Last Updated: October 1, 2020

This CCPA Privacy Policy describes PubMatic’s practices regarding the collection, use, and disclosure of the personal information of California residents, describes the rights of California residents under the California Consumer Privacy Act of 2018 (“CCPA”), and explains how California residents may contact PubMatic to exercise those rights. This CCPA Privacy Policy only applies to the personal information of California residents. All capitalized terms not defined in this CCPA Privacy Policy shall have the meanings set forth in our Privacy Policy.

SECTION 1 – CALIFORNIA RESIDENT RIGHTS

If you are a resident of California, you have the following rights under the California Consumer Privacy Act (“CCPA”):

  • You have the right to request deletion of your personal information that we have collected, subject to certain exemptions, and to have such personal information deleted, except where necessary for certain exempt purposes.
  • You have the right to request a copy of the specific pieces of personal information that we have collected about you in the prior 12 months.
  • You have the right to request a description of the categories of personal information about you that we have collected, used, disclosed or sold in the prior 12 months. Specifically, you may request a description of the:
    • categories of personal information we have collected;
    • categories of sources from whom we have collected personal information;
    • business and/or commercial purposes for collecting or selling your personal information;
    • categories of third parties with whom we have disclosed or shared your personal information;
    • categories of personal information that we have disclosed or shared with a third party for a business purpose; and
    • categories of third parties to whom we have sold personal information and the specific categories of personal information sold to each category of third party.
  • You have the right to opt-out of the sale of your personal information.

You have the right not to be discriminated against because you exercise your rights under the CCPA.

SECTION 2 – HOW TO SUBMIT A REQUEST

You may submit a CCPA rights request through our Consumer Privacy Request page, by calling 855-550-0007 or by contacting us at privacy@pubmatic.com. You may also designate an authorized agent to make a request to delete, or request a copy or a description of the categories of, the personal information we collect about you on your behalf. We may require you to provide the agent with signed permission to submit a request, require that you verify your identity directly, or otherwise require you to confirm you have provided the authorized agent with permission. You may submit a request as frequently as you would like, but we are not required to respond to requests to provide personal information to you more than twice in any 12-month period.

To submit a verifiable Consumer request, you will be asked to provide certain information to help us verify your identity. The information we ask you to provide to initiate a request may differ depending upon the type of request, the type, sensitivity and value of the personal information that is the subject of the request, and the risk of harm to you that may occur as a result of unauthorized access or deletion, among other factors. Please note that because most of the information we store can only identify a particular browser or device, and cannot directly identify you personally, you may need to provide us with some additional information to enable us to identify the personal information we hold about you and ensure that we accurately fulfill your request and do not infringe on the privacy rights of other individuals.

To opt out of receiving interest-based advertising (including retargeting) from our Ad Services through the use of cookies in your current browser and for more information on what it means to opt out, please go to https://pubmatic.com/legal/opt-out/.

See PubMatic’s Platform Cookie Policy and Website Cookie Policy for more information on how PubMatic uses cookies and other similar technologies. For more information about cookies in general, including how to see what cookies have been set on your device and how to manage and delete them, visit www.allaboutcookies.org.  For more information about how to clear your browser cache, please see your browser’s instructions for doing so.  Please note that deleting or resetting cookies and clearing your browser cache will not opt you out of receiving interest-based advertising (including retargeting) from PubMatic’s Ad Services.

SECTION 3 – HOW WE COLLECT, USE AND SHARE PERSONAL INFORMATION OF CALIFORNIA RESIDENTS

Personal Information We Collect and Sources from which We Collect Personal Information

Preference cookies collect and store information about your choices and preferences, such as your preference to opt out of other cookies that may be applied by the Platform.

Depending on how you have engaged or interacted with PubMatic, PubMatic has collected the following categories of personal information about California residents in the twelve (12) months prior to the effective date of this CCPA Privacy Policy from the following sources:

Business Activity
Categories of Sources from which Personal Information is Collected
Categories of Personal Information Collected
Examples of Personal Information Collected
Providing our Ad Services Through automated means such as cookies and other data collection tools when you visit a Digital Property that uses our advertising services technology. Internet or other electronic network activity information. Browser and device information, such as device type and model; manufacturer; operating system type and version (e.g. iOS or Android); web browser type and version (e.g., Chrome or Safari); user-agent; carrier name; time zone; network connection type (e.g., Wi-Fi or cellular); IP address; general location inferred from IP address; hardware-based identifiers (e.g. MAC address); information about our Publisher Client’s apps and versions currently active on a device (but not any other apps); identifiers assigned to a device, such as its iOS Identifier for Advertisers (IDFA), Android/Google Advertising ID (AAID or GAID), or other unique device identifier (typically an alphanumeric string allocated to a device by the device manufacturer, a Publisher Client’s Digital Property, or PubMatic, including identifiers stored in a cookie, ETag, or browser or web cache).

Information about the activities or actions on our Publisher Clients’ Digital Properties, such as information about the activities or actions on those Digital Properties, session start/stop time.

