Privacy Policy

TAPMIND TECHNOLOGIES PRIVATE LIMITED (“TapMind,” “we,” “us,” or “our”) respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how TapMind collects, uses, discloses, stores, and otherwise processes personal information in connection with:

• the TapMind website and its subdomains;
• TapMind's products, platforms, software, SDKs, integrations, and related services;
• communications and interactions with TapMind;
• publisher, advertiser, agency, demand-partner, supply-partner, and other business relationships; and
• advertising, monetization, user-growth, app-publishing, and related technology services provided through or in connection with TapMind.

This Privacy Policy is intended to explain TapMind's privacy practices in a clear and transparent manner. Certain TapMind customers, publishers, advertisers, demand partners, supply partners, applications, websites, and other third parties may maintain their own privacy policies that apply to their respective services and data practices.

Where TapMind processes personal information on behalf of a customer or partner under a contractual arrangement, the applicable agreement, including any Data Processing Agreement (“DPA”), may establish additional requirements governing that processing.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed by TapMind in connection with its own websites, business operations, products, services, and other activities covered by this Policy.

TapMind operates technology and services across the digital advertising and app-growth ecosystem. Depending on the applicable product and commercial arrangement, TapMind's services may include:

• TapMind Ad Platform, including mediation, orchestration, custom adapters, the TapMind orchestration SDK, and related integrations;
• TapMind Marketplace, through which publisher inventory may be connected with direct, PMP, programmatic, and other demand;

TapMind User Growth, including DSP-based user acquisition and performance marketing activities; and

TapMind App Publishing, including activities relating to app and game acquisition or leasing, monetization, user acquisition, and publishing support.

The exact information processed, purposes of processing, parties receiving information, and applicable privacy roles may vary according to the service, integration method, customer relationship, jurisdiction, and applicable law.

2. Our Role in Processing Personal Information

TapMind may act in different privacy roles depending on the context in which information is processed.

For information collected directly through the TapMind website or through TapMind's own business interactions, TapMind may determine the purposes and means of processing and may therefore act as a controller, business, or equivalent role under applicable privacy law.

In connection with services provided to publishers, advertisers, agencies, or other customers, TapMind may process information on behalf of that customer. In those circumstances, the customer may determine the purposes of processing and TapMind's role may be that of a processor, service provider, or equivalent role under applicable law.

In advertising and monetization environments, information may also be processed by publishers, demand partners, advertisers, DSPs, SSPs, measurement providers, technology providers, and other independent third parties. Those parties may have their own privacy responsibilities and policies.

TapMind does not treat every data flow across its ecosystem as having the same legal or operational role. The applicable role depends on the particular service, integration, contractual arrangement, and applicable law.

3. Information We Collect

The information TapMind collects depends on how you interact with us and which TapMind services are involved.

3.1 Information You Provide Directly

You may provide information when you:

• contact TapMind;
• request a demonstration or information about our services;
• create or administer an account;
• enter into a commercial relationship with TapMind;
• communicate with our employees or representatives;
• participate in events, meetings, surveys, or other business activities;
• submit a support, security, privacy, or other request;
• enter information through forms on our website; or
• otherwise provide information to us.

This information may include:

• name;
• business email address;
• telephone number;
• job title;
• company or organization;
• business contact information;
• account or authentication information;
• communications and correspondence;
• information contained in requests or submissions; and
• transaction, billing, or contractual information, where applicable.

3.2 Information Collected Automatically

When you visit our website or interact with TapMind technology, we may automatically collect certain technical and usage information, subject to applicable law and your choices.

This may include:

• IP address;
• browser type and version;
• operating system;
• device type and attributes;
• language and regional settings;
• referring and exit pages;
• pages or features accessed;
• dates and times of access;
• interaction and usage information;
• network information;
• diagnostic and error information;
• cookie identifiers and similar online identifiers; and
• information relating to the performance, security, and operation of our services.

The precise information collected may depend on the device, browser, application, permissions, integration method, and configuration involved.

