PubMatic Properties Privacy Policy

This page is about the privacy practices for PubMatic’s website and other digital properties (“PubMatic Properties”). If you are interested in our privacy program for PubMatic’s Advertising Platform, click here. This Policy does not cover our privacy practices related to information submitted to the Careers section of the Websites. If you submit information to PubMatic’s Careers section of the Websites, please refer to PubMatic’s Careers Privacy Policy.

Last Updated: October 4, 2023

PubMatic is an advertising technology company that provides a variety of online advertising-related services (see “Who We Are“). We are concerned about privacy issues and want you to be familiar with how we collect, use, and share information and how you can exercise the privacy rights available to you. This Privacy Policy (“Policy”) covers the information that we may process about individuals who access PubMatic’s owned and operated websites, apps, or other digital properties (those individuals are referred to here as “End Users”).

If you are a resident of the European Economic Area, Switzerland or the United Kingdom and want to find out more about your data protection rights, please see “Your Data Protection Rights“.

If you are a resident of California, please see our CCPA Privacy Policy to find out more about your privacy rights.

If you have any questions, you may contact us (see “Contact Us”)

PRIVACY FOR THE PUBMATIC PROPERTIES

This Policy explains the process of collecting and utilizing information when a user interacts with or uses any of the PubMatic properties (for example, when a user interacts with www.pubmatic.com), which may include: “PubMatic Corporate” website, our “Community Portal”, our “Publisher Console” and “Media Console”, our “Investor Relations” page, and our “Contact Us” page (collectively, “PubMatic Properties”).

This policy outlines the choices available to you regarding our use of your personal information and your rights. This policy does not apply to the privacy practices of other websites that are linked from our websites. PubMatic is not responsible for the privacy practices of these other websites. We encourage you to read the privacy policies of those websites to understand their data privacy practices.

1. WHO WE ARE

Any reference to “PubMatic” “we” or “our” means PubMatic, Inc. and its global subsidiaries including, as of the effective date of this Platform Privacy Policy, PubMatic Limited, PubMatic GmbH, PubMatic India Private Limited, パブマティック株式会社 (PubMatic KK), PubMatic Pte. Ltd. and 据翼软件科技有限公司 (PubMatic Software (Shanghai)) Limited.

To get in touch with us, please see the “Contact Us” section of this document.

1. WHAT INFORMATION DO WE COLLECT?

Information that individuals provide voluntarily

Certain parts of the PubMatic Properties may ask visitors to provide personal information voluntarily. For example, we may collect personal information when a visitor registers for a PubMatic account, expresses an interest in obtaining additional information about PubMatic or our products and services, subscribes to our marketing, or otherwise contacts us.

The personal information we collect may include contact information (such as name, address, telephone number, or email address) and contact preferences. It may also include professional information, such as job title, department or job role, and the nature of an individual’s request or communication. We also collect information that visitors choose to provide to us when completing any ‘free text’ boxes in our forms (for example, for event sign-up, product feedback, or survey requests). Please do not post any information that you do not want to reveal to the public at large.

Information we or our third-party partners collect automatically

When using the PubMatic Properties, we or our third-party partners may automatically collect certain information from an individual’s device. In some countries and states, including countries in the EU and the State of California, this information may be considered personal data under applicable data protection laws.

Specifically, the information we collect automatically may include IP address, operating system type and version, device type, mobile device identifier, browser type and version, cookie ID, an individual’s activities on the PubMatic Properties, and other information about the individual’s system and connection and how the individual interacts with the PubMatic Properties and other websites. We and our third-party partners may collect this information as a part of log files and with cookies or other tracking technologies, as explained further in our “Website Cookie Policy”.

1. HOW DO WE USE YOUR INFORMATION?

Information that individuals provide voluntarily

We may use information collected from the PubMatic Properties for the following purposes:

Purposes of Use	Examples
To send marketing and promotional communications	For example, we and/or our third-party marketing partners may use the information for our marketing purposes (for example, to send promotional emails), in accordance with an individual’s marketing preferences. You may opt out of our marketing at any time (see “Your Opt-Out Choices“).
To send administrative information	For example, to send information regarding our services and changes to our terms, conditions, and policies.
To engage in and process transactions	For example, we may use personal information to process your transactions and for billing purposes.
To post testimonials	We post testimonials on the PubMatic Properties that may contain personal information. Prior to posting a testimonial, we will obtain your consent to use your name and testimonial. If you wish to update or delete your testimonial, please contact us at privacy@pubmatic.com and be sure to include your name, testimonial location, and contact information.
Interest-based advertising and analytics	We may partner with certain third parties to collect information on the PubMatic Properties to engage in analysis, auditing, research, and reporting, as well as to deliver advertising that we believe may interest you based on your activity on the PubMatic Properties and other websites over time. These third parties may set and access cookies on your computer or other device and may also use pixel tags, web logs, web beacons, or other similar technologies. For more information about these practices and how to opt out, please see PubMatic’s “Website Cookie Policy”.
To manage accounts and provide customer support or other services	For example, we may use information to create or administer PubMatic accounts and to provide customer support or other requested services or information about PubMatic’s services.
To select content and improve quality	We may use information to help improve the PubMatic Properties and PubMatic Ad Services and to ensure that content on the PubMatic Properties is presented in the most effective manner for your device.
For legal purposes	We may use information as we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with subpoenas, warrants, or other legal process; (c) to respond to requests from public and government authorities including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to establish or exercise our legal rights or defend against legal claims.
For our business purposes	We may use information for our business purposes, such as data analysis, audits, identifying usage trends, determining the effectiveness of our promotional campaigns, and to evaluate and improve our products, services, marketing, and client relationships.

