Privacy Policy

Last Updated: February 5, 2026

1. Introduction

Media Innovation Group Ltd. (Company Number: 516972049) ("Company," "we," "us," or "our") is an advertising technology company specializing in audio programmatic advertising solutions. We operate a marketplace platform that connects advertisers with premium audio publishers through advanced technology, proprietary audio player SDK, and real-time bidding infrastructure.

This Privacy Policy describes how we collect, use, maintain, protect, and disclose information when you use our website, advertising technology platforms, audio player SDK, APIs, and related services (collectively, the "Services").

This Privacy Policy applies to:

• Our website at https://m-innovation-group.com
• Our programmatic advertising marketplace platform
• Our proprietary audio player SDK and related technologies
• Our APIs and technical integrations with demand-side platforms (DSPs) and supply-side platforms (SSPs)
• Email, text, and other electronic communications between you and us
• Our social media accounts and pages
• Any related services, sales, marketing, or events

By accessing or using our Services, you agree to this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

As an advertising technology company, we collect several types of information depending on your interaction with our Services:

2.1 Information You Provide to Us (Business Users)

We collect information that you voluntarily provide when you:

• Register as an advertiser or publisher on our platform
• Contact us or express interest in our Services
• Configure campaigns or inventory through our platform
• Submit inquiries or requests for customer support
• Participate in surveys, promotions, or events
• Apply for employment with us

This may include:

• Name and contact information (email address, phone number, company name)
• Account credentials (username, password)
• Payment and billing information
• Professional information (job title, company details)
• Campaign parameters (targeting criteria, budgets, creative specifications)
• Inventory details (app/website URLs, content categories, ad formats)
• Communications preferences

2.2 Advertising Technology Data Collection

As an advertising technology platform operating a programmatic marketplace, we collect and process data for real-time bidding, ad serving, and campaign optimization:

2.2.1 Bid Request Data

When an ad opportunity becomes available in our network, we collect:

• Device Information: Device type, operating system, OS version, device manufacturer and model, screen resolution, device language
• Device Identifiers: IP address, mobile advertising IDs (IDFA for iOS, GAID for Android), device fingerprints, user agent strings
• Location Data: Geographic location derived from IP address (country, region, city, postal code), GPS coordinates (with user consent where required)
• App/Website Context: Publisher ID, app name and bundle ID, website domain, content categories (IAB taxonomy), page URL, referrer URL
• Inventory Characteristics: Ad placement type, ad format, player size, audio duration, content rating, player position
• Auction Parameters: Bid floor prices, deal IDs, private marketplace identifiers, supply chain transparency indicators (ads.txt, sellers.json)
• Connection Data: Connection type (WiFi, cellular), carrier information, bandwidth

2.2.2 User Behavior and Audience Data

To enable targeted advertising and audience matching, we collect and process:

• Behavioral Signals: App usage patterns, listening habits, content preferences, time spent, session frequency
• Audience Segments: Interest categories, demographic inferences (age range, gender - where permitted by law), purchase intent signals
• Cross-Device Data: Probabilistic or deterministic cross-device graphs (where permitted)
• Third-Party Data: Audience segments from data partners, contextual signals, brand affinity data

2.2.3 Campaign Performance and Attribution Data

• Ad Delivery Metrics: Impressions served, completion rates, click-through rates, quartile viewing (25%, 50%, 75%, 100%)
• Engagement Metrics: Mute/unmute actions, volume changes, skip events, interactive element clicks
• Viewability Data: Viewable impressions (IAB/MRC standards), audibility metrics, player visibility
• Conversion Data: Post-impression/post-click conversions, conversion pixels, store visits, app installs
• Attribution Signals: Multi-touch attribution data, incrementality measurements, lift studies

2.2.4 Audio Player SDK Data

Our proprietary audio player SDK, when integrated into publisher applications, collects:

• Playback Events: Play, pause, stop, seek, buffer events, playback errors
• Player Configuration: Player version, audio codec support, streaming protocol
• Content Metadata: Audio title, artist, genre, duration, bitrate
• Quality Metrics: Buffering time, startup latency, error rates, audio quality issues
• Ad Integration: VAST/VPAID events, ad pod position, companion ad interactions