3.3 Advertising, Application, and Device Information

Where TapMind technology participates in advertising or monetization services, information may be processed in connection with an ad request, impression, interaction, or other advertising event.

Depending on the applicable integration and permissions, this may include:

• IP address;
• device identifiers or advertising identifiers;
• device type and model;
• operating system and version;
• browser or application information;
• application or package identifiers;
• advertising or inventory information;
• information concerning an ad request, impression, click, or other interaction;
• approximate location or other location information, where permitted and applicable;
• technical information transmitted through advertising requests; and
• performance or reporting information.

Not every TapMind integration collects every category of information.

Where a TapMind integration receives or transmits consent information, this may include consent signals, consent strings, or similar privacy-preference information required to communicate a user's applicable privacy choices to participating advertising or technology partners.

Where information is provided to TapMind by a publisher, advertiser, customer, or other partner, the information TapMind receives will depend on that party's implementation, contractual arrangement, applicable permissions, and applicable law.

3.4 Information From Business Partners and Third Parties

TapMind may receive information from publishers, advertisers, agencies, demand partners, supply partners, technology providers, service providers, and other third parties.

Such information may include business contact information, account information, advertising and campaign information, inventory information, technical information, reporting information, and other information necessary to provide or support TapMind services.

Where a third party provides personal information to TapMind, that party is responsible for having the appropriate authority, notice, consent, or other lawful basis to provide the information where required by applicable law.

4. How We Use Information

TapMind may use information for the following purposes.

4.1 Providing and Operating Services

We may use information to:

• provide, maintain, and operate TapMind services;
• facilitate publisher monetization;
• facilitate advertising and demand relationships;
• operate mediation and orchestration functionality;
• integrate demand sources and advertising technologies;
• support Marketplace activities;
• support user-growth and advertising campaigns;
• support app and game publishing activities;
• provide customer and technical support; and
• administer accounts and commercial relationships.

4.2 Orchestration, Monetization, and Optimization

Where applicable to a TapMind service, information may be used to:

• process and route advertising requests;
• coordinate demand paths and partner distribution;
• evaluate demand opportunities;
• measure advertising and monetization performance;
• evaluate metrics such as CPM, fill, response time, impressions, clicks, conversions, and related performance indicators;
• test or evaluate demand partners;
• support yield and auction optimization; and
• improve the operation and performance of TapMind's technology.

4.3 Business Operations

We may use information to:

• communicate with customers, partners, prospects, and users;
• respond to inquiries;
• manage contracts and commercial relationships;
• process payments and billing, where applicable;
• maintain business records;
• conduct analytics and reporting;
• improve products and services;
• develop and test new functionality;
• prevent fraud, abuse, and unauthorized activity;
• protect our systems and services; and
• comply with applicable legal obligations.

4.4 Marketing and Communications

Where permitted by applicable law, TapMind may use business contact information to communicate with customers, prospective customers, partners, and other business contacts about TapMind products, services, events, or relevant business information.

Where applicable law requires consent or provides a right to opt out, TapMind will provide the applicable mechanism.

5. Legal Bases for Processing

Where applicable privacy law requires TapMind to identify a legal basis for processing personal information, the relevant basis may depend on the processing activity and jurisdiction.

Depending on the circumstances, TapMind may rely on:

• performance of a contract;
• taking steps at your request before entering into a contract;
• legitimate interests, where permitted;
• consent;
• compliance with legal obligations; or
• another lawful basis available under applicable law.

Where processing is based on consent, you may withdraw that consent where applicable. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Cookies and Similar Technologies

TapMind may use cookies, SDK technologies, pixels, tags, local storage, device identifiers, and similar technologies to operate and improve its website and services.

These technologies may be used for purposes such as:

• website functionality;
• authentication and account management;
• analytics;
• security;
• performance measurement;
• debugging;
• advertising and campaign measurement;
• frequency management;
• personalization or interest-based advertising, where applicable; and
• understanding how users interact with TapMind services.

The technologies used and their purposes may vary by website, service, device, integration, and applicable law.

Where required, TapMind will provide appropriate notice and obtain consent before using technologies that require consent.

