WEBSITE PRIVACY POLICY
Last Updated: March 28, 2025
PRIVACY FOR THE PUBMATIC PROPERTIES
This corporate and website privacy policy (“Website Privacy Policy”, “Privacy Policy”, or “Policy”) explains how we collect, use, and disclose information in connection with our “PubMatic Corporate” website and tools we offer to our business clients and contacts, including our Client interfaces, i.e, Community Portal, Publisher UI, Media Buyer Console UI, Activate UI AI powered chat. It also includes our “Investor Relations” page, and our “Contact Us” page (collectively, “PubMatic Properties”).
If you are interested in our privacy practices for PubMatic’s Advertising Platform, please review our Ad Platform Privacy Policy. If you are interested in our applicant privacy practices, please review our Careers Privacy Policy.
Your Privacy Choices
Please visit https://pubmatic.com/legal/opt-out/ to go directly to the interest-based advertising opt-outs we offer.
TABLE OF CONTENTS: We recognize that reading and understanding privacy practices can be difficult and time-consuming. While we recommend that you read this document in its entirety, to make this process easier for you, we have taken steps to simplify it and provide the following quick links to make it easier to navigate.
- WHO WE ARE
- PERSONAL DATA WE COLLECT
- HOW WE USE THE PERSONAL DATA
- HOW WE DISCLOSE PERSONAL DATA
- YOUR CHOICES AND DATA PROTECTION RIGHTS
- ADDITIONAL INFORMATION FOR RESIDENTS SUBJECT TO STATE PRIVACY LAWS
- ADDITIONAL INFORMATION FOR DATA SUBJECTS IN THE EEA, UK, AND SWITZERLAND
- INTERNATIONAL DATA TRANSFERS
- DATA PRIVACY FRAMEWORK
- RETENTION OF PERSONAL DATA
- SECURITY
- UPDATES TO THIS POLICY
- CONTACTING US
- WHO WE ARE
Any reference to “PubMatic” “we” or “our” means PubMatic, Inc. and its global subsidiaries including, as of the effective date of this Policy, PubMatic Limited, PubMatic GmbH, PubMatic India Private Limited, パブマティック株式会社 (PubMatic KK), PubMatic Pte. Ltd. and 据翼软件科技有限公司 (PubMatic Software (Shanghai)) Limited.
To get in touch with us, please see the “Contact Us” section of this document.
- PERSONAL DATA WE COLLECT
- Information you provide directly
Certain parts of the PubMatic Properties may ask visitors to provide personal information voluntarily. For example, we may collect personal information when a visitor registers for a PubMatic account, expresses an interest in obtaining additional information about PubMatic or our products and services, logs in to our user interfaces, subscribes to our marketing communications, or otherwise contacts us.
The personal information we may collect includes contact information (such as name, address, telephone number, or email address) and contact preferences (such as preferred means of communication – SMS or email). It may also include professional information, such as job title, department or job role, the nature of an individual’s request or other information you choose to provide. Please do not post any information that is sensitive in nature or which you would not want to be viewed and used in accordance with this Privacy Policy.
- Information collected automatically and received from third parties
When using the PubMatic Properties, we or our third-party partners may automatically collect certain information from an individual’s device and information about activity on PubMatic Properties, including IP address and cookie ID (online identifiers), operating system type and version, device type, mobile device identifier, browser type and version, information about the individual’s system and connection (device and system information), an individual’s activities on the PubMatic Properties, and how the individual interacts with the PubMatic Properties and other websites (online activity information). We and our third-party partners may collect this information with cookies or other tracking technologies, as explained further in our “Website Cookie Policy”.
- Information you provide directly
- HOW WE USE THE PERSONAL DATA
We process and/or disclose Personal data collected from PubMatic Properties for the purposes listed below.
- Contact information, contact preferences and professional information. We and marketing partners may use the information for our marketing purposes (for example, to send promotional emails), in accordance with an individual’s marketing preferences. You may opt out of our marketing at any time (see “Your Opt-Out Choices“). We may also send information regarding our services and changes to our terms, conditions, and policies. Furthermore, we may use information to create or administer PubMatic user accounts for customers and to provide customer support or other requested services or information about PubMatic’s services.