2.3 Information Collected Automatically (Website Visitors)

When you access our website, we automatically collect:

• Device Information: Device type, operating system, browser type and version, screen resolution
• Usage Information: Pages visited, time and date of visits, time spent on pages, clickstream data, referring URLs, search terms
• Location Information: IP address, general geographic location
• Technical Information: Server logs, error reports, performance data

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, pixels, SDKs, and similar technologies to collect information about your online behavior. These technologies help us:

• Maintain security and operation of our Services
• Frequency cap ad delivery
• Enable retargeting and remarketing campaigns
• Build and activate audience segments
• Measure campaign performance and attribution
• Prevent ad fraud and invalid traffic
• Optimize bidding strategies and algorithms

2.5 Information from Third Parties

We may receive information from:

• Demand Partners: DSPs, trading desks, agency partners, direct advertisers
• Supply Partners: SSPs, app developers, audio publishers, content networks
• Data Partners: Third-party data providers, data management platforms (DMPs), customer data platforms (CDPs)
• Identity Partners: Cross-device graphs, identity resolution services
• Verification Partners: Ad verification vendors, brand safety providers, fraud detection services
• Attribution Partners: Mobile measurement partners (MMPs), attribution platforms
• Marketing Channels: Social media platforms, public databases, joint marketing partners

3. How We Use Your Information

3.1 Advertising Technology Operations

Real-Time Bidding and Ad Serving:

• Facilitate real-time auctions between advertisers and publishers
• Match advertising demand with available inventory
• Determine bid prices and auction winners
• Deliver ads to end users through our audio player SDK
• Enforce frequency caps and competitive exclusions

Targeting and Personalization:

• Build and activate audience segments based on behavioral data
• Enable contextual targeting based on content categories
• Facilitate geographic and demographic targeting (where permitted)
• Support retargeting and lookalike audience campaigns
• Deliver personalized ad experiences

Campaign Optimization:

• Optimize bidding algorithms and pricing strategies
• Predict campaign performance and delivery
• Adjust targeting parameters based on performance data
• Apply machine learning models for budget pacing

Measurement and Attribution:

• Track ad impressions, clicks, and conversions
• Measure viewability and engagement metrics
• Attribute conversions to advertising touchpoints
• Generate campaign performance reports and analytics
• Conduct brand lift and incrementality studies

Quality Assurance and Fraud Prevention:

• Detect and prevent invalid traffic and ad fraud
• Monitor for bot activity and click farms
• Enforce brand safety and content suitability standards
• Verify ad viewability and audibility
• Ensure supply chain transparency (ads.txt, sellers.json compliance)

3.2 Platform and Technology Operations

• Provide, operate, and maintain our marketplace platform
• Process transactions and manage accounts
• Monitor and improve audio player SDK performance
• Maintain API integrations with DSPs and SSPs
• Provide customer support and respond to inquiries

3.3 Research and Development

• Develop and test new advertising formats and technologies
• Improve machine learning models and algorithms
• Conduct A/B testing and experimentation
• Research market trends and user behavior
• Enhance audio streaming quality and reliability

3.4 Business Analytics

• Analyze usage trends and platform performance
• Create aggregated market insights and benchmarks
• Measure return on ad spend (ROAS) and campaign effectiveness
• Generate industry reports and whitepapers

3.5 Communication

• Send platform notifications and updates
• Respond to inquiries and provide support
• Send marketing materials (with consent)
• Notify about changes to Services or policies

3.6 Security and Compliance

• Detect, prevent, and address fraud and security issues
• Enforce our Terms of Service and other agreements
• Comply with legal obligations and regulatory requirements
• Protect our rights, property, and safety
• Conduct audits and maintain records

4. Legal Basis for Processing (EEA and UK Residents)

If you are located in the European Economic Area (EEA) or United Kingdom, our legal basis for processing your personal information includes:

• Consent: For processing device identifiers, location data, and behavioral tracking for advertising purposes. You may withdraw consent at any time through device settings or privacy controls.
• Contract Performance: Processing necessary to perform our contract with advertisers and publishers on our platform.
• Legitimate Interests: For fraud prevention, security, platform optimization, analytics, and direct marketing to business customers. We balance these interests against your privacy rights.
• Legal Obligation: Processing required to comply with applicable laws, such as tax regulations and anti-money laundering requirements.

