Privacy Policy

1. INFORMATION FOR VISITORS OF THE WEBSITES AND APPS

In general, you may visit the Sites without telling us who you are or revealing any information about yourself. When you contact us or submit an inquiry via the Sites, we may collect personal contact information from you, which may include your name, address, email address, and phone number. We may use that information for internal purposes, including, among other things, to respond to your inquiries.

In addition, we may automatically collect technical information (collectively, “Analytics”) from the device you are using to access the Sites, such as a desktop computer, laptop, mobile phone, tablet, or other internet enabled device (each, a “Device”). Technical information about your Device includes, but is not limited to: device type, operating system, settings and system configurations, IP address, Device ID and other unique Device identifiers, and mobile network information, as well as, your activity using the Sites, such as data about the pages you access, traffic to and from our websites, the dates and times associated with transactions, web and app log data, and other event information, including crashes and system activity. We may use Analytics for research and internal purposes, such as to improve the Sites so that it is more useful and accessible to you and provide relevant advertising to you. Analytics may be correlated with your Personal Data (as defined by the EU General Data Protection Regulation and the UK General Data Protection Regulation: data that identifies or can identify a particular unique user or device – for instance, names, addresses, cookie identifiers, mobile device identifiers, and precise location data) but not shared with any third parties.

We collect Analytics using certain technologies, such as:

• Cookies are small data files that have unique identifiers and reside, among other places, on your Devices, and on the web pages of the Sites. Among other things, cookies help us improve and personalize your use of the Sites. We may permit certain third parties to place cookies through the Sites to provide us with better insights into the use of the Sites and user demographics and to provide relevant advertising to you. These third parties may collect information about your online activities over time and across different websites when you use the Sites. For example, we utilize Google Analytics to analyze usage patterns for the Sites. Google Analytics generates a cookie to capture information about your use of the Sites that Google uses to compile reports on website activity for us and to provide other related services. Google may use a portion of your IP address to identify its cookie and for its commercial purposes. If you wish to opt out of interest-based advertising click here, or if located in the UK or European Union click here. Please note you will continue to receive generic ads.
• Web Beacons. Web beacons or “pixels” are electronic images that may be used on the Sites or in emails we send to you. We use web beacons to deliver cookies, count visits, understand usage and effectiveness of offers, and tell whether you open an email and act upon it.

You may block, delete, or disable cookies or web beacons to the extent permitted by your browsers, applications, and Devices as described in more detail below. However, if you do so, the performance of certain features of the Sites may be limited or not work at all.

We may share Information collected from visitors of the Sites as described below.

You may opt not to receive promotional emails from us by contacting us as indicated below or by following the “unsubscribe” instructions in any promotional email you receive from us, or by contacting us at privacy@spectus.ai. Please note, however, that we may still send you non-promotional, transactional or service-related emails about your relationship with us.

2. DESCRIPTION OF SERVICES

Location Intelligence

We offer location intelligence services that provide Customers location-based, AI-driven analytics and measurement to map and measure the consumer journey, helping Customers answer strategic questions and make the right decisions. We collect and process device identified data from users who consent to location data sharing via our partners apps for purposes related to advertising, attribution, analytics, research, and cross-device identity (“Location Data”).

Location Data is received either from an “SDK” (software development kit) that it provides to mobile application partners (“apps”) or from a server-to-server transfer and integration with mobile app partners. This location information includes data points such as lat/long (latitudinal and longitudinal) data, i.e., GPS-level data, and/or WiFi data (if feasible) associated with a mobile advertising ID, such as an IDFA on iOS platforms or a Google Play Advertising ID on Android platforms.

Platforms

Spectus operates a PaaS or platform-as-a-service (“Spectus PaaS” or “PaaS”) which provides our Customers an open, secure, and privacy controlled environment to analyze, create, optimize, and export data of all types and sources through a combination of data and tools provided to them (including, but not limited to Location Data), tools and data they may develop or import on their own, or obtain from third parties via PaaS. Each PaaS Customer that uploads data and makes it available to other PaaS customers is responsible for the content, compliance, and permissible uses of that data and must communicate any limitations to other PaaS customers. Company acts as a data processor on behalf of clients using the Spectus platform, which means that we act only upon instructions from PaaS Customers

Cuebiq operates a SaaS or software-as-a-service (“Clara”) where we provide precomputed reports for Customers. Company acts as a data controller in operating Clara, which means that we direct the processing of Location Data to generate the reports for Customers.

We refer to all of the above services as the “Services.”

