Infillion Privacy Policy

1. INTRODUCTION

This Privacy Policy applies globally to all collection of personal information (sometimes called Personal Data), including applications, websites (including the Infillion.com website referred to herein as the “Site”), and the online, connected tv and mobile advertising and data services (collectively, the “Services”) offered by Infillion Inc. and its affiliates (“Infillion” or “we”). We developed this Privacy Policy to describe how we collect, use and disclose information from and about you. If you do not agree to every provision of this Privacy Policy and the related terms of service, you should not access or use the Sites or the Services.

This Site and the Services offered by Infillion are for a general audience, are not targeted to children, and we do not knowingly collect personal information from children under 18 years of age.

This Privacy Policy applies to Infillion’s collection and use of your Personal Data.
Personal Data includes data identifiers such as:

• Your first and last name;
• Email address;
• Unique online identifiers (e.g., cookie IDs);
• Device identifiers (e.g., IDs for mobile advertising); and
• Location data (e.g., latitude and longitude).

Data that does not contain any information that can be used to identify you or has otherwise been anonymized or aggregated is considered “Non-Personal Data.”  Infillion commits not to reidentify Personal Data that has been deidentified.

You can exercise certain rights regarding your personal information as described in the ADDITIONAL INFORMATION FOR RESIDENTS OF CERTAIN STATES and EEA & UK USERS sections below.  Users in certain jurisdictions, such as residents of a U.S. state with a comprehensive consumer privacy law, the European Union and the United Kingdom, have specific rights which are set forth below.

With respect to the personal information that our clients and their vendors collect from you outside of our Site and provide to us via use of the Services (“Service Data”), where permitted by law, we process such information only as a “service provider” or “data processor” (as those terms are defined under applicable data protection laws) on behalf of our clients, who act as the “business” or “data controller” (as those terms are defined under applicable data protection laws). In such cases, our clients are the parties that control the use of the Service Data and determine the purposes for which we process such information. While this Privacy Policy describes how we process Service Data on behalf of our clients, our clients are responsible for their own practices in collecting, using, and disclosing information they collect from you. To learn more about such clients’ use of your information and your rights that you may have over such information, please consult the privacy policy of the applicable company or publisher.

2. COLLECTION OF INFORMATION

Infillion collects data directly from you when you provide it to us, automatically as you navigate through the Site, or we receive it from our third parties as part of the Services. Infillion may collect the following information from and about you:

Site Contact Information. The information you may submit to the Site, for example, to obtain information about our Services. Contact information may include personal identifiers, for example, name and email address.

Site Activity Information. When you access and interact with the Site, Infillion and our service providers may collect certain information about those visits, including internet or other similar network activity. For example, in order to permit your connection to the Site, our servers receive and record information about your computer, device, and browser, including potentially your IP address, browser type, authentication identifiers, and other software or hardware information. If you access the Site from a mobile or other device, we may collect a unique device identifier assigned to that device, geolocation data, or other transactional information for that device in order to provide the Site to it.

Cookies and other tracking technologies (such as browser cookies or pixels), which are comprised of small bits of data that often include a de-identified or anonymous unique identifier may also be used. Websites, apps and other services send this data to your browser when you first request a web page and then store the data on your computer or other device so the website, app or other service can access information when you make subsequent requests for pages from that website, app or other service. These technologies may also be used to collect and store information about your usage of the Site, such as pages you have visited, the videos and other content you have viewed and advertisements you have seen. Cookies and other tracking technologies may also be used by us or by our service providers to collect and store information on your use of other companies’ websites or services, such as sites you visit and materials you view. We may merge this with other data we collect about you from third parties to assist us in our ability to provide the Site and our Services, including, without limitation, to advertise and provide content to you.

Third parties that provide services to Infillion, such as allowing you to share content or tracking aggregate Site usage statistics, may also use these technologies to collect similar information when you use the Site or third party services. Infillion does not control these third party technologies and their use is governed by the privacy policies of third parties using such technologies.