5. How We Share Your Information

5.1 Advertising Ecosystem Partners

Demand Partners (Advertisers and DSPs):

• Share bid request data to enable real-time bidding
• Provide campaign performance and attribution data
• Share audience segments for targeting purposes
• Transmit conversion events and attribution signals

Supply Partners (Publishers and SSPs):

• Share advertiser requirements and targeting criteria
• Provide fill rate and revenue reporting
• Transmit ad creative and tracking pixels
• Share quality metrics and fraud indicators

Data and Identity Partners:

• Share device identifiers for audience enrichment
• Receive third-party audience segments
• Participate in cross-device identity graphs
• Exchange data for modeling and analytics (in aggregated form)

5.2 Technology and Service Providers

We share information with third-party service providers who perform services on our behalf:

• Cloud Infrastructure: AWS, Google Cloud, Microsoft Azure for hosting and data storage
• CDN Providers: Content delivery networks for audio streaming
• Analytics Platforms: Google Analytics, Mixpanel, Amplitude for usage analytics
• Payment Processors: Stripe, PayPal for payment processing
• Fraud Detection: DoubleVerify, IAS, MOAT for ad verification
• Customer Support: Zendesk, Intercom for support services
• Email Services: SendGrid, Mailchimp for communications
• Attribution Platforms: Adjust, AppsFlyer, Branch for mobile attribution

5.3 Business Partners and Affiliates

We may share information with:

• Our parent company, subsidiaries, and affiliated entities
• Strategic partners for co-marketing initiatives
• Industry associations and standards bodies (in anonymized form)

5.4 Corporate Transactions

If we are involved in a merger, acquisition, sale of assets, financing, or bankruptcy, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5.5 Legal Requirements and Protection

We may disclose your information to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service and other agreements
• Protect our rights, property, or safety, or that of our users or others
• Prevent fraud, security issues, or illegal activities
• Respond to law enforcement or regulatory inquiries

5.6 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you. This includes:

• Market research and industry benchmarks
• Platform performance metrics
• Advertising trends and insights
• Whitepapers and case studies

6. Data Retention

We retain personal information for different periods depending on the type of data and its purpose:

When retention periods expire, we securely delete or anonymize personal information unless longer retention is required by law.

7. International Data Transfers

We operate globally and transfer data internationally to provide our Services. Our servers and data centers are located in Israel and the United States, and we work with partners worldwide.

7.1 Transfers from the EEA/UK

For transfers from the European Economic Area (EEA) or United Kingdom:

• To Israel: Based on the European Commission's adequacy decision recognizing Israel's data protection standards
• To the United States: We use Standard Contractual Clauses (SCCs) approved by the European Commission (2021 version) and implement supplementary measures as required
• To Other Countries: We use SCCs or other appropriate safeguards such as binding corporate rules

7.2 Cross-Border Advertising

Due to the nature of programmatic advertising, bid requests may be sent to demand partners in various jurisdictions. We implement contractual and technical safeguards to ensure adequate data protection.

8. Your Rights and Choices

8.1 Access and Portability

You have the right to:

• Request access to the personal information we hold about you
• Receive a copy of your data in a portable, machine-readable format
• Request information about how we use and share your data

8.2 Correction and Update

You have the right to request correction of inaccurate or incomplete personal information.