3. THE DATA ELEMENTS WE COLLECT IN PROVIDING OUR SERVICES

With your consent, when you have accessed or used an App or Site that uses the Services, we collect certain information, including your Personal Data as defined under the UK General Data Protection Regulation, the EU’s General Data Protection Regulation or Personal Information under the California Consumer Privacy Act, (which we refer to collectively as “Information”) about your Device and your activity and interaction with such App or Site, which may include:

• IP address
• Geolocation and proximity of your device if location services are enabled on your device and consent has been provided to the App to access those services
• Unique device identifiers such as advertising IDs (Google Advertiser ID or IDFA) – collectively referred to as “Mobile Ad ID”, vendor IDs and/or a pixel identifier
• Event information about your device, such as crashes, system activity, and hardware settings
• System configuration information
• Time and date information
• Dwell time at or near points of interest the device’s location services
• Other device movement information such as acceleration or altitude

The above Information is sent to our server in encrypted form, via an HTTPS protocol either through an Application Protocol Interface (“API”), or through a publisher that has licensed our software development kit (our “SDK”) thus providing the information through that SDK, or via a direct server-to-server integration with us.

We may receive non-app user data through public data sources or trusted partners. Some of our partners aggregate public, user consented psychographic and demographic data, television content and ad viewing data, or other forms of transactional data such as purchase information.

4. HOW WE USE YOUR INFORMATION TO PROVIDE LOCATION INTELLIGENCE

Advertising:  We use the information we collect to make inferences about what types of activities users tend to spend time doing. For instance, we may notice a particular Device frequently at locations associated with sports (e.g., an arena), music (e.g., a concert venue), eating out (e.g., restaurants) or health and fitness (e.g., a gym or health club). We use this information to categorize Device users into “interest segments” – which advertisers can use to tailor advertising to those users who appear on mobile ad platforms they work with.  To see examples of those segments, please click here.

Company or our partners may use the information we collect to identify additional interest segments that may be relevant to device users, or to identify other anonymous users that are likely to share similar interests as our users for tailored advertising purposes.

Attribution:  We also use some of the information we collect (including location information, IP Address or mobile advertising IDs) to help advertisers analyze aggregate ad performance – such as by measuring whether or how Devices that saw a particular ad, whether it be in the physical world, in the digital world, or on TV, tended to engage with a particular product. In addition, we sometimes use any or all of the above information to help advertisers better understand their customers or their marketing, such as for market research, customer analytics, or analytics of traffic patterns. For example, data such as velocity and altitude may be used to determine a user’s mode of transportation (car, bicycle, walking, etc.) or to determine if a user is inside a location or above/below the location on a different floor of the same building. IP address may also be used for filtering out fraudulent activity, such as that from bots.

We sometimes collect the above data through “pixels” (described above) (“Pixel Data”), and we use such data to perform aggregated “attribution” analysis.  This analysis can help marketers and their service providers understand which users have been exposed to which ad campaigns. This data may be measured or matched against aggregate location data in order to provide a “match rate” for an attribution study as to devices that have been detected at a given location – to provide similar services and analysis for marketers as those described above. For instance, if numerous devices that were sent an ad or offer for “Spectus Coffee” on Tuesday then went to a Spectus Coffee on Wednesday or Thursday, an advertiser might conclude that the ad campaign was successful.

Analytics:  We help Customers better understand the offline consumer journey with location analytics for use cases, such as: offline competitive intelligence, market-share, consumer preferences, consumer mobility, path-to-purchase and footfall analysis.  This helps them identify areas of growth and activate those insights to drive performance. For example, real estate companies use location analytics to identify geographic areas with expanding foot traffic for future development to better serve consumers. This may include sharing more detailed device and location information to allow Customers to bridge their own analytics with ours to develop combined aggregate insights.

Research:  We work with research partners to allow them to derive inferences about traffic patterns to support causes such as improving the quality of life in underserved communities, natural disaster response, and smart city development through our Data for Good initiative.

Cross-Device Identity:  Company may use the various identifiers that it has collected from your device, such as Mobile Ad ID (MAID), Device ID or ID for Vendor (IDFV), other Device IDs, IP Address, hashed forms of persistent identifiers such as an email address (for example, an email address has gone through a one-way transformation process that does not reveal the actual email address to us but could be used to link  experiences together where the same email address was provided to different parties), and information about your device (such as model, operating system type and version, carrier) in combination with the location information you have provided to the Company with consent to help recognize you and your device across the internet. We may also share this information with partners, and receive similar information, to collectively allow each party to better recognize you and your device across the internet.  This form of identification may sometimes be based on probability and not certainty that one ID is related to another ID.  You may opt-out of cross-device identity at any time – please see your options in the Privacy Controls section.

