CCPA / CPRA Privacy Notice

This California Privacy Notice (“Notice”) supplements the TapMind Privacy Policy and applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), applies to TapMind’s Processing of Personal Information.

This Notice explains the categories of Personal Information TapMind may collect, the purposes for which it may be used, the categories of parties with whom it may be disclosed, and the privacy rights available to California residents.

1. Scope

This Notice applies to Personal Information collected or Processed by TapMind through its websites, applications, advertising and monetization technologies, SDKs, APIs, integrations, business relationships, and Services, to the extent such Processing is subject to the CCPA/CPRA.

Depending on the applicable Service and data flow, TapMind may Process Personal Information:

• on behalf of publishers, advertisers, agencies, or other business customers as a service provider or contractor; or
• for purposes for which TapMind independently determines the purposes and means of Processing.

The rights and obligations applicable to a particular Processing activity may therefore depend on TapMind’s role and the applicable contractual relationship.

2. Categories of Personal Information We Collect

Depending on the Services used and the relevant data flow, TapMind may collect or Process the following categories of Personal Information recognized by the CCPA/CPRA.

A. Identifiers

These may include:

• IP addresses;
• online identifiers;
• device identifiers;
• advertising identifiers;
• cookie identifiers;
• account identifiers; and
• business contact information.

B. Internet or Other Electronic Network Activity

These may include:

• browser information;
• operating system information;
• application information;
• network information;
• browsing or interaction information;
• advertising interactions;
• impressions and engagement information; and
• technical logs.

C. Geolocation Information

Where supported and lawfully collected, TapMind may Process approximate location information derived from device, IP, or other permitted signals.

D. Professional or Business Information

For business relationships, TapMind may Process information such as:

• name;
• business email;
• job title;
• company;
• business contact details; and
• information provided in connection with commercial relationships.

E. Inferences

Where permitted by law, TapMind may derive or receive information used for advertising, measurement, optimization, fraud prevention, or other Service-related purposes.

F. Sensitive Personal Information

TapMind does not intentionally require consumers to provide Sensitive Personal Information for ordinary use of its Services unless expressly stated otherwise.

3. Sources of Personal Information

TapMind may obtain Personal Information from the following categories of sources:

• publishers and application developers;
• advertisers and agencies;
• business customers;
• demand and supply partners;
• advertising and technology partners;
• SDKs, APIs, tags, and integrations;
• devices, browsers, applications, and websites;
• consumers and business contacts directly; and
• other authorized third parties.

The applicable source depends on the Service and the specific data flow involved.

4. Business and Commercial Purposes

TapMind may collect, use, or disclose Personal Information for the following business or commercial purposes, as applicable:

• providing and operating the Services;
• advertising mediation and orchestration;
• delivering and optimizing advertising;
• facilitating Marketplace and programmatic advertising activities;
• measuring advertising performance;
• reporting and analytics;
• fraud and invalid-activity prevention;
• security and troubleshooting;
• maintaining and improving platform functionality;
• account administration and customer support;
• communicating with business customers and partners;
• complying with legal obligations; and
• other purposes disclosed at or before collection or otherwise permitted by law.

5. Categories of Parties to Whom Personal Information May Be Disclosed

Depending on the applicable Service and data flow, Personal Information may be disclosed to categories of recipients including:

• publishers and application developers;
• advertisers and agencies;
• demand partners;
• supply partners;
• DSPs and SSPs;
• advertising exchanges and marketplaces;
• measurement and analytics providers;
• infrastructure and hosting providers;
• service providers and contractors;
• security and fraud-prevention providers;
• professional advisers; and
• governmental or regulatory authorities where legally required.

TapMind does not disclose Personal Information indiscriminately. Disclosures depend on the applicable Service, contractual arrangement, instructions, and legal requirements.

6. Sale or Sharing of Personal Information

The CCPA/CPRA distinguishes between a “sale” of Personal Information and “sharing” of Personal Information for cross-context behavioral advertising.

TapMind’s participation in advertising technology does not, by itself, determine whether a particular Processing activity constitutes a sale or sharing under California law.

Where TapMind’s activities constitute a sale or sharing of Personal Information as defined by the CCPA/CPRA, TapMind will provide applicable disclosures and rights, including the right to opt out where required.

7. Service Providers and Contractors

TapMind may Process Personal Information on behalf of business customers in its capacity as a service provider or contractor, where the applicable legal requirements and contractual relationship support that designation.

Where TapMind acts as a service provider or contractor, its Processing will be subject to applicable contractual restrictions, including restrictions concerning:

• the purposes for which Personal Information may be Processed;
• retention and deletion;
• use of Personal Information outside permitted business purposes;
• combining Personal Information with information obtained from other sources where restricted by law;
• appropriate security measures; and
• assistance with applicable consumer rights.

