Effective Date: July 17, 2024

Introduction

Cadent, LLC and its subsidiaries and affiliates (collectively, “Cadent,” “we,” “us,” or “our”) have designed this Cadent Services Privacy Policy (this “Services Privacy Policy”) to help you understand how our advertising technology platform and related services (collectively, our “Platform”) collect, use, and share information to help provide advertising and marketing services to our clients, such as to target ads through various channels (e.g., websites, apps, OTT/CTV devices). It also explains your “data rights” in relation to your information (e.g., requesting information access or deletion), including opt-out rights regarding targeted advertising or having your data “sold” or “shared.”

In this Services Privacy Policy, “users” (or “you” or “your”) means anyone who interacts with an ad served through the website, app, or other device, or whose information is otherwise collected through our Platform, whether directly or via clients or data partners.

Overview of Our Platform

Cadent works with “demand-side” and “supply side” clients and data partners. In other words, we work with brands and advertising agencies that are interested in buying ads on properties, such as websites, apps, OTT/CTV devices (e.g., streaming devices, “Smart TVs”), and linear TV, the partners (e.g., vMVPDs) that provide the ad space on such properties (also known as advertising “inventory”), and related adtech companies like ad servers, sell-side and demand-side platforms, and exchanges. We also work with data providers that disclose user segments and other information to us to help target an audience with ads or measure the effectiveness of such ads.

These ads are typically targeted based on inferred interests or preferences as associated with a user device identifier or at a household level (this includes “retargeting,” such as where a user views a certain item and then receives ads for that item on third-party digital properties). However, in some cases, ads may be based on contextual information, such as the time of day, type of browser/device, or TV channel.

In order to understand whether the ad campaign was effective or not, our Platform provides “reporting” directly or allows the ability to use a third-party measurement partner, which, in either case, will include analytics on interactions with ads served, clicks, downloads, or other ad interactions.

To carry out the above, our Platform comprises different service offerings, each of which are interconnected. Primarily, this includes our:

1. Sell-Side Platform (SSP)
   • Allows clients to sell their advertising inventory to advertisers/agencies and other demand-side partners, such as exchanges and DSPs.
2. Demand-Side Platform (DSP)
   • Allows clients to buy and serve targeted advertising on digital properties and measure effectiveness via reporting.
3. Audience Builder Service
   • Allows clients to onboard their data (also known as “audience matching”) and combine with other data in order to create and export targetable “segments” or otherwise receive analytics and insights on their audiences (e.g., inferred interests).
4. Identity Mapping Solution
   • Primarily, an internal mapping of device IDs to households.
5. Addressable TV Service
   • Use of demographics, viewership data (content viewed on TV), and data “segments” to plan, execute, and measure the effectiveness of these TV advertising campaigns (e.g., cable, broadcast) via reporting.

In summary, through our Platform, we help our clients reach consumers with greater efficiency and relevance across various channels, including web, mobile, and OTT/CTV. We reach these consumers primarily through their device IDs as associated with their household.

To do this, we collect and use the information that we’ve described in this Services Privacy Policy. We also provide convenient opt-out mechanisms, as we’ve described below under How to Opt-Out of Platform Targeting.

Information We Collect

We collect and use several types of information from you or from our data partners that help us (or our data partners) serve ads that are better tailored to your interests and to provide reporting and analytics services, such as inferring ads that performed better or worse based on user behavior.

This information includes:

