing address | Providing the service, invoicing, B2B tax treatment |
| Transaction data | Deposits, wallet ledger entries, top-ups, withdrawals, invoices, store purchases and receipts | Contract performance, accounting obligations, fraud prevention |
| Ad account data | Assigned account identifiers, balances, spend, statuses | The dashboard itself |
| Support data | Messages you send to support, including via the assistant | Answering you |
| Technical data | IP address, session and security logs | Security, abuse and fraud prevention |
| Consent records | Timestamp and version of the terms you accepted | Evidence of the agreement |
2. Processors and recipients
We share data with service providers only as needed to run the platform:
- Whop — payment processing for store purchases (card data is handled by Whop, never by us);
- Airwallex — receiving bank deposits and paying out withdrawals;
- Supplier partners — provisioning and funding the advertising accounts assigned to you;
- Anthropic — the optional support assistant processes the text of your support questions together with your account context to draft answers; a human can always take over;
- Infrastructure providers — hosting (EU data centre), email delivery, and error monitoring.
We do not sell personal data and we do not use it for third-party advertising.
3. Legal bases
Contract performance (the service itself), legal obligation (accounting and tax records), and legitimate interests (security, fraud prevention, defending claims). Where consent is the basis — for example optional communications — you can withdraw it at any time.
4. Retention
Account data is kept while your account exists. Transaction records, invoices and receipts are kept for the statutory retention periods that apply to the issuing entity (typically 6–10 years). Security logs are kept briefly and rotated. When nothing requires longer retention, data is deleted or anonymised.
5. International transfers
The platform is hosted in the European Union. Some processors (for example Whop) operate from other jurisdictions; where personal data leaves the EEA/UK we rely on adequacy decisions or standard contractual clauses.
6. Your rights
Depending on where you are, you have rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to a supervisory authority. Write to maximilian@expo-scale.org — we answer within the statutory deadline. Erasure requests are honoured except where retention is legally required (for example, issued invoices).
7. Cookies
The platform uses strictly necessary cookies only: the session cookie, the CSRF token, and — if you arrive through a partner link — a 30-day referral cookie that attributes your signup to the partner who referred you. There is no third-party analytics or advertising tracking on the platform.
8. Changes
The version shown above identifies this text. Material changes are announced in the dashboard or by email.