How we handle your data.
01 Introduction
This policy explains what personal information Exhibit Software ("Exhibit," "we," "us") collects through our website, dashboard, and client software (together, "the Service"), why we collect it, and the choices you have. It should be read alongside our Terms of Service.
We aim to handle personal information consistently with the Australian Privacy Principles. If you're in a jurisdiction with its own data protection law (such as the EU/UK GDPR or a US state privacy law), you may have additional rights under that law, contact us and we'll do our best to help.
02 What we collect
We only collect what the Service actually needs to run, license, and support your account. In general, this falls into a few broad categories:
- Account details, like your username, email address, and password, used to create and secure your account and sign you in. Your password is never visible to us in plain text.
- Device and network information, used to protect your license from being shared across accounts or machines, and to investigate fraud and abuse.
- Activity records, tied to your account, such as sign-ins and license or support history, used for security, troubleshooting, and keeping the public counters on our homepage accurate.
- Support communications, like ticket messages you send us, used to respond to you and keep a record of past support.
- Client settings, that you choose to save to your account, used to let you sync and restore your own configuration.
- Payment status, such as which plan you're on and whether it's active. Card numbers are never seen or stored by us directly.
03 Third parties we use
We don't sell your data, and we don't use ad networks or third-party analytics trackers. A small number of trusted providers process data on our behalf to help us run the Service securely, including payment processing, account authentication, database hosting, and bot/abuse protection on our login and registration forms. Each is bound by its own privacy policy for the data it handles on our behalf.
If you contact us through Discord, that conversation is also subject to Discord's own privacy policy.
04 Cookies
We use a single first-party session cookie to keep you signed in to the dashboard. It's essential to the Service working and isn't used for advertising or cross-site tracking. We don't run any analytics or marketing cookies.
05 Data retention
We keep account and license data for as long as your account exists, and event/security logs for a limited period afterward where needed for fraud prevention, dispute handling, or legal compliance. If you ask us to delete your account, we'll remove or anonymize personal data we're not otherwise required to keep.
06 Your rights
Depending on where you're located, you may have the right to access, correct, or request deletion of your personal information, or to ask what we hold about you. To make a request, open a ticket on our Discord or from your dashboard. We'll verify you're the account holder before acting on a request.
Deleting data tied to an active investigation into a Terms of Service violation may be delayed until that investigation is resolved.
07 Security
We use industry-standard measures to protect your data, including encryption in transit, hashed passwords (never stored or visible in plain text), and access controls limiting who on our team can see account data. No method of storage or transmission is completely secure, and we can't guarantee absolute security.
08 Children's privacy
The Service isn't intended for anyone under 18, consistent with our Terms of Service, and we don't knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we'll delete it.
09 Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page. Continued use of the Service after a change means you accept the updated policy.
10 Contact
Questions about this policy, or a request about your data? Join our Discord and open a ticket, or register an account and open one from your dashboard.
Exhibit