1. Device identifiers
   • E.g., mobile advertising IDs like iOS IDFA and Android AAID, IP address, OTT/CTV IDs, gaming console IDs, cookie IDs, or proprietary IDs.
2. ZIP +4 and ZIP +11 postal codes
   • Publicly available household postal codes; used to identify a household address, which devices and segments are associated to for “household-level” targeting.
3. Household identifiers
   • Pseudonymous IDs for ZIP+4/ZIP+11 above.
4. Household addresses
   • A master address list used for purposes such as address verification and appending ZIP11 and latitude/longitude.
5. Device metadata
   • E.g., device type, browser type, operating system type, and settings.
6. Geolocation Data
   • E.g., latitude/longitude coordinates or other geolocation information (e.g., based on IP address).
7. Segments/demographics and interests
   • A group of household IDs or device IDs that may share a common interest, trait, or preference, such as “auto intenders” or “guitar players”. These can be either our own segments or segments from data partners.
     We may receive demographic information or use data science to understand general demographics or interests, which can be used to make inferences for segment purposes (e.g., household income, number of household members, geographic area, retail interests) or to understand the value of a certain advertising opportunity presented in a bid request.
8. Ad interaction data
   • E.g., interactions with or in relation to an ad, such as clickthroughs, actions taken on landing page where ad takes you, app downloads, and purchases. This helps understand ad campaign effectiveness and what ads you respond more favorably to.
     This interaction data and other ad analytics can sometimes be provided to data partners for measurement/attribution purposes, described below, in the form of a document called an “impression log.”
9. Other ad analytics
   • E.g., TV content viewed, viewership data, which ads were shown to which devices or households, where and what they were shown, and at what time.
10. Email addresses/phone numbers
    • Email addresses/phone numbers that are either uploaded in “plain text” and then matched with a hashed email or hashed by us or our clients/data partners (i.e., utilize one-way cryptography such that it is a random string of characters).
11. Client information
    • Clients can upload their own information, such as their customer data, to our Platform (e.g., email addresses, postal address, device IDs) which we can then “match” with our own data and use for enhanced targeting.

Source of Information We Collect

The above information is collected through various sources, including:

1. Clients
   • As mentioned above, clients can upload their own information to our Platform for matching and targeting purposes.
2. Bid requests
   • “Bid requests” contain information describing advertising space that is available for purchase on that particular digital property (e.g., website, app, CTV/OTT device) and are typically sent by ad exchanges/sell-side platforms (SSPs). The fields within a bid request can depend on the specification (e.g., OpenRTB) but bid requests typically contain information about the particular user or device, such as device ID, geolocation information, content or URL being viewed, device metadata, and demographic information (e.g., age, gender).
3. CTV/OTT Platforms and App Providers
   • These entities may send similar information as those described in bid requests but can also send information regarding what video content is being watched on a device or app or viewership data more broadly.
4. Pixels/Cookies/Macros
   • Cookies are essentially small files of data that can be stored within a device to collect information across websites. Pixels are pieces of code that are inserted onto pages or ads, which can collect information from a device or read/write cookies.
     Ad macros operate similar conceptually to pixels and also collect similar information in relation to ads that we have served.
5. Mobile SDKs
   • These are usually placed by our partners within apps, which collects information that can be provided to us, such as device IDs or geolocation information.
6. Data Partners
   • We use a variety of partners that provide the information described in this Services Privacy Policy to us, such as consumer panel providers (i.e., provides insights from consumers based on surveys), geolocation providers, ad exchanges/SSPs mentioned above, other DSP or data management platforms (DMPs), measurement partners, address verification providers, point-of-interest (POI) data providers, viewership data partners, and segment providers.

How We Use Information We Collect

We use the information we collect to help clients and data partners better target ads to you, analyze trends and create reports about how users react to such ads, and generally optimize the Platform. Our uses include the following:

1. Ad delivery and personalization
   • Delivery of a personalized ad based on your interests or the interests of a household.
2. Audience/matching/onboarding
   • Matching client-uploaded information, such as device IDs, with household information stored within our identity map to provide a broader range of targetable device IDs.
3. Device mapping
   • Inferring whether a device is associated to a household or other general location.
   • Also includes making correlations between actions on one device (such as a browser on a computer) with actions on another device (such as an app on a phone) to determine whether they belong to the same household or whether devices belong to the same user.
4. Segment creation
   • Creation of segments, as further described below.
5. Measurement
   • Measuring whether a user clicked on an ad, took some action afterwards (e.g., downloaded something, went to a retail store), ad viewability, and other analytics to determine how well an ad performed.
6. Attribution
   • Inferred determination of whether a user took an action due to seeing an ad (e.g., saw an ad and then purchased something). In other words, trying to reasonably correlate whether an ad prompted the user action, however such action is defined.
7. Reporting
   • A report on the performance of an ad campaign, based on measurement and attribution and associated analytics.
8. Frequency capping and ad analytics
   • Tracking how many times an ad was shown to a particular user (and how many times a particular user should be seeing an ad in general), where the ad was displayed, and when.
9. Fraud detection
   • Preventing invalid or fraudulent ad traffic or malicious activity, such as those caused by bots or malware.
10. Optimization
    • Optimization of the Platform, such as by further improving the use cases described herein (e.g., refining our bidding algorithm for better personalization of ads) or creating new services/features.
    • Development or improvement of services/products/features more generally (whether with respect to the Platform or otherwise),
11. Anonymization
    • Information collected may be de-identified or anonymized and used for any purpose, including marketing or research purposes.