Company contractually requires compliance with our Sensitive Points of Interest (SPOI) Policy that covers categories that are legally or culturally sensitive and that we will not allow to be used for advertising or attribution. This policy can be found here. Additional restrictions or exceptions may apply depending upon circumstances or jurisdiction.

5. ADDITIONAL INTERNAL AND CORPORATE USES OF THE INFORMATION

In addition to the above descriptions of our usage of Information for our Services, we may also use Information to:

• Provide the Sites and the Services, and notices related thereto, for example when you contact us or submit an inquiry via the Sites, we may collect Information from you, which may include your name, address, email address, and phone number. The legal basis consists of art. 6, paragraph 1, letter b) of the GDPR, or the processing is necessary for the performance of a contract to which the user is party or in order to take steps at the request of the data subject prior to entering into a contract
• Provide customer support for the Sites and the Services, for example when you use the “Book a Demo” form of Sites, your Information will be processed by Spectus for the sole purpose of replying to your queries. The legal basis consists of art. 6, paragraph 1, letter b) of the GDPR, or the processing is necessary for the performance of a contract to which the user is party or in order to take steps at the request of the data subject prior to entering into a contract
• Detect and protect against errors, fraud, or other criminal activity. The legal basis consists of art. 6, paragraph 1, letter f) of the GDPR, the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
• Resolve disputes and enforce our Terms of Service and other guidelines as provided under your agreement with Company (“Documentation”). The legal basis consists of art. 6, paragraph 1, letter b) of the GDPR, or the processing is necessary for the performance of a contract to which the user is party or in order to take steps at the request of the data subject prior to entering into a contract
• Collect fees and other amounts owed in connection with the Sites and the Services. The legal basis consists of art. 6, paragraph 1, letter b) of the GDPR, or the processing is necessary for the performance of a contract to which the user is party or in order to take steps at the request of the data subject prior to entering into a contract
• Analyze, customize, and improve the Sites and the Services. The legal basis is Article 6, paragraph 1, letter a) of the Regulation, i.e., the provision by the data subject of consent to the processing of his/her personal data for one or more specific purposes.
• Deliver targeted marketing and promotional offers to you. The legal basis is Article 6, paragraph 1, letter a) of the Regulation, i.e., the provision by the data subject of consent to the processing of his/her personal data for one or more specific purposes.
• Contact you by email message, push notifications, voice call, or text message, subject to applicable law. The legal basis is Article 6, paragraph 1, letter a) of the Regulation, i.e., the provision by the data subject of consent to the processing of his/her personal data for one or more specific purposes.
• As described elsewhere in this Privacy Policy, we may use your Information to create products and datasets allowing us to offer anonymized and aggregated data, market research, and business intelligence to third parties.

We do not use Information for employment eligibility, credit eligibility, health card eligibility, or insurance eligibility, underwriting, or pricing purposes.

Processing will be carried out strictly connected to the purposes for which Information was collected, including preserving its security and confidentiality.  No other processing of Information will be carried out by Company which is not in accordance with the content of this Privacy Policy.

6. HOW WE SHARE INFORMATION WE COLLECT

Location Intelligence, Website, and Marketing
We may share Analytics and your Information with our Partners and other third parties as described in this Privacy Policy and as follows:

• If the information is provided to help complete a transaction requested by you or if you request or authorize it.
• To allow third parties, such as market research and information companies, to create datasets, perform market research, or create business intelligence or information products which analyze and monitor aggregated location behavior.
• To allow third parties to market to you, including through mobile devices and applications.
• When we partner with third parties, such as third party ad platforms, to provide the Services to you, or to support, analyze or improve those Services.
• Work with partners who employ our Information to connect user identities across devices – such as to inferentially “match” a mobile device by common IP address to a web browser or match a cookie ID to a Mobile Ad ID.
• We may provide device information (such as IP address and/or Mobile Ad ID) to third party ad platforms, connected to interest segments, to help advertisers identify common users across different devices or browsers – for instance, to identify a common set of users on both mobile devices or tablets, as well as the web.
• If the Information is provided to: (1) comply in good faith with applicable laws, rules, regulations, governmental and quasi-governmental requests, court orders, or subpoenas; (2) enforce our Terms of Service or other agreements; or (3) protect our rights, property, or safety or the rights, property, or safety of our users or others.
• If the disclosure is done as part of a purchase, transfer, or sale of services or assets (e.g., in the event that substantially all of our assets are acquired by another party, your Information may be one of the transferred assets, or in the course of due diligence for such an event) or in the event of bankruptcy.
• If the Information is provided to our third-party vendors or service providers to perform functions on our behalf (e.g., analyzing data, providing marketing assistance, providing customer service, processing orders, etc.).
  These companies are authorized to use your personal information only as necessary to provide these services to us, pursuant to written instructions.
• As otherwise described in this Privacy Policy, or with your prior consent.