1. COOKIES AND SIMILAR TRACKING TECHNOLOGIES

We and our third-party partners may use cookies and similar tracking technologies on the PubMatic Properties to collect and use information about you. For further information about the types of cookies and other tracking technologies we use, why, and how you can control cookies, please see our “Website Cookie Policy”.

1. USE OF PUBMATIC PROPERTIES BY MINORS

The PubMatic Properties are not intended for nor directed to individuals that are deemed to be children under applicable data protection or privacy laws, rules, or regulations, and we request that such individuals do not provide information through any of the PubMatic Properties.

1. HOW WE SHARE YOUR DATA
  Information we collect may be disclosed for the following purposes:
  - To our affiliates: We may disclose your information to our affiliates (see “Who We Are“) for the purposes described in this Policy. PubMatic, Inc. is the party responsible for the management of your personal information jointly used by it and its affiliates.
  - Attribution and Analytics Partners: If you are an End User, we may share your information (such as your cookie ID, mobile device ID, or other unique identifier) with our attribution and analytics partners to validate and measure the success and effectiveness of ads delivered to you.
  - With our vendors, consultants, and other service providers: We may share your information with our third-party service providers, vendors, contractors, or agents who perform functions required for the operation of the business. Examples include providing data storage and processing services, lead management, campaign management, technical support for our Platform and PubMatic Properties and fraud prevention.
  - Website advertising partners: We may partner with certain third parties to collect information on the PubMatic Properties to engage in analysis, auditing, research, and reporting, as well as to deliver advertising that we believe may interest you based on your activity on the PubMatic Properties and other websites over time. We may share information with them for this purpose.
  - Business transfers: We may share your information with a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
  - For legal purposes: We may share your information as we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with subpoenas, warrants, or other legal process; (c) to respond to requests from public and government authorities including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to establish or exercise our legal rights or defend against legal claims.
  - With consent: We may disclose an individual’s information to any other person with the individual’s consent to such disclosure.
  - On message boards or other public webpages: Individuals may choose to share information on message boards, chat, profile pages and blogs and other services that allow visitors to post information and materials (including, without limitation, our social media pages). Please note that any information posted or disclosed through these services and forums will become public information and may be available to users of the PubMatic Properties and to the public. We urge you to be very careful when deciding to disclose your personal information, or any other information, on the PubMatic Properties.
2. INTERNATIONAL TRANSFERS; EU-US DATA-PRIVACY FRAMEWORK

In connection with the PubMatic Properties and Ad Services, your personal information may be transferred to, and processed by PubMatic, its service providers, and partners in countries other than the country in which you are resident, including in the United States, India, and other locations where we have offices or employees or engage service providers or our partners. These countries may have data protection laws that are different from the laws of your country of residence and may not provide the same level of protection as your jurisdiction. Regardless of where your data is located, PubMatic shall process your personal information in accordance with this Policy.

If you are resident in the EEA, UK or Switzerland, we will protect your personal information when it is transferred outside of your jurisdiction by (i) processing it in compliance with the EU-US Data-Privacy Framework (EU-U.S. DPF, as described below); (ii) processing it in a territory that provides an adequate level of protection for personal information based on the receiving country’s data protection laws; and/or (ii) to the extent that the EU-U.S. DPF is unavailable, implementing appropriate safeguards to protect your personal information, such as requiring the recipient to comply with the Standard Contractual Clauses, or another lawful and approved transfer mechanism.

PubMatic complies with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. PubMatic has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. PubMatic has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the applicable Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/

The Federal trade Commission has jurisdiction over PubMatic’s compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF). In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, PubMatic commits to refer unresolved complaints concerning our handling of personal data received in reliance on EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to our U.S.-based third-party dispute resolution provider (free of charge), TRUSTe. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit at https://feedback-form.truste.com/watchdog/request for more information or to file a complaint. The services of TRUSTe are provided at no cost to you.

Under certain conditions, more fully described on the DPF website, https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2 you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.

Residents of the EEA, UK and Switzerland may also request our data processing agreements in addition to relying on PubMatic’s DPF certification.