More about “segments”: We make certain inferences about you or about your household generally, in either case, based on the information collected above.

For example, we may analyze information associated with your mobile device ID, such as what apps you’ve viewed, what ads you’ve seen and clicked on (and actions you’ve taken afterwards), and where you are located, to determine whether that device, along with other devices, share certain interests, traits, or other demographics. Where we have found these common interests, traits, or other demographics, we put those devices into “segments” (e.g., “interested in clothes,” “auto-intender,” “travel enthusiast”).

In many cases, we will look at these device-level characteristics to determine interests, traits, or demographics at the household level and roll those devices into these household-level segments (e.g., this household contains users interested in clothes, musical instruments, fashion, etc., or household race composition, income level, or education level).

We also receive segments from our data partners, including those of the nature described above and similar segments.

Our segments, along with segments from our data partners, are made available within our Platform for clients to use to improve the targeting of their ad campaigns. We also make available our own segments to other data partners, such as other DSPs or data management platforms (DMPs), for use by those partners’ clients.

How We Share Information We Collect

The information may be shared as follows:

1. To clients/data partners
   • In some cases, clients can export information they have uploaded or matched on our Platform, such as to themselves (in some cases) or to their (or our) partners. Further, clients may wish to receive the reports described above or similar information, such as information collected through macros or other technologies within the ads we serve.
   • Our clients or data partners may wish to license our segments or other information we collect or create, such as the information contained within our ID map (e.g., ZIP+4/+11, device IDs).
   • We may disclose certain data to facilitate “matching” with our clients or data partners, such as household IDs or ZIP+4/ZIP+11, for communication of segments or other information.
   • We may disclose bid request data to data partners (e.g., exchanges, SSPs) for the purpose of selling advertising inventory.
   • Data partners, such as measurement providers, may receive “impression logs” (e.g., information about campaign, timestamp, household ID) or similar information, which are received from our other data partners (e.g., exchanges) or through our own technology.
2. To our service providers that store or process data or otherwise perform services on our behalf, such as technical or operational services.
   • These companies are authorized to use your personal information only as necessary to provide these services to us to assist us in our business activities.
   • Examples include technical or customer support, operations, web or data hosting, billing, accounting, security, marketing, data management, validation, enhancement or hygiene, or otherwise assisting us to provide, develop, maintain and improve our services.
3. To investigate or prevent potential or actual fraud, fake traffic, malicious activity, or other similar harmful activity.
4. In response to lawful requests by public authorities, including to meet national security, law enforcement requirements, or otherwise complying with legal process or regulatory investigations (e.g., a subpoena, court order).
5. Where we believe in good faith it is necessary to comply with applicable law, enforce or apply our Terms of Service and other agreements, or protect the rights, property, or safety of Cadent and its employees or others.
6. In the event of a merger, dissolution, reorganization, or similar corporate event, or the sale of all or substantially all of our assets, or any due diligence relating thereto.
   • In such a case, the information that we have collected may be transferred to, acquired by, or otherwise controlled by a third party.
7. In aggregate or otherwise anonymized form to third parties or publicly.
   

Your Data Rights

Note: We provide the below rights to all U.S. residents only (as our data is tied to U.S. devices and households). However, subject to applicable law, we may limit or otherwise qualify how and to what extent we provide certain rights depending on the state of the U.S. resident in our discretion (e.g., reasonable fees that may be charged in the case of repeat requests within a twelve (12) month period, exceptions where consent may not be required, methods for submitting requests) and reserve the right to make further limitations or qualifications.

Right of Access
You may request access to the personal information that we have collected and maintained about you on a device-by-device basis.

For purposes of the California Consumer Privacy Act (CCPA), for the personal information we collect from users within the preceding twelve (12) months, and the business and commercial purposes for use of this information (including related disclosures), please see the relevant sections above. The personal information described in such sections generally correspond to the following categories of personal information under the CCPA: Identifiers, commercial information, internet or other electronic network activity, geolocation data, electronic, visual, or similar information, inferences, and “sensitive” personal information.

Right to Correction
You have the right to request that any inaccuracies in your personal information be corrected, taking into account the nature of the personal data and the purposes of processing your personal information.

Right of Deletion
You have the right to request that we delete the personal information collected and maintained about you on a device-by-device basis. Note that the deletion of your personal information may be subject to certain exceptions (e.g., required for legal purposes, may infringe our or a third party’s rights, have legitimate business reasons to keep, an exception set forth under applicable U.S. state privacy laws).