Data From Third Parties. We also receive other data (e.g., demographic information and digital identifiers) from third parties or through analytical techniques that we combine with the data we collect or derive through the Services. We also may receive data from third parties including:

• Business Partners, Developers & Enterprise Customers: This includes third parties who create and deliver experiences using our Services, such as the incorporation of our technology (i.e., SDK or APIs) into their apps and websites. In some cases, these third parties may license data to us.
• Data Suppliers and/or Brokers and Advertising Networks: This includes third parties who provide us commercially available data, including demographic data, data about how you interact with a third party’s websites, apps, smart TVs and streaming devices, device data (including mobile device and advertising identifiers, such as Apple IDFA or Google Advertising ID, and location data), and information from cookies, pixels and other similar technologies.
• Infillion Service Providers: This includes third parties who specialize in providing enterprise data, analytics and software as a service. This data tends to be aggregated, pseudonymized or otherwise de-identified.

Information from Other Sources. We also combine and bundle data collected from these different sources, as well as from Infillion affiliates, and create inferences in order to deliver, maintain, and personalize our Services, and to operate our business. You can learn more about Infillion’s data collection, including categories, examples and sources, in the chart below.

Data Category	Data Examples	Data Source
Identifiers / Contact Data (including personal information categories as may be listed by state statute)	Name, email address, phone number, date of birth, address, and other similar contact data.	You Choose to Provide
Demographic Data (including protected classification characteristics under the law)	Gender, age, preferred language, income brackets, occupation, educational status, marital status or other similar information about you.	You Choose to Provide; Data From Third Parties
Geolocation Data	If you opt-in to sharing your precise or approximate location, we receive data about your location whenever you use apps or visit websites incorporating our Services.	You Choose to Provide
Internet and Other Network Activity Data	Internet and other electronic network activity data, or data regarding your interaction with websites or advertisements (or those of third parties), and viewing information connected TVs. This data may come from cookies, pixels, web beacons, and/or other technologies. You can control certain types of cookies through your browser settings or other tools.	Automatically Collected; Data From Third Parties
Device Data & Identifiers	Unique device identifiers (e.g., mobile device advertising identifiers such as Apple IDFA or Google Advertising ID), or connected/smart TV or streaming device identifiers, device model, operating system and version, sensor data, language, and wireless network, device name, types of mobile apps installed, or other identifiers such as hashed email addresses.	Automatically Collected Data From Third Parties
Inferences drawn from other personal information	Profiles that reflect a person’s preferences characteristics, predispositions, behavior, attitudes	You Choose to Provide; Automatically Collected; Data From Third Parties
Sensitive personal information	Precise geolocation when opted-in	You Choose to Provide

When we collect data, we rely on several legal bases, these include:

• Contract Performance. When the processing is necessary to perform our contract with you.
• Legitimate Interests. When the processing is necessary for our legitimate business interests (or those of our enterprise customers).
• Consent. When you have given us your consent, including as described in this Privacy Policy.
• Legal Obligation. When we have a legal obligation to do so, as described in this Privacy Policy.

3. USE AND SHARING

We may use the personal information and other information we collect from and about you for the following purposes:

To provide and manage the Site. Infillion and our service providers use the information we collect from and about you to provide the Site and features to you, including, for example, to measure and improve the Site and its features. We may also use aggregated or anonymous data about your use of and activity on the Site to assist us in this regard.

To allow service providers to assist us in providing and managing the Site. Infillion may make the information we collect from and about you available to certain third-party service providers, such as contractors, analytics and other measurement companies, agents or sponsors, who help us analyze and understand your use of the Site and manage and/or provide the Site.

To contact you. Infillion may periodically send promotional materials or notifications related to the Site to the email address you may have provided to us. If you want to stop receiving such promotional materials, please send an email to privacy @ infillion.com or unsubscribe through the designated options in the materials or notifications.

