1. Introduction
Adstractive (“we,” “us,” or “our”) operates the website https://adstractive.com/ and provides performance marketing, app marketing, and related digital advertising services. This Privacy Policy outlines how we collect, use, disclose, and protect personal data of visitors, clients, and partners. By accessing our website or using our services, you consent to the practices described herein.
2. Scope & Applicability
This policy applies to:
- Visitors of https://adstractive.com/.
- Clients engaging our services (e.g., app marketing campaigns, performance analytics).
- Partners, vendors, or third-party collaborators.
- Data collected via websites, mobile apps, email, contracts, or third-party platforms (e.g., Google Ads, Facebook Ads).
3. Types of Data Collected
3.1 Personal Data
- Voluntary Submission:
- Name, email, phone number, job title, company name.
- Billing details (address, tax ID, payment information).
- Client campaign data (target audience demographics, ad budgets, KPIs).
- Automated Collection:
- Device Information: IP address, browser type, operating system, device IDs (e.g., Android Advertising ID, Apple IDFA).
- Usage Data: Pages visited, time spent, clickstream data, referral URLs.
- Cookies & Tracking Technologies (see Section 5).
3.2 Non-Personal Data
Aggregated or anonymized data (e.g., campaign performance trends) that cannot identify individuals.
4. How We Use Your Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Deliver services (e.g., app install campaigns, ROI analysis). | Contractual necessity. |
| Respond to inquiries, negotiate contracts, and provide support. | Legitimate interests. |
| Analyze website traffic and optimize user experience. | Consent (for non-essential cookies). |
| Send marketing emails (e.g., newsletters, service updates). | Consent or legitimate interests. |
| Comply with legal obligations (e.g., tax laws, fraud prevention). | Legal requirement. |
| Share anonymized reports with partners for benchmarking. | Legitimate interests. |
5. Cookies & Tracking Technologies
5.1 Types of Cookies
- Essential: Necessary for website functionality (e.g., login sessions).
- Analytics: Google Analytics, Mixpanel (track usage patterns).
- Advertising: Facebook Pixel, LinkedIn Insight Tag (retargeting, conversion tracking).
- SDKs (Software Development Kits): Integrated into client apps for campaign attribution (e.g., Adjust, AppsFlyer).
5.2 Managing Preferences
- Browser Settings: Block or delete cookies via Chrome, Safari, etc.
- Consent Management Platforms (CMPs): Use tools like Cookiebot or OneTrust for granular opt-in/out.
- Mobile Opt-Outs: Adjust device advertising IDs (Android/iOS settings).
6. Data Sharing & Third Parties
We may disclose data to:
- Service Providers:
- Cloud hosting (AWS, Google Cloud).
- Payment processors (Stripe, PayPal).
- CRM platforms (HubSpot, Salesforce).
- Ad networks (Google Ads, Meta Ads).
- Legal Compliance: Respond to court orders, government requests, or enforce contracts.
- Business Transfers: Mergers, acquisitions, or asset sales.
- Client-Authorized Partners: With explicit consent (e.g., sharing campaign data with a client’s analytics team).
7. International Data Transfers
Data may be transferred globally. We ensure safeguards such as:
- Standard Contractual Clauses (SCCs) for EU/UK transfers.
- Privacy Shield compliance (where applicable).
- Data Processing Agreements (DPAs) with vendors.
8. Data Retention
We retain data only as necessary:
- Client Data: 5 years post-contract termination for tax/legal purposes.
- Prospect Data: 2 years after last interaction (unless consent is withdrawn).
- Cookies: Session cookies expire after browser closure; persistent cookies up to 24 months.
9. Your Rights
Under GDPR, CCPA, or other laws, you may:
- Access: Request a copy of your data.
- Rectification: Correct inaccurate information.
- Erasure: Delete data (subject to legal limitations).
- Restrict Processing: Limit how we use your data.
- Data Portability: Receive data in a machine-readable format.
- Opt-Out: Withdraw consent for marketing or object to processing.
- Non-Discrimination (CCPA): Exercise rights without penalty.
To Exercise Rights:
Email [privacy@adstractive.com] with proof of identity. We respond within 30 days.
10. Security Measures
- Technical: SSL/TLS encryption, firewalls, regular penetration testing.
- Administrative: Role-based access controls, employee training.
- Physical: Secure data centers with biometric access.
- Incident Response: Breach notification within 72 hours (where mandated).
11. Children’s Privacy
We do not knowingly collect data from individuals under 16 (or 13 under COPPA). Parents/guardians may contact us to remove unintentionally collected data.
12. Third-Party Links
Our website may link to external sites (e.g., case studies, partner blogs). We are not responsible for their privacy practices.
13. Updates to This Policy
We will notify users of material changes via email or website banners. Minor updates are effective immediately upon posting.
14. Contact & Complaints
Data Controller:
Adstractive
Address: [Physical Address]
Email: support@adstractive.com
Data Protection Authority:
You may lodge complaints with your local supervisory authority (e.g., ICO for UK, CNIL for France).
15. Jurisdiction-Specific Disclosures
- California (CCPA): We do not sell personal data but disclose cookies for targeted ads. Opt-out via Contact link.
- Brazil (LGPD): Contact our DPO at [contact@adstractive.com].
- Canada (PIPEDA): Data may be processed in the U.S., with safeguards in place.