Data Deletion Policy

Last updated: April 22, 2026

In accordance with the General Data Protection Regulation (GDPR — Article 17), you have the right to request the deletion of your personal data. This document describes the deletion procedure, the data concerned, and the applicable legal exceptions.

1. How to request account deletion

Option 1 — From the app

1. Open Expozart and go to your Profile.
2. Navigate to Settings.
3. Tap Delete my account.
4. Confirm your choice. Deletion is irreversible.

Option 2 — By email

Send an email to contact@expozart.com with:

• Subject: "Account deletion request"
• The email address associated with your Expozart account
• A piece of identification (optional, only requested if we cannot verify your identity otherwise)

We will process your request within 30 days.

2. What happens during deletion

The deletion of your account takes place in two phases:

Phase 1 — Immediate archiving (day of the request)

Upon confirmation of your request:

• Your profile becomes invisible to all users.
• Your account is marked as archived (is_archived).
• Your published events are unpublished (no longer visible in searches).
• Your pending applications are cancelled.
• You are removed from the list of confirmed exhibitors for upcoming events.
• Your push notification tokens (FCM) are deleted: you will no longer receive notifications.
• Your session is disconnected on all devices.
• Your active subscriptions are not automatically cancelled with Apple or Google. You must cancel your subscription directly from the App Store or Google Play Store to avoid any renewal.

Phase 2 — Permanent deletion (within 30 days)

Within 30 days of archiving:

3. Data retained after deletion

Certain data is retained beyond account deletion due to legal obligations:

This retained data is:

• Anonymized where possible (your name and email are dissociated from retained records).
• Not publicly accessible — it can only be consulted by the publisher in the context of its legal obligations or in response to a judicial request.
• Permanently deleted when the retention period expires.

4. Consequences of deletion

Deleting your account irreversibly results in:

• Loss of access to the application and all its features.
• Loss of your profile, gallery, and history.
• Cancellation of all your pending applications.
• Loss of your Verified status.
• Loss of your active boosts (non-refundable).
• Unsubscription from all conversations (your sent messages remain visible to other participants, in accordance with section 3).

Your premium subscription (if active) is not automatically cancelled. Remember to cancel your subscription with the App Store or Google Play Store before deleting your account.

5. Partial data deletion

You can also request the deletion of specific data without deleting your account:

• Photos: delete your profile or gallery photos directly from the app (Profile > Edit).
• Profile information: edit or clear your information from the profile editing screen.
• Notifications: delete your notifications individually from the Notifications screen.
• Verification: request the deletion of your verification data by email to contact@expozart.com.

6. Data portability

Before deleting your account, you can request a copy of your data in a machine-readable format (JSON), in accordance with Article 20 of the GDPR.

To do so, send an email to contact@expozart.com with the subject "Data portability request". We will provide your data within 30 days.

7. Complaint

If you believe your rights are not being respected, you can file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):

• Website: www.cnil.fr
• Address: 3, place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07

8. Contact

For any questions regarding the deletion of your data:

Email: contact@expozart.com

We are committed to responding to any request within 30 days.

This policy is effective as of April 22, 2026.