 Product & Service Development. We conduct data analytics and use automated processing, artificial intelligence and machine learning to support internal research, create new products and services, improve functionality of existing products and services, and develop new features such as those developed to enhance security and protect privacy. We use your data, along with inferences that we derive from your data, to offer products and services to developers, our partners and enterprise customers. These product and service offerings include the following:

• Visits: When you opt-in to the collection and sharing of precise geolocation data from your mobile device, we use that data to create an inferred visit to a public location (“Visits”).
• Audiences (Segments): Using our Visits, along with inferences about your interests, location and other demographics that we derive from the data we have about you, we create “Audiences.” Audiences are then used to send you advertisements tailored to your interests.
• Points of Interest (POI): POI data relates to physical places (restaurants, shops, airports, hotels, etc.) and is used to identify and provide context to points of interest worldwide. This data is typically Non-Personal Data.
• Building our Identity Graph and Interest Segments: We also use the information we collect to build and improve our identity graph, which involves combining information collected across multiple sites, devices, and mobile apps to create profiles and interest segments that help us more effectively target future advertisements. We do so by establishing connections between a user’s devices, including by cookie matching and linking devices to common data or activities, sometimes based on assumptions. Cross-device connections allow Infillion to infer that a single user or household is accessing advertisements served or measured by Infillion from multiple devices and to better target advertising and measure the performance of advertisements across those devices. In building our identity graph and providing our Services, we may combine information we receive about you from third parties (including our affiliates) with other information that we hold about you. We and our clients use this combined information to create interest-based segments that we and our clients can use to display more relevant advertisements and other content to users.
• Providing Ad Services: We use the information we collect to provide our ad services, including to:
• Help our clients develop and execute digital advertising campaigns that reach their intended audiences;
• Enable technical delivery of our clients’ ads;
• Measure, evaluate, and report on the effectiveness of ads, such as by determining whether a user clicked on the ad or took another action after seeing the ad; and
• Limit the number of times a user sees the same ad (known as “frequency capping”).

Sharing with Your Consent or at Your Direction. We share your personal data with your consent or as necessary to complete any transaction or provide any product you have requested or authorized.

Sharing with Affiliates. We share data with other Infillion affiliates for the purposes outlined in this Privacy Policy.

Sharing with Service Providers & for Business Purposes. We share your data with service providers that perform services on our behalf, such as cloud storage, IT services, marketing, analytics and search engine and other software services.

Sharing with Enterprise Customers. We share data with enterprise customers that, for example, may use “Visits” combined with data that they collect to understand movement patterns to determine where to open a physical store, to conduct analytics, to serve targeted ads, and to determine whether an online or offline advertisement you were exposed to resulted in a visit to a physical store. Under certain privacy and data protection laws, this activity may be considered a “sale” of personal data.

Sharing with Advertising Partners. We may share data such as your mobile advertising identifier with advertising partners (including the ad networks, ad-serving companies and other service providers they may use) so that they may recognize your devices and deliver interest-based content and advertisements to you. This may include disclosure of certain information to publishers, or those operating on their behalf on the “supply” side of the advertising ecosystem, to aid with bidding on ad space and ad delivery. Under certain privacy and data protection laws, this activity may be considered a “sale” of personal data or a “share” of personal data for cross-context behavioral advertising.

Sharing for Corporate Transactions. We may also share data as part or in anticipation of a business sale, merger, consolidation, investment, change in control, transfer of substantial corporate assets, reorganization, liquidation, or similar business transaction or corporate event.

Disclosures of Sensitive Personal Information. We do not use or disclose sensitive personal information for purposes other than those specified by applicable regulatory authority.

4. SECURITY

Infillion uses commercially reasonable administrative, technical, personnel and physical measures to safeguard information in its possession against accidental loss, theft and unauthorized access, use, disclosure or modification. Although we do our best to protect your information, no one can guarantee the complete safety of your information.

5. USER CHOICES, ACCESS AND CONTROL

We strive to provide you with choices regarding the personal information you provide to us through the Site or our Services. We have created mechanisms to provide you with the following control over your information:

• Access, Correction, or Deletion. If you would like to access, review, correct, update, suppress, delete, or otherwise limit our use of your personal information, including sensitive personal information, please fill out this form or contact us via email at privacy @ infillion.com. In your request, please include your name and specify clearly what information you would like to access, change, update and/or whether you would like to have your personal information suppressed, limited, or deleted from our database, or if you have other questions about your personal information.
• Tracking Technologies and Advertising. Most browsers are initially set to accept cookies, but you can change your settings to notify you when a cookie is being set or updated, or to block cookies altogether. Please consult the “Help” section of your browser for more information. Please note that by blocking any or all cookies you may not have access to certain features, content or personalization available through the Site.
• Promotional Offers from Infillion. If you do not wish to have your email address or other contact information used by Infillion to promote our own or third parties’ products or services, you can opt-out by sending us an email stating your request to privacy @ infillion.com. If we have sent you a promotional email, you may send us a return email asking to be omitted from future email distributions. This opt out does not apply to information provided to Infillion as a result of a product purchase, warranty registration, product service experience or other transactions.