- Categories of data include, for example, your email address, phone number, professional and employment information (such as your role and employer), commercial information (such as services your company purchases from PubMatic)
- Online identifiers, device and system information, online activity information. We may partner with certain third parties to collect information on the PubMatic Properties to engage in analysis, auditing, research, and reporting, as well as to deliver advertising that we believe may interest you based on your activity on the PubMatic Properties and other websites over time. These third parties may set and access cookies on your computer or other devices. They may also use pixel tags, web logs, web beacons, or other similar technologies. For more information about these practices and how to opt out, please see PubMatic’s “Website Cookie Policy”. We may use this information to provide and improve PubMatic Properties and to ensure that content on the PubMatic Properties is presented in the most effective manner for your device.
- Categories of data include, for example, your cookie IDs, internet or other electronic network information, location information (country and state as inferred through your IP address)
Purpose of Use
Categories of Personal Data
Marketing and promotional communications
Send administrative information
Engage and process transactions
Interest based advertising and analytics
Account management, customer support and other services
Content and service optimization
Legal purposes
Business purposes
Contact information, contact preferences and professional information
X
X
X
X
x
X
Online identifiers, device and system information, online activity information.
X
X
x
X
Lawful Basis (UK/EEA)
Consent
Legitimate Interest
Consent
Consent
Legitimate Interest
Legitimate Interest
Legitimate Interest/ Consent
Legitimate Interest/ Consent
We may use information as we believe to be necessary or appropriate: (a) to comply with applicable law, including laws outside your country of residence; (b) to comply with subpoenas, warrants, or other legal process; (c) to respond to requests from public and government authorities including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to establish or exercise our legal rights or defend against legal claims.
We may use information for our business purposes, such as data analysis, audits, identifying usage trends, determining the effectiveness of our promotional campaigns, and to evaluate and improve our products, services, marketing, and client relationships.
USE OF PUBMATIC PROPERTIES BY MINORS
The PubMatic Properties are not intended for nor directed to individuals that are deemed to be children under applicable data protection or privacy laws, rules, or regulations, and we request that such individuals do not provide information through any of the PubMatic Properties.
- Contact information, contact preferences and professional information. We and marketing partners may use the information for our marketing purposes (for example, to send promotional emails), in accordance with an individual’s marketing preferences. You may opt out of our marketing at any time (see “Your Opt-Out Choices“). We may also send information regarding our services and changes to our terms, conditions, and policies. Furthermore, we may use information to create or administer PubMatic user accounts for customers and to provide customer support or other requested services or information about PubMatic’s services.
- HOW WE DISCLOSE PERSONAL DATA
For the purposes described in this Policy, we process and/or disclose personal data collected from PubMatic Properties to the following categories of recipients:
- Our affiliates: We may disclose your information to our affiliates (see “Who We Are“) who provide data processing and business administration support for the purposes described in this Policy. PubMatic, Inc. is the party responsible for the management of your personal information jointly used by it and its affiliates.
- Third party service providers and partners: We may disclose your information to our third party service providers and partners who provide data processing services to support the delivery of, provide functionality on, or help to enhance the security of the PubMatic Properties or who otherwise process personal information for purposes described in this Policy.
The following table lists the categories of third party service providers and partners we engage to process your personal information, the nature of the services they provide, and the types of personal information they receive in order to provide these services.
Nature of Services / Information Sharing
Personal data
Attribution and Analytics Partners
If you are an End User, we may share your information with our attribution and analytics partners to validate and measure the success and effectiveness of content delivered to you.
Information collected automatically – online identifiers, device and system information, online activity information
Analytics Partners
We may partner with certain third parties to collect information on the PubMatic Properties to engage in analysis, auditing, research, and reporting. We may share information with them for this purpose. For information about how to opt out, see “Your Opt-Out Choices” below.