Right to Opt-Out of “Sales,” “Shares,” “Targeted Advertising,” and Processing of “Sensitive” Personal Information
Certain U.S. state privacy laws provide a right to opt-out of “sales,” “shares,” “targeted advertising,” and certain processing of “sensitive” personal information. Though the scope of these rights differs slightly depending on the state privacy law, you can exercise these rights collectively for your convenience as set forth under Exercising Your Rights below.

We “sell”/“share” personal information, process personal information for “targeted advertising,” and process “sensitive” personal information. More specifically, our services disclose the following categories of information to buy-side or sell-side clients (e.g., advertisers, vMVPDs) or data partners (e.g., segment providers) for purposes of ID matching/resolution, facilitating ad inventory purchases (e.g., sending bid requests), measurement, segment export, and licensing of our data: Device identifiers and associated ZIP+4/+11 and household IDs, along with segments relating thereto. For purposes of the CCPA, these categories of personal information would be considered “identifiers,” “commercial information,” “internet or other network information,” “electronic, visual, or similar information,” “inferences,” and “sensitive” personal information.  We also process such information for our internal advertising platform-related purposes, as further described in detail within this Privacy Policy.

Note that, after opting out, we may still be able to process your “sensitive personal information” for reserved purposes as provided under applicable law and may still disclose personal information to recipients where we have appropriately limited their use of your personal information.

We do not have actual knowledge of “selling” or “sharing” any personal information of anyone under sixteen (16) years of age.

Exercising Your Rights

As a U.S. resident, to make requests for access or deletion, as such rights are described above, please submit a request to us by either:

• Submitting a request form or
• Under the CCPA and Colorado’s state privacy law only, emailing us at [email protected] and specifying (1) what type of request you are making (i.e., access or deletion) and (2) that you are making such a request pursuant to this Services Privacy Policy.

For “correction” requests, please email a request to us at [email protected] and specify that you are making such request pursuant to this Services Privacy Policy.

For opt-out of “sales”/“shares,” “targeted advertising,” and certain processing of your “sensitive personal information” (as these rights are further described above), please use the “Your Privacy Choices” link in this website’s footer or, under the CCPA only, send us an email at [email protected] requesting these opt-out rights pursuant to the Services Privacy Policy.

We do not use any information that you submit for your data rights request for any other purpose besides our verification and fraud prevention process and to otherwise resolve your request (described below). A record of your request may be kept for legal compliance purposes.

Verifying and Resolving Your Request

For Access, Correction, and Deletion Requests: You must provide your household address and one or more device IDs that belong to you. To the extent we have associated a device ID with that household address, we will provide access or deletion rights in relation to each such associated device ID.

Note that device IDs include mobile advertising IDs (e.g., iOS IDFA, Android AAID), IP addresses, OTT/connected TV device IDs, gaming console IDs, etc. Please consult your device’s documentation for more information on how you may obtain such IDs.

For Opting Out of “Sales”/“Shares,” “Targeted Advertising,” and Certain Processing of “Sensitive” Personal Information: You must provide your household address, after which we will opt-out that household accordingly. You do not need to provide an associated device ID for these requests.

For any of the requests set forth above (e.g., access, correction, deletion, opt-out requests), we reserve the right to require additional proof of your identity and residency as permitted by applicable law, or to reject requests that we reasonably believe are fraudulent or otherwise invalid (e.g., where you have submitted a household address or device identifier that does not belong to you or otherwise are not permitted to make such a request). Further, we may withhold any information where we reasonably believe verification has not been achieved to a sufficient degree of reliability or that release of the information may pose too great a risk of security to the user to whom the data may pertain.

Authorized Agents: Under Connecticut, Colorado, Montana, Oregon, and Texas’ respective state privacy laws only, you may designate an agent to make requests to exercise your right to opt-out described above. Under California’s state privacy law (the CCPA), you may also designate an agent to make requests to exercise your rights for access, correction, and deletion described above. In any event, we will take steps both to verify the identity of the person seeking to exercise their rights as listed above and to verify that the corresponding agent has been authorized to make a request on that person’s behalf, such as by providing us with a signed written authorization. Agents must provide information demonstrating that they have been duly authorized to our email address above before submitting any request to us.

