Privacy Policy
Last updated September 30, 2026
LINX is a lead retrieval service for trade shows and events, provided by Xtag Inc., a Florida corporation ("Xtag", "we", "us"). This policy explains what personal data LINX handles, why, who we share it with, and the choices and rights you have. It covers the LINX mobile apps, the web dashboard, the API and this website.
Privacy contact: info@xtag.com.
Two kinds of data, two roles
Account data. When you create a LINX account as an exhibitor, organizer or team member, Xtag decides how that data is used, so we are its controller.
Lead and attendee data. When an exhibitor captures a lead, or an organizer uploads an attendee list, that data belongs to the exhibitor or organizer, who is the controller. Xtag processes it only on their behalf and on their instructions, under our Data Processing Addendum. If you were scanned at an event and want to know what was collected, or want it changed or deleted, please contact the exhibitor who captured you. We will help them respond, and you may also write to us and we will pass your request on.
What we collect
- Account data: name, work email, job title, company, role at each event, preferences and notification settings. If you sign in with Google, we receive the name and email address Google shares with us.
- Lead data captured by exhibitors: contact details from a badge, business card or manual entry (name, title, company, email, phone), answers to qualification questions, notes, follow-up status, and a record of how, when and where the lead was captured.
- Attendee lists uploaded by organizers: the fields in the uploaded file, such as name, company, email, badge code and ticket type. Organizers choose which of these fields exhibitors can see.
- Enrichment (paid plans): publicly available professional information about a lead, such as role, company size and public company news. It is gathered with AI-assisted web search and stored with its sources.
- Billing data: Stripe handles payments. We receive the plan, subscription status, billing contact and card brand and last four digits. We never receive full card numbers.
- Technical data: IP address (stored with capture records), device type and app version, and security and error logs.
- Photos: business card and badge photos are read on the device. They are not stored by LINX unless an exhibitor's workspace has cloud card reading enabled, in which case the image is processed to extract text and is not kept.
How we use it, and our legal bases
| Purpose | Legal basis (EU/UK GDPR) |
|---|---|
| Providing LINX: accounts, capture, badge matching, scoring and research, CRM sync, exports, sign-in links and codes | Performance of our contract with you. For lead data, we act on the customer's instructions. |
| Service emails you can turn off in Settings: hot-lead alerts, daily summaries, follow-up reminders | Performance of contract / legitimate interests |
| Security, fraud and abuse prevention, debugging | Legitimate interests in running a safe service |
| Billing, tax and accounting | Contract and legal obligations |
| Improving the Service with aggregated, de-identified statistics | Legitimate interests |
| Responding to legal requests and enforcing our terms | Legal obligations / legitimate interests |
We do not sell personal data. We do not share it for cross-context behavioral advertising. We do not use lead or attendee data to train AI models. We do not send marketing emails to leads; exhibitors decide how to follow up with their own contacts.
AI and automated scoring
For paid plans, LINX uses AI to score leads (Hot, Warm or Cold) against goals the exhibitor sets, and to summarize public information about a lead. Scores are shown to the exhibitor as suggestions for prioritizing follow-up. They do not produce legal or similarly significant effects on the person scored, and the exhibitor's team makes all decisions. A person can object to this processing by contacting the exhibitor or us.
Service providers (subprocessors)
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services | Hosting, database and backups | Ireland (EU) |
| Stripe | Payments and subscriptions | United States / EU |
| Mailchimp Transactional (Mandrill, an Intuit company) | Sending LINX emails | United States |
| Anthropic | AI lead scoring, research and card-reading fallback; no training on our data | United States |
| Optional "Sign in with Google" | United States | |
| HubSpot, Salesforce, Zapier, Make or custom webhooks | Only when a customer connects them, for the data that customer chooses to sync | Per provider |
We may also disclose data if required by law, to protect rights and safety, or as part of a merger or acquisition, subject to this policy. We will notify customers before adding a new subprocessor that handles Customer Data, as described in the DPA.
Retention
- Account data is kept while the account is active and deleted when you delete your account (Settings → Delete account), except for records we must keep by law.
- Lead data is kept until the exhibitor deletes it, or automatically after the retention period the exhibitor sets.
- Deleted data is removed from LINX immediately and from backups within 14 days.
- Billing records are kept as long as tax and accounting law requires.
- Logs are rotated automatically and kept only for a short period.
- Copies an exhibitor has pushed to its own CRM are controlled by that exhibitor.
Security
Data is encrypted in transit with TLS 1.2 or newer. CRM credentials and webhook secrets are encrypted at rest, and mobile sign-in tokens are kept in the device's secure storage. Each exhibitor can access only its own leads. Production access is limited to authorized Xtag staff using key-based authentication from restricted networks. If a personal data breach affects your data, we will notify you without undue delay and as the law requires.
Cookies and similar technologies
This website sets no cookies and uses no analytics or advertising trackers. The web dashboard stores your sign-in token and display preference in your browser's local storage. These are needed for the dashboard to work and are not used for tracking. Stripe's checkout pages may set their own cookies for fraud prevention under Stripe's privacy policy.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, to withdraw consent where we rely on it, and to not be discriminated against for exercising these rights. Account holders can do much of this in LINX: edit your profile, export or delete leads, and delete your account. For anything else, email info@xtag.com. We may need to verify your identity. You may use an authorized agent where the law allows. We respond within the time the law requires, normally within 30 days. For lead data, we will forward your request to the exhibitor that controls it.
EU and UK residents can also complain to their local data protection authority.
California residents: in the last 12 months we collected the categories of data described above (identifiers, professional information, commercial information about purchases, internet activity limited to security logs, and inferences in the form of lead scores) for the business purposes described above. We did not sell or share personal information, and we do not knowingly collect sensitive personal information.
International transfers
LINX is hosted in the European Union (AWS, Ireland). Xtag Inc. is based in the United States, and some providers above process data in the United States. Where required, transfers rely on the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful safeguard.
Children
LINX is a business service and is not directed to children. We do not knowingly collect data from anyone under 16. If you believe a child's data was entered into LINX, contact us and we will delete it.
Changes
We will post changes here and update the date above. For material changes, we will notify account holders by email before they take effect.
Contact
Xtag Inc. · Privacy and legal: info@xtag.com · Product support: linx@xtag.com