Information collected automatically – online identifiers, device and system information, online activity information
IT service providers
Data storage, data processing services, hosting services, technical support, website development.
Information that you provide directly – contact information, contact preferences and professional information and "free text" information;
And
Information collected automatically – online identifiers, device and system information, online activity information.
Professional service providers
Lead management, campaign management, legal services, accountancy services, fraud prevention, payment services.
Information that you provide directly – contact information, contact preferences and professional information, "free text" information
And
Information collected automatically – online identifiers, device and system information, online activity information.
- Other third parties:
- Buyers of some or part of our business: We may share your information with a third party in the event of a contemplated or actual reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
- For legal purposes: We may share your information as we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with subpoenas, warrants, or other legal process; (c) to respond to requests from public and government authorities including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to establish or exercise our legal rights or defend against legal claims.
- With consent: We may disclose an individual’s information to any other person with the individual’s consent to such disclosure.
- Public disclosures by you:
- On message boards or other public webpages: Individuals may choose to share information on message boards, chat, profile pages and blogs and other services that allow visitors to post information and materials (including, without limitation, our social media pages) on PubMatic Properties. Please note that any information posted or disclosed through these services and forums will become public information and may be available to users of the PubMatic Properties and to the public. We urge you to be very careful when deciding to disclose your personal information, or any other information, on the PubMatic Properties.
- YOUR CHOICES AND DATA RIGHTS
- Your Choices
How to opt-out of receiving electronic communications from us
If you no longer want to receive marketing-related emails from us, you may opt out by submitting your preference on our Email Preference Center or by clicking on the opt-out link within the email message that you receive from us. Customers, please also note that if you do opt out of receiving marketing-related emails from us, we may still be required to send you administrative messages relating to our services from time to time.
- Your Data Rights
Individuals may be entitled to exercise certain data subject rights available under applicable laws. These rights may include the right to request access to personal data we hold. Individuals may also have the right to object to, or request that we restrict, processing of personal data. Individuals may also have the right to ask that personal data be corrected, erased, or transferred to another party. Individuals may have a right to request erasure of, portability, or restrictions of the processing of their personal data Where we have asked for consent to process data, consent may be withdrawn.
To make a request to exercise your data rights with respect to your personal data, please contact us at pubmaticprivacy[at]pubmatic[.]com. We will take steps to verify your request, such as by asking you to provide confirmation that you control the device to which the request relates. We reserve the right to confirm your residence to accurately process your request and will need to confirm your identity to process your requests to exercise your right to know/access, delete, and correct. This is a security measure to, for example, help ensure we do not disclose information to a person who is not entitled to receive it. The identity verification process may vary depending on how you submit your request.
Authorized Agents
If you are submitting a rights request as an authorized agent, you are required to submit proof of your identity, and proof of authorization to make the request, such as a valid power of attorney or signed permission from the individual who is the subject of the request. In some cases, we may ask the individual to confirm they have given you permission to make the request. Please be advised that we cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it. If you are an authorized agent seeking to make a request for an individual, please contact us at pubmaticprivacy[at]pubmatic[.]com
Nondiscrimination
We will not discriminate against you for exercising your privacy rights.
- Your Choices
- ADDITIONAL INFORMATION FOR RESIDENTS SUBJECT TO STATE PRIVACY LAWS
- Identifiers (such as your email address, phone number, and cookie IDs)
- Professional and employment information (such as your role and your employer)
- Commercial information (such as services your company purchases from PubMatic)
- Internet or other electronic network activity information (such as information about your visits to PubMatic Properties)
- Location information, (as inferred based on IP address)
- Inferences (such as services you might be interested in purchasing as a PubMatic client)
- Our corporate affiliates
- analytics partners
- Vendors, consultants, and other service providers
- Others in connection with business transfers
- Government authorities and others as needed for legal reasons
- Others with your consent or at your direction
- Other users of our PubMatic Properties if you choose to post information to public portions of these properties
- To send marketing and promotional communications
- To send administrative information
- To engage in and process transactions
- To post testimonials
- For analytics purposes
- To manage accounts and provide customer support or other services
- To select content and improve quality
- For legal purposes
- Identifiers (such as cookie IDs)
- Internet or other electronic network activity information (such as pages you visit on our PubMatic Properties and links you click)
- Third party data partners
- ADDITIONAL INFORMATION FOR DATA SUBJECTS IN THE EEA, UK, AND SWITZERLAND
Depending on your location, you may have data subject rights (“DSR”s) described in the “Your Data Rights” section above; these rights are applicable, for example, to individuals located in the European Economic Area (“EEA”), United Kingdom (“UK”) and Switzerland. In order to exercise your rights under applicable laws, please contact pubmaticprivacy[at]pubmatic[.]com
If we have collected and processed your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.