TapMind may also engage qualifying service providers or contractors to support its Services.

8. California Consumer Rights

Subject to applicable legal limitations and exceptions, California residents may have the following rights.

8.1 Right to Know

You may request information about:

• the categories of Personal Information collected;
• the sources from which Personal Information is collected;
• the business or commercial purposes for collecting, using, or disclosing Personal Information;
• the categories of third parties to whom Personal Information is disclosed;
• the specific pieces of Personal Information collected, where applicable; and
• other information required by the CCPA/CPRA.

8.2 Right to Delete

You may request deletion of Personal Information collected from you, subject to exceptions permitted by law.

TapMind may retain information where retention is necessary or legally permitted, including for security, fraud prevention, legal compliance, completing transactions, or other purposes recognized by law.

8.3 Right to Correct

You may request correction of inaccurate Personal Information maintained by TapMind, subject to applicable legal exceptions.

8.4 Right to Opt Out of Sale or Sharing

Where applicable, you may opt out of the sale or sharing of your Personal Information.

This right may be particularly relevant to Processing associated with cross-context behavioral advertising.

Information about how to exercise this right is provided in TapMind’s Opt-Out and Consent Preferences materials.

8.5 Right to Limit Use of Sensitive Personal Information

Where TapMind’s Processing involves Sensitive Personal Information and the CCPA/CPRA provides this right, you may request that TapMind limit the use or disclosure of such information to purposes permitted by law.

8.6 Right to Non-Discrimination

TapMind will not unlawfully discriminate against you because you exercise rights provided by the CCPA/CPRA.

9. Global Privacy Control and Opt-Out Preference Signals

Where required by applicable law, TapMind will recognize valid opt-out preference signals, including the Global Privacy Control (GPC), in accordance with applicable requirements and the technical capabilities of the relevant Service.

Where applicable, an opt-out preference signal may be treated as a request to opt out of sale or sharing in accordance with California law.

10. How to Submit a Privacy Request

California residents may submit a request through:

• Privacy Request Portal: /privacy-choices/dsar

Email: dpo@tapmind.com

Other Request Method: /privacy-choices/dsar

When submitting a request, please provide sufficient information for TapMind to understand and process the request.

11. Verification

To protect Personal Information against unauthorized access, disclosure, or deletion, TapMind may take reasonable steps to verify the identity of the person submitting a request.

The level of verification may depend on:

• the nature of the request;
• the sensitivity of the information involved; and
• the risk of unauthorized access or disclosure.

TapMind will not require unnecessary Personal Information solely for verification.

12. Authorized Agents

A California resident may use an authorized agent to submit a request where permitted by law.

TapMind may require:

• evidence that the agent has been authorized to act on the consumer’s behalf; and
• information reasonably necessary to verify the consumer’s identity.

Requests submitted by authorized agents remain subject to applicable CCPA/CPRA requirements.

13. Response Timing

TapMind will respond to verifiable consumer requests within the time period required by applicable law.

Where an extension is legally permitted and reasonably necessary, TapMind will provide the required notice explaining the reason for the extension.

14. Appeals

Where required by applicable California law, you may appeal TapMind’s decision regarding your privacy request.

Appeals may be submitted through:

• Email: dpo@tapmind.com

Portal: /privacy-choices/dsar

TapMind will process appeals in accordance with applicable legal requirements.

15. Retention

TapMind retains Personal Information only for as long as reasonably necessary for the purposes described in this Notice, applicable contractual obligations, legitimate business requirements, security and fraud prevention, legal obligations, dispute resolution, or other purposes permitted by law.

Specific retention periods may vary depending on the type of information, the Service involved, and the applicable legal or contractual requirements.

16. Children

TapMind’s Services are not directed toward children in circumstances where applicable law prohibits the collection or Processing of their Personal Information without appropriate authorization.

If TapMind becomes aware that Personal Information has been collected from a child in circumstances where collection was not permitted, TapMind will take appropriate steps as required by applicable law.

17. Changes to this Notice

TapMind may update this California Privacy Notice from time to time to reflect changes in:

• Applicable Data Protection Laws;
• the Services;
• data-processing practices;
• consumer rights; or
• regulatory requirements.

The updated Notice will be posted with a revised Last Updated date.

18. Contact Us

For questions regarding this Notice or to exercise applicable California privacy rights:

• TAPMIND TECHNOLOGIES PRIVATE LIMITED

Address: Zed Pentagon, 4th floor, NGR Layout, Bengaluru, India – 560068

Privacy Email: dpo@tapmind.com

Privacy Request Portal: /privacy-choices/dsar