Last updated: 2026-09-27
Meetora is operated by Keeada AB (org. no. 559245-1958), Modulvägen 6, 141 75 Kungens Kurva, Sweden ("we", "us"). We are the controller for the personal data of Meetora account holders, for our own newsletter, for privacy requests and for the security of the service. Officeo AB (org. no. 556848-6962) is our parent company; it is not the controller of Meetora personal data. See the Legal information page for full company details.
Companies and organisations that use Meetora to collect leads and contacts (for example exhibitors at a trade show) are the controllers of the contact records they create. For those records we act as their processor and only process the data on their instructions.
| Data | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|
| Account: name, email, phone, title, company, profile, password (hashed) | Create and run your account, sessions, contacts and follow-ups | Contract (6.1 b) |
| Billing details, invoices | Invoicing and bookkeeping | Contract (6.1 b), legal obligation (6.1 c, Swedish Bookkeeping Act) |
| Meetora newsletter | Product news and offers by email | Consent (6.1 a). We only send to people with a recorded opt-in; every email has an unsubscribe link. |
| Contacts you save (business card, badge, QR, desk scan, notes) | Your organisation's business follow-up after a meeting | The customer's legitimate interest (6.1 f); we are processor |
| Approximate location ("Nearby") | Show people near you at an event | Consent (6.1 a); off by default, can be switched off at any time |
| Meeting photos at a Meetora Desk | Photo memory of a booth meeting | Consent of both exhibitor and visitor (6.1 a); the visitor can review and delete the photo |
| Privacy requests and suppression list (hashed email) | Handle your rights and make sure erased or unsubscribed people stay that way | Legal obligation (6.1 c) |
| Technical logs, security events | Security, abuse prevention, troubleshooting | Legitimate interest (6.1 f) |
When you meet an exhibitor or another Meetora user, they may save your details by photographing your business card, scanning your badge or QR code, or entering them by hand. In that case the data comes from you indirectly (GDPR art. 14).
Meetora uses AI models to help users. The AI never makes decisions with legal or similarly significant effects about you (GDPR art. 22).
Our AI provider processes the data as our sub-processor, does not use it to train models and does not retain prompts or outputs after the request.
We do not sell personal data. We share it only with:
Account data is kept while your account exists and deleted when you delete your account (in the app under Profile). Accounting records are kept for 7 years as required by the Swedish Bookkeeping Act. Other data is deleted or anonymised automatically:
| Data | Kept for | Then |
|---|---|---|
| Business card images (photos of paper cards) | 90 days after capture | Image file deleted from storage; the extracted contact details stay in the contact. |
| Meetora Desk raw capture data (card image, raw scan value, OCR field set) | 90 days after capture | Raw image, raw value and OCR field set cleared; the contact and interaction stay. |
| AI outputs about a contact (mutual tips, profile answers) and AI company summaries | 12 months after generation | AI output cleared; it can be regenerated on request. |
| AI-drafted follow-up emails stored on follow-up tasks | 12 months after creation | Draft text cleared; the follow-up task stays. |
| Contacts with no interaction | 36 months after the last interaction | Contact anonymised (name, email, phone, notes, images and AI outputs removed). |
| Privacy requests never confirmed by the requester | 30 days after submission | Request deleted. |
| Completed or refused privacy requests (proof of handling) | 36 months after completion | Request deleted; only the hashed suppression entry (if any) remains. |
An organisation that is controller for its contacts may delete them earlier.
You have the right to access your data, get a copy in a portable format, have it corrected or erased, restrict its processing and object to processing based on legitimate interest. You can always object to marketing and withdraw a consent without affecting earlier processing.
Use our privacy request form. We confirm your email address before acting and answer within one month (extendable by two months for complex requests; we will tell you why). Every newsletter has an unsubscribe link that works immediately.
You can complain to the Swedish Authority for Privacy Protection (IMY), www.imy.se, or to the supervisory authority where you live.
Data is encrypted in transit, passwords are hashed, stored files are private and shared through short-lived signed links, and access inside an organisation is limited by role. No method of transmission is 100% secure.
We update this policy when our processing changes and show the date at the top. Questions and requests: use the privacy request form or write to Keeada AB, Modulvägen 6, 141 75 Kungens Kurva, Sweden.