6. DATA RETENTION

To the extent permitted by applicable law, we keep the personal data you provide for the purposes indicated in this Privacy Policy for the duration of our legitimate business purposes or to comply with the applicable statute of limitations periods and other applicable laws or legal considerations. You may ask us to delete that information by following the instructions in “Access, Correction, or Deletion” section.

The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you and provide services to you (for example, for as long as you are a client with us or keep using our Services) and the length of time thereafter during which we may have a legitimate need to reference your personal information to address issues that may arise;
• Whether there is a legal or ethical obligation to which we are subject (for example, certain laws require us to keep records for a certain period of time before we can delete them); or
• Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

7. OTHER IMPORTANT INFORMATION

Means of Notice and Choice. This Privacy Policy is the primary means by which Infillion provides you with notice and choice regarding its collection and use of your personal information.

Updates to Privacy Policy. Infillion may modify this Privacy Policy from time to time. Please look at the Last Reviewed Date at the top of this Privacy Policy to see when this Privacy Policy was last revised. Any changes to this Privacy Policy will become effective when we post the revised Privacy Policy on the Site.

Location of Data. The Site and our Services are hosted in and managed from the United States. If you are a user located outside the United States, you understand and consent to having any personal information transferred to and processed in the United States. United States data protection and other relevant laws may not be the same as those in your jurisdiction. This includes the use of cookies and other tracking technologies as described above. As a result, please read this Privacy Policy with care.  Data stored in the USA may be subject to lawful requests by the courts or law enforcement authorities in the USA.

Linked Services. The Site or Services may also link, or be linked, to sites or services operated by unaffiliated companies, and may carry advertisements or offer content, functionality, games, newsletters, contests or sweepstakes, or applications developed and maintained by unaffiliated companies. Infillion is not responsible for the privacy practices of unaffiliated companies, and once you leave the Site via a link, enable an unaffiliated service or click an advertisement you should check the applicable privacy policy of the unaffiliated service.

In addition, Infillion is not responsible for the privacy or data security practices of other organizations, including but not limited to any other app developer, app provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer, including in connection with any information you disclose to other organizations through or in connection with the Site or Services.

Special Categories of Information under the GDPR.  We ask that you not send us, and you not disclose, any special categories of personal information under the GDPR (such as government identifiers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, criminal background or trade union membership) on or through the Site or otherwise.

8.  ADDITIONAL INFORMATION FOR RESIDENTS OF CERTAIN STATES

Numerous states, including California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia and other states (“Covered States”), have enacted consumer privacy laws that grant their residents certain rights and require additional disclosures (“State Privacy Laws”). If you are a resident of a Covered State, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations.  To be clear, these rights are granted only to the extent that you are considered a consumer of a Covered State and we are acting as a “controller” or “business” (as applicable) under State Privacy Laws with respect to your personal information.

• The right to know the categories and specific pieces of personal information we collect, use, disclose, and sell about you, the categories of sources from which we collected your personal information, our purposes for collecting or selling your personal information, the categories of your personal information that we have either sold or disclosed for a business purpose, and the categories of third parties with which we have shared personal information;
• The right to request that we delete the personal information we have collected from you or maintain about you.
• The right to correct any inaccurate personal information we may have collected from you or maintain about you.
• The right to opt out of our sale(s) of your personal information or sharing of your personal information for cross-context behavioral marketing purposes. Please note that if you opt out of certain types of sales or sharing, we will be unable to provide you with the services that rely on such sales or sharing.
• The right to limit the use of sensitive personal information.
• The right not to receive discriminatory treatment for the exercise of the privacy rights.
• Certain State Privacy Laws include additional rights, such as the right to know the third parties with whom your personal information has been shared.