7. YOUR PRIVACY CHOICES AND OPT-OUT RIGHTS

You have the right to opt-out of the further use of your Information processed by Company (also known as  “Do Not Sell My Info” under the California Consumer Privacy Act or “CCPA”, request a copy of the Information associated with your verified mobile device held by us (right to know under CCPA), as well as request that your Information associated with your verified mobile device be anonymized or erased from our systems (right to delete under CCPA).

You may use an authorized agent to submit a right to know request or a request to delete. To use an authorized agent, you must provide the agent with written authorization. In addition, you will be required to verify your identity with the Company. We may deny a request from an agent that does not submit proof that they have been authorized to act on your behalf.

When you or your authorized agent request a copy of your information associated with your verified mobile device held by Company, we will provide (i) your Information, (ii) the source of the Information; (iii) the purposes and methods of the processing; and (iv) the logic applied to the processing. On our Partners page you will find the identities of data controllers and data processors with whom we may share your Information.

If you believe that the processing that concerns your Information was unlawful or unnecessary for the purposes for which it was collected or subsequently processed you have the right to lodge a complaint as outlined in Section 12 below.

Below you will find instructions on how you may exercise the above-mentioned rights by contacting Spectus using one of the methods listed:

Opt-Out / Do Not Sell My Info

Company provides multiple paths for you to retract your initial consent (opt-out) to data collection in connection with the Sites and the Services, and to engage in other privacy controls such as access, portability and erasure. Once we receive your opt-out, we stop collecting Information from you, remove your Information from being sold or shared and add you to the opt-out list that we share with all partners.

• You may control how your browser responds to cookies by adjusting the privacy and security settings of your web browser.
• You may limit the location information being shared with Company by deactivating location services for your device entirely or with the app partner more directly.
• You may limit the disclosure of certain Information by your mobile device to us and mobile app publisher Suppliers by adjusting the settings on your mobile Device. For iOS mobile devices, go to “Settings” from your Device’s home screen; scroll down to “Privacy”; select “Advertising”; and turn on “Limit Ad Tracking” (not available on iOS14 or higher).  For Android mobile devices, go to “Google Settings” on your device; select “Ads”; and check the box labeled “Opt Out of Interest-Based Ads.” We honor these “limit” or “opt out” instructions or “flags” by removing recognized devices from our cross-app advertising or ad delivery and reporting solutions, on a going forward basis.”  For users of iOS14 or higher, please select an alternate opt-out path.
• You may also opt-out through the Cuebiq App (iTunes App store or the Google Play store) or through the TrustArc app (iTunes App store or the Google Play store)
• You may opt-out via the privacy request form on our website
• Suppliers and Customers may also provide ways for you to opt out from or limit their collection of information from and about you. Please refer to their privacy policies to learn more. Please note that Company is not responsible for the privacy practices of Suppliers, Customers, and other third parties. Many of our partners provide you the option to opt out of certain advertisers’ cookies and browser-enabled, interest-based advertising at the Network Advertising Initiative’s website and the Digital Advertising Alliance (DAA) website.
  • Please note that these opt outs only apply to interest-based advertising by participating advertisers. You may still receive other types of online advertising from participating advertisers, and the websites you visit may still collect information for other purposes.
  • In addition, the opt-out choices you select are stored in opt-out cookies only in the browser that you use to visit the opt-out websites, so you should separately set your preferences for other browsers or devices you may use. Deleting browser cookies can remove your opt-out preferences, so you should visit these opt-out websites periodically to review your preferences or update your preferences to apply to new participating advertisers.
• Do Not Track (“DNT”) is an optional browser setting that allows you to express your preferences regarding tracking by advertisers and other third parties. We do not currently recognize or respond to DNT signals

Access (right to know), Portability, and Erasure (right to delete)

• To validate the source of privacy control requests we ask that you first download the Cuebiq App from the iTunes App store or the Google Play store.
• To receive a copy of Information collected and retained by Company in relation to your device please select “Request access to my data” from within the App. We will confirm if any Information has been collected from that device ID and provide that to you in a portable form if we have.
• To have data collected from your device that is held in device identifiable form be deleted from our servers, please select “Delete my data” from within the App. We will confirm if any Information has been collected from that device ID and begin the erasure process if we have.
• Please understand that if you have not opted out of our Services, as described above, that data collection will continue even after an Erasure request.

