Last Updated: November 30, 2022
This CCPA Privacy Policy describes PubMatic’s practices regarding the collection, use, and disclosure of the personal information of California residents, describes the rights of California residents under the California Consumer Privacy Act of 2018 (“CCPA”), and explains how California residents may contact PubMatic to exercise those rights. This CCPA Privacy Policy only applies to the personal information of California residents. All capitalized terms not defined in this CCPA Privacy Policy shall have the meanings set forth in our Privacy Policy.
SECTION 1 – CALIFORNIA RESIDENT RIGHTS
If you are a resident of California, you have the following rights under the California Consumer Privacy Act (“CCPA”):
- You have the right to request deletion of your personal information that we have collected, subject to certain exemptions, and to have such personal information deleted, except where necessary for certain exempt purposes.
- You have the right to request a copy of the specific pieces of personal information that we have collected about you in the prior 12 months.
- You have the right to request a description of the categories of personal information about you that we have collected, used, disclosed or sold in the prior 12 months. Specifically, you may request a description of the:
-
- categories of personal information we have collected;
- categories of sources from whom we have collected personal information;
- business and/or commercial purposes for collecting or selling your personal information;
- categories of third parties with whom we have disclosed or shared your personal information;
- categories of personal information that we have disclosed or shared with a third party for a business purpose; and
- categories of third parties to whom we have sold personal information and the specific categories of personal information sold to each category of third party.
- You have the right to opt out of the sale of your personal information.
- You have the right not to be discriminated against because you exercise your rights under the CCPA.
SECTION 2 – HOW TO SUBMIT A REQUEST
Visit this page for more information.
SECTION 3 – HOW WE COLLECT, USE AND SHARE PERSONAL INFORMATION OF CALIFORNIA RESIDENTS
Personal Information We Collect and Sources from which We Collect Personal Information
Preference cookies on your browser capture and store information about your choices and preferences, such as your preference to opt out of other cookies that may be applied by the Platform.
Depending on how you have engaged or interacted with PubMatic, PubMatic has collected the following categories of personal information about California residents in the twelve (12) months prior to the effective date of this CCPA Privacy Policy from the following sources:
Business Activity |
Categories of Sources from which Personal Information is Collected |
Categories of Personal Information Collected |
Examples of Personal Information Collected |
| Providing our Ad Services | Through automated means such as cookies and other data collection tools when you visit a Digital Property that uses our advertising services technology. | Internet or other electronic network activity information. | Browser and device information, such as device type and model; manufacturer; operating system type and version (e.g. iOS or Android); web browser type and version (e.g., Chrome or Safari); user-agent; carrier name; time zone; network connection type (e.g., Wi-Fi or cellular); IP address; general location inferred from IP address; hardware-based identifiers (e.g. MAC address); information about our Publisher Client’s apps and versions currently active on a device (but not any other apps); identifiers assigned to a device, such as its iOS Identifier for Advertisers (IDFA), Android/Google Advertising ID (AAID or GAID), or other unique device identifier (typically an alphanumeric string allocated to a device by the device manufacturer, a Publisher Client’s Digital Property, or PubMatic, including identifiers stored in a cookie, ETag, or browser or web cache). Information about the activities or actions on our Publisher Clients’ Digital Properties, such as information about the activities or actions on those Digital Properties, session start/stop time. Information about ads served, viewed, or clicked on, such as the type of ad, where the ad was served, whether the End User clicked on it, the number of times an End User has seen the ad, and whether the End User visited the Media Buyer’s website or relevant app store. |
| Commercial information | Whether an End User purchased or installed the product or service advertised. Whether an End User purchased or installed the product or service advertised. | ||
| Geolocation data | Geolocation (including latitude and longitude co-ordinates, but only if the Publisher Client’s Digital Property (like an app) has enabled location services on the device and the End User has granted the Publisher Client permission to collect and share this information for advertising purposes). | ||
| Inferences | We may use the information we collect to infer End User preferences and consuming patterns. | ||
| From our Publisher Clients and third party data aggregators. | Internet or other electronic network activity information | Network, type of an End User’s device and mobile device IDs, content viewed, or actions taken on a website or app. | |
| Demographic data | Demographic or interest data. | ||
| Geolocation data | Precise geolocation (where permitted by law). | ||
| Characteristics of protected classifications under California or federal law | Age; ethnicity (where permitted by law); and gender. | ||
| Identifiers | Unique IDs our external partners or Publisher Clients have assigned to End Users. | ||
| Inferences | We may use the information we receive from our Publisher Clients and thirdparty data aggregators to help infer End User preferences and consuming patterns. | ||
| Operating PubMatic Properties (such as our Websites) | From you directly when you provide such information or through automated means such as cookies and other data collection tools when you visit a PubMatic Property. | Contact information | Name; address; telephone number; email address; and contact preferences. |
| Internet or other electronic network activity information | IP address; operating system type and version; browser type and version; cookie ID; an individual’s activities on the PubMatic Properties; and other information about the individual’s system and connection and how the individual interacts with the PubMatic Properties and other websites. | ||
| Professional or employment-related information | Job title; department or job role; and the nature of an individual’s request or communication. |
Business / Commercial Purpose for Collection of Personal Information
PubMatic collects the personal information described above for a variety of business and commercial purposes.