YOUR OPT-OUT CHOICES
How to opt-out of receiving electronic communications from us

If you no longer want to receive marketing-related emails from us on a going-forward basis, you may opt out of receiving these marketing-related emails by contacting us at privacy@pubmatic.com or by clicking on the opt-out link within the email message that you receive from us. Please also note that if you do opt out of receiving marketing-related emails from us, we may still be required to send you administrative messages relating to our services from time to time.

Opting out of our sharing of your personal information with affiliates for their direct marketing purposes

If you would prefer that we do not share your personal information in the future with our affiliates for their direct marketing purposes, you may opt out of this sharing by contacting us at privacy@pubmatic.com.

Opting out of interest-based advertising from Cookies

To opt out of receiving interest-based advertising (including retargeting) through the use of cookies in your current browser and for more information on what it means to opt out, please go to https://pubmatic.com/legal/opt-out/.

See PubMatic’s Website Cookie Policy for more information on how PubMatic uses cookies and other similar technologies. For more information about cookies in general, including how to see what cookies have been set on your device and how to manage and delete them, visit www.allaboutcookies.org. For more information about how to clear your browser cache, please see your browser’s instructions for doing so. Please note that deleting or resetting cookies and clearing your browser cache will not opt you out of receiving interest-based advertising (including retargeting) from PubMatic’s Ad Services.

We are a member of the Network Advertising Initiative (NAI) and adhere to the NAI Code of Conduct. We also adhere to the Digital Advertising Alliance’s (DAA) Self-Regulatory Principles for Online Behavioral Advertising and Multi-Site Data, the Application of Self-Regulatory Principles to the Mobile Environment, and the Application of the DAA Principles of Transparency and Control to Data Used Across Devices. If you go to optout.networkadvertising.org, or optout.aboutads.info, you can learn how to exercise choice regarding the collection of information about your online activities over time and across multiple third-party websites, online services, devices, or applications for interest-based advertising purposes.

Currently, we do not honor “Do Not Track” headers and similar mechanisms.
YOUR DATA PROTECTION RIGHTS
You may have the right to review, update, correct, access, obtain a copy of, port or delete the information PubMatic processes related to you. You may also have a right to restrict or limit the ways in which your information is processed, and the right to object to the processing of your personal data in certain circumstances. Depending on where you reside, you may designate someone to submit a request on your behalf as your authorized agent and appeal a decision denying your request by contacting us using the information provided below. You can find information regarding submitting a request and details regarding our process for responding to requests on our DSR Notice page.

If we process your information based on our legitimate interests or those of a third party you can object to this processing, and we will cease processing your information, unless the processing is based on overriding legitimate grounds or is needed for legal reasons.

If we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

If you are a resident of the European Economic Area (EEA) or the UK, you may also have the following rights:
- The right to object to processing your personal information, restrict processing of your personal information, or request portability of your personal information. To exercise these rights please see our DSR Notice to submit a request; and
- The right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. Contact details for data protection authorities in the EEA are here and the UK here.
If you are a resident of California, please see our CCPA Privacy Policy to find out more about your privacy rights.

Please note that because most of the information we store can only identify a particular browser or device, and cannot directly identify you personally, you may need to provide us with additional information to enable us to identify the personal information we hold about you and ensure that we accurately fulfill your request and do not infringe on the privacy rights of other individuals.
GENERAL
1. 1. UPDATES TO THIS POLICY
We will review and update this Policy periodically and will note the date of its most recent revision at the top of this Policy. If we make material changes to this Policy, we will post the revised Policy on our website and may take additional measures to inform you about such changes prior to such changes taking effect. We encourage you to review this Policy frequently.
1. 1. SECURITY
We use reasonable organizational, technical, administrative, and physical safeguards to protect the personal information we collect and process. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information and to help ensure that your data is safe and secure. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem by contacting us in accordance with the “Contacting Us” section below.
CONTACT US
If you have any questions about this Policy or PubMatic’s privacy practices, please contact us by email at privacy@pubmatic.com, or by mail using the details provided below.

Please note that email communications are not always secure, so please do not include sensitive information in your emails to us.

Residents outside the European Economic Area (EEA):

PubMatic, Inc. c/o Privacy
601 Marshall Street
Redwood City, California 94063, USA

European Economic Area (EEA), and Swiss Residents:

Attn: EEA Representative
PubMatic GmbH
Barbara Strozzilaan 101
1083 HN Amsterdam, Netherlands

UK Residents:

Attn: UK Representative
PubMatic Limited
18 – 22 Stoney Lane
Yardley, Birmingham B25 8YP, England

To comply with our obligations under EU/ UK data protection legislation, we have appointed a Data Protection Officer (DPO). Our DPO is contactable at dpo@pubmatic.com or by mail using the details provided above. Who is the controller of my data? For the purposes of EU/UK data protection legislation, PubMatic, Inc is the controller of your personal information