Last updated: 14 July 2026
This Privacy Policy explains how Coexa (“Coexa”, “we”, “us”) collects, uses, stores, and protects information in connection with the Coexa mobile application and related backend services (together, the “Service”). It applies to everyone who creates a Coexa account and uses the Service.
Coexa is a lead-capture and follow-up tool for travel trade-show professionals. By using the Service, you agree to the practices described in this policy.
The Service is operated by Coexa. For any privacy question or request, contact us at info@tecnoglare.com.
You sign in with Google. When you do, we receive and store your Google account’s email address, name, profile photo, and Google account identifier. We use these to create and secure your account and to keep you signed in. We do not receive or store your Google password.
Details you add to your profile — such as your name, company, title, phone number, and email signature — so that outreach you send reflects you.
The core purpose of Coexa is to help you capture and follow up with the leads you meet. When you use the Service you may provide information about those leads, including:
For in-app credit purchases, Apple or Google Play handles payment. Coexa verifies the purchase with the store and keeps the product and order references, credit pack, amount, currency, purchase time and refund status for delivery, accounting and fraud prevention. We do not receive your full payment-card number. We share the purchase reference with the relevant store for verification.
When your app or browser communicates with our servers, our infrastructure may record basic technical data such as your IP address and request logs, for security, debugging, and abuse prevention. These logs are short-lived.
To read business cards and transcribe voice notes, Coexa sends the relevant image or audio you capture to the Google Gemini API, which performs optical character recognition, transcription, and information extraction, and helps draft suggested messages. Only the content needed to perform the task is sent. Your Google sign-in data and account credentials are never sent to the AI provider for this purpose.
If you connect Gmail, Coexa uses the Gmail API to send the emails you compose. Automatic reply detection is available only where the connected account permits thread reads. If reply state cannot be checked, a sequence configured to stop on reply pauses automatic delivery. Otherwise, use the manual replied/stop controls. Coexa’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Gmail data for advertising, we do not sell it, and we do not allow humans to read it except where required for security, to comply with the law, or with your explicit consent.
We do not sell your personal information or your leads. We share information only as needed to run the Service:
We may also disclose information if required by law, to respond to legal process, to enforce our terms, or to protect the rights, property, or safety of Coexa, our users, or the public.
Coexa lets you invite other Coexa users to your team. A team link is created only after the invited person accepts your request in the app. Once accepted, you can view that member’s leads and temporarily use the app as them (“view as”) to help manage their pipeline. Visibility is one-directional and one hop only: the people on your team do not gain access to your leads, and you do not gain access to your members’ own separate teams. Any member can leave a team at any time, which immediately revokes that access.
Your data is stored in a PostgreSQL database on our own private server (VPS). We do not use Supabase or any third-party database-as-a-service for your account data. All communication with the Service uses HTTPS/TLS. Sessions are secured with signed tokens that expire after 30 days.
The in-app account closure action deactivates your account and prevents further sign-in. It does not currently erase your stored contacts, messages, transcripts, media, account records or backups. These records are retained at present. To request erasure or ask about retention, contact info@tecnoglare.com. Erasure requests require a separate review, including any applicable record-retention duties.
Depending on where you live, you may have rights over your personal data, including under the EU/UK General Data Protection Regulation (GDPR). These include the right to:
You can update your profile and deactivate your account directly in the app. For any other request, email info@tecnoglare.com and we will respond within a reasonable time.
Because leads you capture are your data as controller, requests from those individuals should generally be directed to you; we will assist you as your processor.
Your information may be processed and stored in countries other than your own (for example, by Google’s API infrastructure). Data-protection laws vary by country. Where required, we rely on appropriate safeguards for such transfers.
The Service is intended for business use by adults and is not directed to anyone under the age of 18. We do not knowingly collect personal data from children.
We may update this policy from time to time. When we do, we will revise the “Last updated” date above. Significant changes may be communicated in the app. Your continued use of the Service after a change means you accept the updated policy.
Questions about this policy or your data? Email info@tecnoglare.com.