Your browser or device may provide controls for managing certain cookies and similar technologies. TapMind may also provide dedicated consent and preference controls where applicable.

7. Advertising and Third-Party Technology

TapMind operates within an ecosystem that may involve multiple independent advertising and technology partners.

Depending on the applicable service, information may be exchanged with or made available to:

• publishers and supply partners;
• advertisers and agencies;
• demand partners;
• DSPs and SSPs;
• ad exchanges and marketplaces;
• measurement and attribution providers;
• analytics providers;
• identity or advertising technology providers;
• hosting, infrastructure, security, and technical service providers; and
• other service providers supporting TapMind's operations.

Where applicable, TapMind technology may transmit privacy and consent signals associated with an advertising request to relevant advertising or technology partners in accordance with the applicable integration, contractual arrangements, user choices, and applicable law.

These parties may process information under their own privacy policies and legal obligations.

TapMind does not control the privacy practices of independent third parties merely because their technology or services may be connected to a TapMind integration.

Where required, TapMind's agreements, consent mechanisms, partner controls, and applicable law will govern the relevant data-sharing or processing relationship.

8. How We Share Information

TapMind may disclose or make information available to the following categories of recipients.

8.1 Customers and Business Partners

We may share information with publishers, advertisers, agencies, demand partners, supply partners, and other business partners where necessary to provide the applicable services or as otherwise authorized.

8.2 Service Providers

We may engage third-party providers for functions such as:

• hosting and cloud infrastructure;
• software and technology;
• analytics;
• security;
• customer support;
• communications;
• payment processing;
• professional services; and
• other operational functions.

These providers may process personal information on TapMind's behalf subject to applicable contractual and legal requirements.

8.3 Advertising and Technology Partners

Where necessary to provide advertising, monetization, measurement, or related services, information may be shared with relevant advertising and technology partners.

The categories of information shared depend on the applicable integration and service.

8.4 Legal and Compliance Purposes

TapMind may disclose information where reasonably necessary to:

• comply with applicable law, regulation, court order, or legal process;
• establish, exercise, or defend legal rights;
• investigate fraud, abuse, security incidents, or violations;
• protect TapMind, its customers, users, partners, employees, or others; or
• enforce applicable agreements.

8.5 Corporate Transactions

Information may be disclosed or transferred in connection with an actual or proposed merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or other corporate transaction, subject to applicable law.

9. Data Retention

TapMind retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, to provide applicable services, to maintain appropriate business and transaction records, to resolve disputes, to enforce agreements, to comply with legal obligations, or for other legitimate purposes permitted by applicable law.

Retention periods may vary depending on:

• the nature and sensitivity of the information;
• the purpose for which it was collected;
• the applicable service or integration;
• contractual requirements;
• legal and regulatory obligations;
• security and fraud-prevention requirements; and
• whether the information is required for an ongoing business relationship.

Specific retention periods may be established in applicable customer agreements, DPAs, or other contractual documentation.

10. Data Security

TapMind takes reasonable technical and organizational measures designed to protect personal information against unauthorized access, use, alteration, disclosure, destruction, or other unlawful processing.

Security measures may include administrative, technical, and organizational controls appropriate to the nature of the information and the risks associated with its processing.

However, no method of transmitting or storing information can be guaranteed to be completely secure.

If TapMind becomes aware of a security incident involving personal information, TapMind will respond in accordance with applicable law and its incident-response procedures.

Security vulnerabilities may be reported through TapMind's Report a Vulnerability process.

11. International Data Transfers

TapMind may operate, use service providers, or maintain business relationships across multiple countries.

As a result, personal information may be processed or stored in countries other than the country in which it was originally collected.

Where applicable law imposes requirements on international transfers of personal information, TapMind will use appropriate safeguards or other legally recognized transfer mechanisms.

12. Your Privacy Rights and Choices

Depending on your location and applicable law, you may have rights concerning personal information processed by TapMind.