Response Timing: We aim to resolve any request described herein in forty-five (45) days or less (unless otherwise required by applicable law), though we may extend for another forty-five (45) days when reasonably necessary and as permitted under applicable law. Please note that we may charge a reasonable fee or refuse to act on a request if such request is excessive, repetitive, or manifestly unfounded.

Non-Discrimination and Appeals: You have the right to not receive discriminatory treatment for exercising the rights set forth above.

In the event we decline to take action on a request exercising one of your rights set forth above, you may have the right to appeal our decision under Colorado, Connecticut, Montana, Oregon, Texas, and Virginia’s respective state privacy laws only.

How to Opt-Out of Platform Targeting

Cadent supports industry self-regulation and endorses best practices and self-regulatory requirements that apply to our Platform. Cadent participates in the Digital Advertising Alliance (DAA) Self-Regulatory Program and licenses the “AdChoices” advertising icon within ads that it serves through mobile and online channels. Learn more at http://www.aboutads.info. You may opt-out of receiving certain targeted advertising from us across various channels via the below mechanisms. Please keep in mind that even after you opt-out, you may continue to receive ads but those ads may no longer be based on your interests or activity. Besides the opt-out mechanisms described in this Privacy Policy, we do not honor any “do not track” or similar mechanisms in the context of our Platform.

• Website Opt-Out:
  • You may opt-out of certain interest-based targeting on the web conducted by Cadent or other member companies of the Digital Advertising Alliance (DAA) by visiting the DAA website here.
    • This opt-out is browser-based and you will need to opt-out on each browser (and for each user that has a separate log-in on the same computer).
    • Further, this opt-out is cookie-based. If you delete your cookies (which can happen if you clear or delete your browser history), then you will need to repeat the process. Additionally, an opt-out cookie may not be able to be set if your browser is set to block third-party cookies.
  • You can also control the use of third-party cookies at the individual browser level but, if you choose to disable cookies, it may limit your use of certain features or functions on our website or other websites. To manage Flash cookies, please click here. More detailed information about cookie management or other passive transmissions by specific web browsers can be found at the browser’s respective websites, documentation, or settings pages.
• Mobile Opt-Out:
  • To opt-out of certain interest-based advertising conducted by Cadent or other DAA member companies in the mobile app environment, please utilize the AppChoices mobile app via your phone, which you can download from your app store or via the Digital Advertising Alliance AppChoices page here: https://youradchoices.com/appchoices.
    • If you change your mobile device, you must renew your opt-out choice and, if you use more than one device, you must opt-out of each device via the AppChoices app on that particular device.
  • Certain mobile device operating systems provide an opt-out choice that restrict publishers or advertisers’ ability to send device IDs, such as through Apple’s App Tracking Transparency Framework (Apple ATT).
    • For more information, or to opt-out using these mechanisms, consult your device settings. If you prefer to not have your precise geolocation data collected, you can also make this selection within your mobile device settings.
• Note: Some opt-out mechanisms will use the HTML5 local storage of your device in order to save your choice preference. We may view the local storage of your device to determine what choices, if any, you may have made previously. If we recognize a choice preference within the local storage of your device, we will honor that request.
• OTT/CTV Opt-Out:
  • Some OTT/CTV device providers offer a choice mechanism with respect to targeted advertising. To the extent these mechanisms entail sending a signal to Cadent regarding an opt-out preference, Cadent will honor these signals pursuant to those providers’ rules. For more information, including device-specific instructions, please visit https://www.networkadvertising.org/internet-connected-tv-choices/.

Children’s Information

We do not knowingly collect personal information from those under sixteen (16) years of age via our Platform.

Security and Retention

We have implemented security measures intended to protect the information in our care, both during transmission and once we receive it. This includes, but is not limited to, the use of firewalls and encryption. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

We will retain your information as long as it reasonably serves the purposes for which it was collected as such purposes are stated in this Services Privacy Policy. This information may also be stored in backups.

Changes to This Services Privacy Policy

From time to time, we may revise this Services Privacy Policy to reflect changes to the services or for other reasons. Therefore, it is important to check this Services Privacy Policy periodically. It is the obligation of those visiting this website to learn of changes to this Services Privacy Policy since their last visit. Any change to this Services Privacy Policy shall be effective once the modified Services Privacy Policy is made available on this website, and we will update the “Effective Date” accordingly.

Contact Us

If you have any inquiries regarding privacy at Cadent, please send a message to [email protected] with the subject line, “Services Privacy Policy”.