Information about ads served, viewed, or clicked on, such as the type of ad, where the ad was served, whether the End User clicked on it, the number of times an End User has seen the ad, and whether the End User visited the Media Buyer’s website or relevant app store.

Commercial information Whether an End User purchased or installed the product or service advertised.Whether an End User purchased or installed the product or service advertised.
Geolocation data Geolocation (including latitude and longitude co-ordinates, but only if the Publisher Client’s Digital Property (like an app) has enabled location services on the device and the End User has granted the Publisher Client permission to collect and share this information for advertising purposes).
Inferences We may use the information we collect to infer End User preferences and consuming patterns.
From our Publisher Clients and third party data aggregators. Internet or other electronic network activity information Network, type of an End User’s device and mobile device IDs, content viewed or actions taken on a website or app.
Demographic data Demographic or interest data.
Geolocation data Precise geolocation (where permitted by law).
Characteristics of protected classifications under California or federal law Age; ethnicity (where permitted by law); and gender.
Unique personal identifier Unique IDs our external partners or Publisher Clients have assigned to End Users.
Inferences We may use the information we receive from our Publisher Clients and third party data aggregators to help infer End User preferences and consuming patterns.
Operating PubMatic Properties (such as our Websites) From you directly when you provide such information or through automated means such as cookies and other data collection tools when you visit a PubMatic Property. Contact information Name; address; telephone number; email address; and contact preferences.
Internet or other electronic network activity information IP address; operating system type and version; browser type and version; cookie ID; an individual’s activities on the PubMatic Properties; and other information about the individual’s system and connection and how the individual interacts with the PubMatic Properties and other websites.
Professional or employment-related information Job title; department or job role; and the nature of an individual’s request or communication.

Business / Commercial Purpose for Collection of Personal Information

PubMatic collects the personal information described above for a variety of business purposes.

For Ad Services, we use the personal information collected to provide our services; serve ads; provide information and reports to Media Buyers; prevent End Users from seeing the same ad too many times; customize ads; analyze ad performance; deliver Internet-based and location-based advertising; detect and prevent fraud and protect the security of our Ad Services; provide, manage and improve our Ad Services and develop new services; calculate usage levels of our Ad Services, help diagnose server problems and administer our Ad Services; and as we believe to be necessary or appropriate, such as to comply with legal requirements. You can read more about how we use the personal information we collect for our Ad Services in Section 2.2 of our Privacy Policy entitled, “How Do We Use Your Information.

For PubMatic Properties, we use the personal information collected to send marketing and promotional communications; send administrative information; engage in and process transactions; post testimonials; provide interest-based advertising and engage in analytics on your activity on the PubMatic Properties and other websites over time; manage accounts and provide customer support or other services; improve the content and quality of PubMatic Properties and Ad Services; for legal purposes; and for our business purposes, such as to evaluate and improve our products, services, marketing, and client relationships. You can read more about how we use the personal information we collect for PubMatic Properties in the Section 3.2 of our Privacy Policy entitled, “How Do We Use Your Information.”

Categories of Third Parties To Whom We May Disclose or Sell Personal Information

We may disclose any of the personal information we collect for our business purposes, or sell the personal information, to the following categories of third parties:

  • PubMatic’s publisher clients
  • Media buyers
  • PubMatic’s other clients including brands, agencies, and other third parties
  • Attribution and Analytics Partners
  • PubMatic vendors, consultants, and other service providers
  • Website advertising parties

We may also disclose the personal information we collect to third parties in connection with a corporate event such as a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings), for legal purposes, and with your consent. You can read more about how we share personal information in the Section of our Privacy Policy entitled, “How Do We Share Your Information.” We do not have actual knowledge that PubMatic sells the personal information of California residents under 16 years of age.

SECTION 4 – UPDATES TO THIS POLICY

We will review and update this CCPA Privacy Policy periodically and will note the date of its most recent revision at the top of this CCPA Privacy Policy. If we make material changes to this Policy, we will post the revised Policy on our website and may take additional measures to inform you about such changes prior to such changes taking effect, if required by applicable data protection laws. We encourage you to review this Policy frequently to be informed of how PubMatic is protecting your information.

SECTION 5 – CALIFORNIA “SHINE THE LIGHT” LAW

Under California Civil Code Section 1798.83, also known as California’s “Shine the Light” law, California residents with whom we have an established business relationship are entitled to request and receive, free of charge, once per calendar year, information about certain personal information we shared, if any, with other businesses for their own direct marketing uses in the previous calendar year. To request a copy, please contact us at privacy@pubmatic.com or the mailing address noted below. Please be aware that not all personal information sharing is covered by the “Shine the Light” law requirements and only personal information on covered sharing will be included in our response.

SECTION 6 – CONTACT FOR MORE INFORMATION

If you have any questions or concerns about PubMatic’s privacy policy and practices, please contact us by email at privacy@pubmatic.com, or by mail at:

PubMatic, Inc. c/o Privacy
3 Lagoon Drive, Suite 180
Redwood City, California 94065, USA