For Ad Services, we use the personal information collected to provide our services; serve ads; provide information and reports to Media Buyers; prevent End Users from seeing the same ad too many times; customize ads; analyze ad performance; deliver Internet-based and location-based advertising; detect and prevent fraud and protect the security of our Ad Services; provide, manage and improve our Ad Services and develop new services; calculate usage levels of our Ad Services, help diagnose server problems and administer our Ad Services; and as we believe to be necessary or appropriate, such as to comply with legal requirements. You can read more about how we use the personal information we collect for our Ad Services in Section 2.2 of our Privacy Policy entitled, “How Do We Use Your Information.”
For PubMatic Properties, we use the personal information collected to send marketing and promotional communications; send administrative information; engage in and process transactions; post testimonials; provide interest-based advertising and engage in analytics on your activity on the PubMatic Properties and other websites over time; manage accounts and provide customer support or other services; improve the content and quality of PubMatic Properties and Ad Services; for legal purposes; and for our business purposes, such as to evaluate and improve our products, services, marketing, and client relationships. You can read more about how we use the personal information we collect for PubMatic Properties in the Section 3.2 of our Privacy Policy entitled, “How Do We Use Your Information.”
Categories of Third Parties to Whom We May Disclose or Sell Personal Information
We may disclose any of the personal information we collect for our business purposes, or sell the personal information, to the following categories of third parties:
- PubMatic’s Publisher Clients
- Media Buyers
- PubMatic’s other clients including brands, agencies, and other third parties
- Attribution and Analytics Partners
- PubMatic vendors, consultants, and other service providers
- Website advertising parties
We may also disclose the personal information we collect to third parties in connection with a corporate event such as a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings), for legal purposes, and with your consent. You can read more about how we share personal information in the Section of our Privacy Policy entitled, “How Do We Share Your Information.” We do not have actual knowledge that PubMatic sells the personal information of California residents under 16 years of age.
SECTION 4 – UPDATES TO THIS POLICY
We will review and update this CCPA Privacy Policy periodically and will note the date of its most recent revision at the top of this CCPA Privacy Policy. If we make material changes to this Policy, we will post the revised Policy on our website and may take additional measures to inform you about such changes prior to such changes taking effect, if required by applicable data protection laws. We encourage you to review this Policy frequently to be informed of how PubMatic is protecting your information.
SECTION 5 – CALIFORNIA “SHINE THE LIGHT” LAW
Under California Civil Code Section 1798.83, also known as California’s “Shine the Light” law, California residents with whom we have an established business relationship are entitled to request and receive, free of charge, once per calendar year, information about certain personal information we shared, if any, with other businesses for their own direct marketing uses in the previous calendar year. To request a copy, please contact us at privacy@pubmatic.com or the mailing address noted below. Please be aware that not all personal information sharing is covered by the “Shine the Light” law requirements and only personal information on covered sharing will be included in our response.
SECTION 6 – CCPA Request Statistics
Below are the metrics related to the CCPA data subject requests we received for the previous calendar year:
| Access Requests | Number of Requests Received | 23 |
| Number of Requests Fulfilled | 23 | |
| Number of Requests Denied | 0 | |
| Median Fulfillment Time | 18 Days |
| Deletion Requests | Number of Requests Received | 58 |
| Number of Requests Fulfilled | 58 | |
| Number of Requests Denied | 0 | |
| Median Fulfillment Time | 14 Days |
| “Do not sell” Requests | Number of Requests Received | 65 |
| Number of Requests Fulfilled | 65 | |
| Number of Requests Denied | 0 | |
| Median Fulfillment Time | 14 Days |
SECTION 6 – CONTACT FOR MORE INFORMATION
If you have any questions or concerns about PubMatic’s privacy policy and practices, please contact us by email at privacy@pubmatic.com, or by mail at:
PubMatic, Inc. c/o Privacy
601 Marshall Street
Redwood City, California 94063, USA