To exercise any of the above rights, please contact us and submit the required verifying information by filling out this form or contacting us via email at privacy @ infillion.com. Only you or an authorized agent may make a request related to your personal information. To designate an authorized agent to make a request on your behalf, please provide us with a power of attorney or other legally binding written document signed by you and identifying your agent via email to privacy @ infillion.com. We may also verify the identity of your designated agent.

In order to protect the security of your personal information, we will not honor a request if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. The method used to verify your identity will vary depending on the nature of the request. Generally speaking, verification will be performed by confirming that you are the owner of the email address to which the request relates.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

We will make every effort to respond to your request within 45 days from when you contacted us. If you have a complex request, the State Privacy Laws allow us up to 90 days to respond. We will still contact you within 45 days from when you contacted us to let you know we need more time to respond.

If we decline to take action on a request that you have submitted, we will inform you of our reasons for doing so, and provide instructions for how to appeal the decision. Depending on your state of residence you may have the right to appeal within a reasonable period of time after you have received our decision. If you have this appeal right, within 60 days (45 days for residents of Colorado) of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If we deny your appeal, we will provide you with a method for contacting your state attorney general’s office to submit a complaint.

Shine the Light. California’s “Shine the Light” law (Civil Code Section § 1798.83) permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to privacy @ infillion.com.

Metrics Reporting. California law requires that we provide certain metrics about consumer rights requests received in the previous calendar year. The metrics provided below include requests Infillion has received globally for the 2024 calendar year.

• Requests to Opt-Out: 9 received, all of which were completed.
• Requests to Know: 3 received, of which 0 were completed and 3 were not verified.
• Requests to Delete: 82 received, of which 75 were completed and 7 were not verified.
• Requests to Correct: 0 received, of which 0 were completed and 0 were not verified.
• Requests to Limit: 0 received.
• Infillion took an average of 14 days to fulfill each request.

Additional Information for Texas Residents. Where required by applicable law, we are registered as a data broker.  Infillion Inc. is a data broker under Texas Law. To conduct business in Texas, a data broker must register with the Texas Secretary of State (Texas SOS). Information about data broker registrants is available on the Texas SOS website.

9. EEA & UK Users

If you are a situated in the European Economic Area, United Kingdom or Switzerland and the General Data Protection Regulation (“GDPR”) or a similar law applies, as a data subject, you have the following rights:

• Right to access – This right allows individuals to obtain confirmation as to whether or not personal data concerning them is being processed and provide access to such personal data. It also allows individuals to request details of the processing of their personal data including, without limitation, categories of recipients to whom the personal data have been or will be disclosed and purposes of processing.
• Right to rectify – This right allows individuals to rectify any inaccurate personal data about them.
• Right to restrict processing – This right allows individuals to block or suppress processing of personal data under certain circumstances.
• Right to be forgotten – This right is also known as the “right to erasure”. It is an individual’s right to have personal data erased or to prevent processing in specific circumstances.
• Right of data portability – This right allows individuals to move, copy or transfer personal data from one place to another in a secure manner without interrupting the integrity and usability of the information.
• Right to object to processing – This right allows individuals to object to certain types of processing, including direct marketing, profiling and providing for purposes of scientific or historical research and statistics.

 

Infillion Inc. is the Controller of all personal data we collect through the Site.

We shall only process your personal data pursuant to a lawful basis, which will usually be with your consent, when we have a legitimate interest, or to perform a contract to which we are subject.  Additionally, if we rely on consent for the processing of your personal data, you have the right to withdraw it at any time and free of charge. When you do so, this will not affect the lawfulness of the processing before your consent withdrawal.

To exercise your rights under the GDPR, please contact us at privacy @ infillion.com. Please note that in order for you to assert these rights, we may need to verify your identity to confirm your right to access your personal data.  This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. In order to verify your identity, we may need to gather more personal data from you than we currently have.

If you are situated in the EU, UK or Switzerland and have any complaints regarding our privacy practices, you have the right to complain to a supervisory authority.

10. CONTACT US

If you have questions about this Privacy Policy, please contact us via email at privacy @ infillion.com or you may contact us by mail at: Office of the General Counsel at Infillion, 382 NE 191st Street, PMB 62545, Miami, Florida, 33179-3899.