8.3 Deletion (Right to be Forgotten)

You have the right to request deletion of your personal information, subject to legal exceptions for:

• Completing transactions or providing requested services
• Fraud detection and security purposes
• Compliance with legal obligations
• Exercising free speech or research purposes

8.4 Restriction and Objection

You have the right to:

• Restrict processing of your personal information in certain circumstances
• Object to processing based on legitimate interests
• Object to direct marketing at any time
• Object to automated decision-making and profiling

8.5 Advertising Opt-Out Options

Mobile Device Settings:

• iOS: Settings > Privacy & Security > Tracking > Disable "Allow Apps to Request to Track"
• iOS (Ad Personalization): Settings > Privacy & Security > Apple Advertising > Disable "Personalized Ads"
• Android: Settings > Google > Ads > Opt out of Ads Personalization
• Reset Advertising ID: Both iOS and Android allow you to reset your advertising ID, which limits tracking

Industry Opt-Out Tools:

• NAI (Network Advertising Initiative): https://optout.networkadvertising.org/
• DAA (Digital Advertising Alliance): https://optout.aboutads.info/
• EDAA (European): https://www.youronlinechoices.eu/
• DAA AppChoices (Mobile): Download the AppChoices app

Note: Opting out will not stop all advertising, but ads will be less targeted to your interests. You may still see the same number of ads.

8.6 Withdraw Consent

Where we process your information based on consent, you can withdraw consent at any time through device settings or by contacting us. This will not affect the lawfulness of processing before withdrawal.

8.7 Marketing Communications

Opt out of marketing emails by:

• Clicking "unsubscribe" in our emails
• Contacting us at [email protected]

9. California Privacy Rights (CCPA/CPRA)

California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

9.1 Categories of Personal Information We Collect

We collect the following categories of personal information as defined by CCPA/CPRA:

• Identifiers: Name, email, IP address, device IDs, advertising IDs
• Commercial Information: Purchase history, campaign spend, transaction records
• Internet/Network Activity: Browsing history, search history, interaction with ads
• Geolocation Data: Precise or approximate location
• Audio/Visual Information: Audio content metadata, player interactions
• Professional Information: Job title, company name (for business contacts)
• Inferences: Profiles, preferences, behavior predictions, audience segments

9.2 Business and Commercial Purposes

We use personal information for:

• Operating our advertising marketplace and technology platform
• Providing targeted advertising services
• Fraud detection and security
• Analytics and performance measurement
• Research and development

9.3 Sharing for Business Purposes

We share personal information with:

• Advertising partners (DSPs, advertisers)
• Publishers and SSPs
• Service providers (cloud hosting, analytics, fraud detection)
• Attribution and measurement partners

9.4 Sale and Sharing of Personal Information

We do not "sell" personal information as defined by CCPA/CPRA in exchange for monetary consideration. However, we may "share" personal information for cross-context behavioral advertising, which is regulated under CPRA.

The categories we may share include:

• Device identifiers and advertising IDs
• Internet activity and browsing behavior
• Audience segments and inferences
• Geolocation data

Right to Opt-Out: You can opt out of sharing for behavioral advertising using the methods described in Section 8.5.

9.5 Sensitive Personal Information

We do not collect or use sensitive personal information (as defined by CPRA) for purposes beyond those permitted by law without obtaining your consent.

9.6 Exercising Your California Rights

To exercise your CCPA/CPRA rights:

• Email: [email protected]
• Subject line: "California Privacy Rights Request"
• Include: Your name, email, description of your request, and information to verify your identity

We will respond within 45 days (extendable by 45 days if necessary).

9.7 Authorized Agents

You may designate an authorized agent to make requests on your behalf. The agent must provide proof of authorization.

9.8 Non-Discrimination

We will not discriminate against you for exercising your CCPA/CPRA rights.

10. Children's Privacy

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18.

Our audio player SDK and advertising services are designed for general audiences and do not target children. Publishers using our SDK must ensure their content complies with applicable children's privacy laws, including COPPA (Children's Online Privacy Protection Act) in the United States.

If you are under 18, do not:

• Use or provide any information through our Services
• Register for an account
• Make any purchases
• Provide any personal information

If we learn that we have collected personal information from someone under 18 without parental consent, we will delete that information promptly. Contact us at [email protected] if you believe we may have information from a child under 18.