If you are located in the EEA or the UK, you may also have the right to complain to a Data Protection Authority about our collection and use of your personal information. For more information, please contact your local Data Protection Authority.
- EEA Data Protection Authority member list
- UK Information Commissioner’s Office
- INTERNATIONAL DATA TRANSFERS
In connection with the PubMatic Properties, your personal data may be transferred to, and processed by PubMatic, its service providers, and partners in countries other than the country in which you are resident, including in the United States, India, and other locations where we have offices or employees (please see our HYPERLINK "https://pubmatic.com/contact-us/#locations"Locations page for a full list) or engage service providers or our partners. These countries may have data protection laws that are different from the laws of your country of residence and may not provide the same level of protection as your jurisdiction. Regardless of where your data is located, PubMatic shall process your personal data in accordance with this Website Privacy Policy.
If you are located in the EEA, UK or Switzerland, we will protect your personal data when it is transferred outside of your jurisdiction by (i) processing it in compliance with the Data-Privacy Framework (as applicable, defined below); (ii) processing it in a territory that provides an adequate level of protection for ersonal data based on the receiving country’s data protection laws; or (iii) to the extent that the Data Privacy Framework is unavailable and the recipient country has not been deemed to provide adequate protection, implementing appropriate safeguards to protect your personal data, such as requiring the recipient to comply with the EU Standard Contractual Clauses, or another lawful and approved transfer mechanism. Where we transfer personal data originating in the EEA, UK or Switzerland pursuant to a contract incorporating the EU Standard Contractual Clauses or another lawful and approved transfer mechanism, you may request a copy of such transfer mechanism (subject to the removal of confidential or commercially sensitive information) by contacting pubmaticprivacy[@]pubmatic{.]com.
- DATA-PRIVACY FRAMEWORK
PubMatic, Inc. complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce (together, referred to herein as the “Data Privacy Framework”). PubMatic, Inc. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regards to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. PubMatic, Inc. has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regards to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. Further, PubMatic is responsible for the processing of personal data it receives, under the EU-U.S. DPF, and subsequently transfers to a third party acting as an agent on its behalf. PubMatic complies with EU-U.S. DPF Principles for all onward transfers of personal data from the EU, including the onward transfer liability provisions. If there is any conflict between the terms in this Website Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the applicable Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
The Federal Trade Commission has jurisdiction over PubMatic, Inc’s compliance with the Data Privacy Framework. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. In compliance with the Data Privacy Framework, PubMatic, Inc. commits to refer unresolved complaints concerning our handling of personal data received in reliance on EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF with our Data Protection Officer at dpo[at]pubmatic[.]com.
Additionally, PubMatic commits to refer unresolved complaints concerning our handling of personal data received in reliance on EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to our U.S.-based third-party dispute resolution provider (free of charge), TRUSTe. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit at https://feedback-form.truste.com/watchdog/request for more information or to file a complaint. The services of TRUSTe are provided at no cost to you.
If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, if we have not addressed your DPF Principles-related complaint to your satisfaction, or we are not able to resolve the issue, individuals have the right to lodge a complaint with their local data privacy authority. For contact details of local Data Protection Authorities, please visit the European Data Protection Board member list (https://www.edpb.europa.eu/about-edpb/about-edpb/members_en) or the UK data protection regulator (https://ico.org.uk/global/contact-us/).
