SupplyShield.id Privacy Policy

Last Updated: November 3, 2025

Part A: Our Website & Business Operations

This section applies to "Personal Information" we collect from visitors to our website and from our Clients and vendors.

What Information We Collect

• Information You Provide: When you fill out a contact form, request a demo, or otherwise communicate with us, you may provide Personal Information such as your name, email address, phone number, and company name.
• Information Collected Automatically: When you visit our website, we may automatically collect technical information such as your IP address, browser type, operating system, and cookie data. We use this for website analytics and security.

How We Use This Information

We use this information to:

• Respond to your inquiries and provide you with information about our Services.
• Operate, maintain, and improve our website.
• Manage our Client relationships and fulfill our contractual obligations.
• Send marketing communications (where you have consented or we have a legitimate interest).

Part B: Our Filtration Services

This section applies to the data we process when providing our invalid traffic detection and filtration Services.

Our Role as a Data Controller

When providing our Services, SupplyShield.id acts as a Data Controller. We do not process data based on our Clients' instructions; we use our own proprietary technology and standards to analyze data and identify invalid traffic.

Data We Process

Our Services operate by analyzing bid-stream and related digital signals. The data we process to identify invalid traffic may include:

• IP addresses
• Device identifiers and signals (e.g., user agent strings)
• Pseudonymous advertising identifiers (e.g., universal IDs, device IDs)
• Domain and app information
• Timestamps and interaction patterns

Purpose and Legal Basis

We process this data for the legitimate interest of our Clients (and the digital advertising ecosystem as a whole) in identifying and preventing advertising invalid traffic. This helps protect Clients' advertising investments and promotes trust and transparency in the digital marketplace.

Retention

We retain invalid traffic-related data for as long as necessary to provide our Services, improve our detection models, and meet our contractual and legal obligations. Invalid traffic data is typically retained for a period necessary to identify trends and new threats.

2. Data Sharing

We may share data in the following circumstances:

• With Service Providers: We work with trusted third-party companies that help us operate our business (e.g., cloud hosting, analytics). They are contractually obligated to protect your data.
• With Clients: We provide our Clients with reports and data about invalid traffic detected in their campaigns. This data may include segments or lists of identifiers associated with invalid traffic.
• For Legal Reasons: We may disclose information if required by law, legal process, or to protect our rights, safety, or property.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

3. Your Rights (for EU/UK/California Residents)

Depending on your location, you may have certain rights regarding your Personal Information, including the right to access, correct, or delete it. For data processed through our Services, since it is typically pseudonymous and not directly identifiable, exercising these rights may be limited.

To make a request, please contact us at [email protected].

4. Data Security

We use industry-standard technical and organizational measures to protect the data we process. However, no system is 100% secure, and we cannot guarantee absolute security.

5. International Data Transfers

We are based in the United States of America, and the data we process may be transferred to and stored on servers in the United States or other countries. We use appropriate safeguards, such as Standard Contractual Clauses, for international transfers of personal data from the EU/UK.

6. Children's Privacy

Our website and our Services are not directed to children under the age of 16 (or the relevant age in your jurisdiction). We do not knowingly collect Personal Information from children.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the "Last Updated" date. We encourage you to review it periodically.