11. Data Controller and Processor Roles

11.1 When We Are a Data Controller

We act as a data controller for:

• Information collected through our website
• Account information for advertisers and publishers
• Direct communications with us
• Marketing and business development activities

11.2 When We Are a Data Processor

We act as a data processor when:

• Publishers use our SDK to serve ads in their applications
• Advertisers use our platform to run campaigns
• We process data on behalf of our clients according to their instructions

In these cases:

• Our clients (advertisers and publishers) are the data controllers
• They are responsible for obtaining user consents and meeting legal requirements
• We process data only according to contractual instructions
• We maintain appropriate data processing agreements

11.3 Data Processing Agreements

For organizations subject to GDPR/UK GDPR, we offer Data Processing Agreements (DPAs) that include:

• Standard Contractual Clauses (SCCs) for international transfers
• Technical and organizational security measures
• Sub-processor lists and notification procedures
• Data breach notification protocols
• Audit rights and compliance procedures

Contact [email protected] to request a DPA.

12. Security Measures

We implement comprehensive technical and organizational security measures to protect personal information:

12.1 Technical Measures

• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
• Access Controls: Role-based access control (RBAC), multi-factor authentication (MFA)
• Network Security: Firewalls, intrusion detection/prevention systems, DDoS protection
• Data Segregation: Logical separation of customer data, isolated environments
• Secure Development: Code reviews, security testing, vulnerability scanning
• Monitoring: Real-time security monitoring, log analysis, threat detection

12.2 Organizational Measures

• Security policies and procedures
• Employee training on data protection
• Background checks for employees with data access
• Incident response and breach notification procedures
• Regular security audits and assessments
• Vendor security requirements and due diligence

12.3 Industry Certifications

We maintain compliance with industry standards and are working toward certifications including:

• IAB Tech Lab standards (OpenRTB, ads.txt, sellers.json)
• ISO 27001 (Information Security Management)
• SOC 2 Type II (Security, Availability, Confidentiality)

However, no method of transmission or storage is 100% secure. While we implement industry-standard protections, we cannot guarantee absolute security.

13. Advertising Industry Standards and Self-Regulation

We are committed to responsible advertising practices and comply with:

13.1 IAB Standards

• OpenRTB Protocol: Industry-standard real-time bidding specification
• ads.txt: Authorized digital sellers for supply chain transparency
• sellers.json: Transparency in the programmatic supply chain
• VAST/VPAID: Video and audio ad serving standards

13.2 Privacy Frameworks

• IAB Europe TCF: Transparency & Consent Framework (for EU operations)
• NAI Code of Conduct: Self-regulatory principles for online behavioral advertising
• DAA Principles: Self-regulatory program for interest-based advertising

13.3 Brand Safety and Ad Quality

• Integration with brand safety verification vendors
• Content categorization using IAB Content Taxonomy
• Ad quality standards and creative review processes
• Malware and malvertising prevention

14. Third-Party Links and Services

Our Services may contain links to or integrate with third-party websites, services, or technologies, including:

• Advertiser landing pages
• Publisher websites and applications
• Social media platforms
• Analytics and measurement services
• Payment processors

We are not responsible for the privacy practices of third parties. We encourage you to read their privacy policies before providing any information.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• Changes in our Services or business practices
• New technologies or advertising capabilities
• Changes in applicable laws and regulations
• Feedback from users and regulators

We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending email notifications (for significant changes)
• Displaying in-platform notices

For material changes affecting advertising practices, we may re-obtain consent where required by law.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Media Innovation Group Ltd.
Ben-Gurion Street 44
Herzliya, 4644606
Israel
Company Number: 516972049

Email: [email protected]
Data Protection Officer: [email protected]
Website: https://m-innovation-group.com

For EEA/UK Residents

You have the right to lodge a complaint with your local data protection authority:

• EU: List of EU Data Protection Authorities
• UK: Information Commissioner's Office (ICO)

For California Residents

You may also contact the California Attorney General's Office:

• Website: https://oag.ca.gov/privacy
• Phone: (916) 210-6276