These rights may include the right to:

• request access to personal information;
• request correction of inaccurate information;
• request deletion of personal information;
• request restriction of certain processing;
• object to certain processing;
• request portability of certain information;
• withdraw consent where processing is based on consent;
• opt out of certain advertising, profiling, sale, or sharing activities where applicable;
• appeal a privacy-rights decision where applicable; and
• lodge a complaint with an applicable data protection authority.

These rights are subject to applicable legal limitations and exceptions.

TapMind may need to verify your identity before completing certain requests. Verification requirements will be proportionate to the nature and sensitivity of the request.

TapMind will not discriminate against you for exercising privacy rights where prohibited by applicable law.

13. California Privacy Rights

California residents may have additional rights under applicable California privacy laws, including the California Consumer Privacy Act, as amended (“CCPA”), and related regulations.

TapMind's California-specific disclosures, rights, and mechanisms are provided in its separate CCPA / California Privacy Notice.

Depending on applicability, California residents may have rights concerning access, correction, deletion, and certain restrictions or opt-outs relating to personal information.

Where applicable, TapMind will provide the mechanisms required by California law for exercising those rights.

14. Consent Preferences and Opt-Out Choices

TapMind may provide separate tools for managing privacy and advertising choices.

These may include:

• Consent Preferences — to manage applicable consent choices and preferences;

Opt Out — to exercise applicable opt-out choices relating to advertising or certain data uses; and

DSAR — to submit applicable data-subject or consumer rights requests.

The availability and scope of these mechanisms depend on the applicable service, jurisdiction, technology, and legal requirements.

Changing a privacy or advertising preference may not stop all processing or all advertising. For example, opting out of interest-based advertising may still allow contextual or non-personalized advertising where permitted.

15. Children's Privacy

TapMind's services are primarily directed toward businesses and professional users, including publishers, advertisers, agencies, and technology partners.

TapMind does not knowingly collect personal information directly from children in circumstances where such collection is prohibited by applicable law.

Where TapMind technology operates within a publisher's application, website, game, OTT service, or other digital environment, the publisher or operator may have separate obligations concerning children's data, age-based restrictions, parental consent, and applicable child-privacy laws.

Where required by applicable law or contract, TapMind will support appropriate restrictions and data-handling requirements applicable to children's information.

16. Third-Party Websites and Services

TapMind's website or services may contain links to third-party websites, applications, services, or platforms.

TapMind is not responsible for the privacy practices, content, security, or policies of independent third parties.

You should review the privacy policy of the relevant third party before providing personal information or using its services.

17. Business Information and Public Communications

Information that you voluntarily make public through websites, social media, public comments, testimonials, or other public channels may be accessible to others.

TapMind may use such information in accordance with the context in which it was made public and applicable law.

18. Changes to This Privacy Policy

TapMind may update this Privacy Policy from time to time to reflect changes in:

• TapMind's products or services;
• data-processing practices;
• applicable law;
• technology;
• business operations; or
• privacy and security requirements.

When changes are made, TapMind will update the “Last Updated” date above.

Where required by applicable law, TapMind will provide additional notice or obtain consent before material changes take effect.

19. Contact Us

If you have questions about this Privacy Policy or TapMind's privacy practices, you may contact us at:

• TAPMIND TECHNOLOGIES PRIVATE LIMITED

Zed Pentagon, 4th floor, NGR Layout, Bengaluru, 560068

INDIA

Privacy Contact: dpo@tapmind.com

General Contact: hello@tapmind.com

For privacy-rights requests, please use the applicable DSAR / Privacy Request mechanism provided on the TapMind website.

20. Additional Privacy and Compliance Documents

This Privacy Policy should be read together with TapMind's other privacy and compliance materials, including, where applicable:

• Data Processing Agreement (DPA): /legal/terms/dpa

CCPA / California Privacy Notice: /legal/privacy/ccpa-cpra

Consent Preferences: /privacy-choices/consent-preferences

Opt Out: /privacy-choices/opt-out

DSAR: /privacy-choices/dsar

Report a Vulnerability: /trust/vulnerability-disclosure

These documents may contain additional information or mechanisms applicable to particular services, jurisdictions, or categories of individuals.