If you wish to exercise your rights under the EU General Data Protection Regulation (EU GDPR) or have any queries in relation to your rights or general privacy matters, please write to: Attn: EEA Contact Representative, PubMatic GmbH, Barbara Strozzilaan 101, 1083 HN Amsterdam Netherlands or pubmaticprivacy[at]pubmatic[.]com.
Under certain conditions, more fully described on the DPF website, https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2 you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
- RETENTION OF USER INFORMATON
We retain personal data for as long as necessary to fulfill the purpose of collection, including for the purposes of satisfying any business, legal, regulatory, accounting, or reporting requirements; to establish and defend legal claims; for fraud prevention purposes; or as long as required to meet our legal obligations. To determine the appropriate retention period for personal data, we consider the volume, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure of that data, the purposes for which we process the data and whether we can achieve those purposes through other means, along with any applicable legal requirements.
- SECURITY
We use reasonable organizational, technical, administrative, and physical safeguards to protect the personal data we collect and process. The measures we use are designed to provide a level of security appropriate to the risk of processing personal data If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem by contacting us in accordance with the “Contacting Us” section below.
- UPDATES TO THIS POLICY
We will review and update this Policy periodically and will note the date of its most recent revision at the top of this Policy. If we make material changes to this Policy, we will post the revised Policy on our website and may take additional measures to inform you about such changes prior to such changes taking effect. We encourage you to review this Policy frequently.
- CONTACTING US
If you have any questions about this Website Privacy Policy or PubMatic’s privacy practices, please contact us by email at pubmaticprivacy[at]pubmatic[.]com, or by mail using the details provided below.
Please note that email communications are not always secure, so please do not include sensitive information in your emails to us.
Residents outside the European Economic Area (EEA):
PubMatic, Inc. c/o Privacy
601 Marshall Street
Redwood City, California 94063, USAEuropean Economic Area (EEA), and Swiss Residents:
PubMatic Privacy
PubMatic GmbH
Barbara Strozzilaan 101
1083 HN Amsterdam, NetherlandsUK Residents:
Attn: PubMatic Privacy
PubMatic Limited
18 – 22 Stoney Lane
Yardley, Birmingham B25 8YP, EnglandWho is the controller of my data? For the purposes of EU/UK data protection legislation, PubMatic, Inc is the controller of your personal information.
The California Consumer Privacy Act (“CCPA”) and other state privacy laws requires companies to explain some information using certain definitions and categories set out in that law. If you reside in California, this section applies to you. In the preceding sections, we explain the information we collect, how we use it, and the circumstances in which we disclose it.
As required by applicable state privacy laws, below we use two tables to explain this same information, including the categories of personal information we collect (and have collected over the preceding twelve (12) months), types of entities to which we disclose such information, and the ways we use each category of information. We collect personal information that you provide to us directly, automatically when you use the PubMatic Properties, and from data partners.
Collection, Use, and Disclosure of Personal Information for Business Purposes
|
Categories of Personal Data |
Categories of Recipients |
Uses of Personal Data |
|
|
|
|
“Sharing,” and Your Opt-Out Rights under the CCPA
As described in this Policy, we work with third parties who collect information through cookies about your visits to PubMatic Properties, which is used for the purposes described in this Policy. These activities may constitute “sharing” under the CCPA, and you may opt out by following the instructions for “Cookies on PubMatic Websites” here. We do not knowingly sell or share personal information about minors.
The types of information we may have disclosed for purposes that constitute sharing under the CCPA and the categories of recipients are set out in the table below:
|
Categories of Personal Information |
Categories of Recipients |
|
|
|
Please visit CCPA Privacy Policy to review our CPRA and Data Broker Metrics
Appeals
If we deny your request, you may have the right to appeal our decision by contacting us at pubmaticprivacy[at]pubmatic[.]com. If you have concerns about the result of an appeal, you may contact the attorney general in the state where you reside.