When we collect Information from your device (including precise location information) from mobile app partners, we endeavor to work with partners that provide disclosures to their own users regarding the use of mobile data for interest-based advertising purposes and available privacy controls.  While the controls described above may impact the data collection or use of your Information by other companies, we will only be able to directly apply these controls to the data that we possess and control.  You may need to work with Suppliers (including mobile app publishers), Customers, or our Partners directly to enact similar privacy controls, if offered, on the data they possess and control.

Statistics pertaining to Company’s processing of access, erasure and opt-out requests can be found here.

8. DATA RETENTION

We generally retain data related to Mobile Ad IDs on the following schedule: (a) we render Mobile Ad IDs inactive for interest-based advertising purposes within 120 days, (b) we continue to use Mobile Ad IDs for analytics purposes and other purposes unrelated to interest-based advertising and reporting (for instance, in aggregated form for market research) for up to 24 months, provided that we may retain them if we have a legal or significant operational or legal need to do so, such as for auditing, corporate record-keeping, compliance, record-keeping, accounting or security and bug-prevention purposes. We may retain anonymized data for longer.

9. SECURITY

We have administrative, technical, and physical safeguards in place in our physical facilities and in our computer systems, databases, and communications networks that are designed to protect the information contained within our systems from loss, misuse, or alteration. No method of electronic transmission or storage is 100% secure. Therefore, we cannot guarantee absolute security of your Information. If you have any questions about the security of your information, please contact us as described below.

10. THIRD-PARTY WEBSITES, APPS, OR PARTNER DATA

When you access the Sites, you may be directed to other websites that are beyond our control. We may allow third-party websites or applications to link to the Sites. Company and Spectus’ PaaS Customers may also process Partner Data through interacting with our Platforms. We are not responsible for the privacy practices of third party websites, apps, or partner data, or the content of linked websites, and we encourage you to read the applicable privacy policies and terms and conditions of such third party websites, apps, and partner data. This Privacy Policy only applies to the Sites and the Services.

11. INTERNATIONAL TRANSFERS

As we work with global companies and technologies, we may need to transfer your Information outside of the country from which it was originally provided.  For instance, we may transfer your data to third parties that we work with who may be located in jurisdictions outside the UK, EEA or Switzerland, and which have no data protection laws or laws that are less strict compared with those in the UK or Europe.

When we transfer Personal Data outside of the UK, EEA or Switzerland, we take steps to make sure that appropriate safeguards are in place to protect your Personal Data. In general, our data transfers of our Personal Data are safeguarded by EU-US Privacy Shield program, European Standard Contractual Clauses, and Data Processing Agreements where this is required by UK or European Data Protection Law. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/

12. CODE OF CONDUCT

We are a member of the Network Advertising Initiative (NAI), and we undergo annual audits that we adhere to their strict Code of Conduct. To learn more about the NAI or how to opt out of receiving targeted advertising from other third party services that belong to the NAI, please follow this link.

13. CHANGES TO PRIVACY POLICY

If we make material changes to this Privacy Policy that may impact you, we will prominently post notice of the change on our website for a period of at least 30 days prior to the change becoming effective. We recommend that you check the Privacy Policy frequently so that you are informed of any changes.

14. REGULATORY AUTHORITY & CONTACTING US

Cuebiq, Inc., as a US based company, is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).  For users in the UK, EEA and Switzerland, Company complies with the Privacy Shield Principles as well as the UK General Data Protection Regulation and the EU General Data Protection Regulation. Company is not liable for the data handling practices of our third-party partners except for those acting as Agents on our behalf.  Under certain conditions, you may leverage binding arbitration in liability cases related to the onward transfer of personal data to those third parties acting as Agents on Company’s behalf.

We are here to answer your questions and commit to resolve complaints about our data practices as outlined in this Privacy Policy. Individuals with inquiries or complaints regarding our Privacy Policy and our compliance with Privacy Shield should first contact Cuebiq at privacy@cuebiq.com, or at: Cuebiq, Attn: Chief Privacy Officer, 45 West 27th Street, New York 10001 United States.

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

For users based in the UK or EEA who would like further information regarding this Privacy Policy, Company, and Cuebiq or Spectus Services may also contact our DPO (Data Protection Officer) at the following address: dpo@cuebiq.com.  If you feel your questions or concerns have not been adequately addressed you may contact a Supervisory Authority in the Member State in which you reside, in the one in which you work or in the one in which the alleged violation has occurred.

In Italiano