Privacy Policy
Effective Date: October 05, 2026
Introduction
We value your privacy and are committed to safeguarding your personal information. TupleAds Inc. (the “Company”, “we”, “us”, “our”, “tupledsp.com”, “TupleAds platform”, “TupleAds mobile application”, “TupleAds”) is providing this Privacy Notice (the “Notice”) to further the relationship between us and our customers.
In this Notice, personal information means any information that identifies, relates to, describes, is reasonably capable of being associated with or could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal information” or “personal data”). Business or controller in this Notice means a legal entity that collects personal information on its own or by others on its behalf and that alone or jointly with others determines the purposes and means of the processing of personal information (“Business” or “Controller”). With respect to the personal data that our advertiser customers and their vendors collect from consumers or households outside of our Platform and provide to us via use of the Platform (“Service Data”), where permitted by law, we process such information only as a “Service Provider” or “Processor” (as those terms are defined under applicable data protection laws) on behalf of our advertiser customers, who act as the “Business” or “Controller” (as those terms are defined under applicable data protection laws). Our advertiser customers – namely, the advertisers and agency partners who use the TupleAds DSP to programmatically purchase digital advertising inventory and execute advertising campaigns – are the parties that control the use of the Service Data and determine the purposes for which we process such information.
This Notice makes disclosures concerning our collection of personal information, purposes of collection, sources of collection, and measures we use to protect your personal information. It also describes how we process Service Data on behalf of our customers, our customers are responsible for their own practices in collecting, using, and disclosing information they collect from you.
Quick Links
Who We are?
TupleAds is a demand side platform (DSP). Our customers are advertisers and agencies who use our platform to buy digital ad inventory programmatically and run campaigns.
Personal information we collect about you
Personal Data You Provide
We collect personal data that you provide to us directly. This may include, but is not limited to:
  • Information you provide when you contact us via email, such as your email address, name, company, and inquiry details;
  • Information you provide when you register for an account on our Platform, including your full name, business email address, company name, job title, and billing information;
  • Campaign-related information, including ad creatives, targeting parameters, budget inputs, brand safety requirements, and audience segment data provided by managed service customers;
  • First-party audience segment data that you upload or activate via pixel-based tracking or cookie syncing with identity providers (e.g., LiveRamp, Experian); and
  • Any other information that you provide us on or through the Platform, including support communications and onboarding notes.
Personal Data We Collect Automatically
When you use the Platform, or interact with our advertisements or the advertisements we serve on behalf of our customers, we or third parties we work with may automatically collect certain information using technologies such as cookies and other tracking technologies described below.
  • Cookies and Similar Technology: "Cookies" are pieces of information that may be placed on your computer by a website for the purpose of collecting data to facilitate and enhance your communication and interaction with that website. Such data may include, for example, the address of the websites you visited before and after you visited our Platform, the type of browser you are using, your Internet Protocol (IP) address, what pages in the Platform you visited and what links you clicked on, the region where your device is located, and geographic information based on your IP data. We may store some information on your device or device hard drive as a cookie or similar type of file (such as clear gifs, web beacons, tags, and similar technologies that work on mobile devices) to collect data related to usage of the Platform and to facilitate campaign delivery and measurement on behalf of our advertiser customers. We may also use cookies for frequency capping, conversion tracking, audience matching, and cross-device identification in connection with our advertising services.
  • Tracking Pixels: We use tracking pixels to collect information in connection with campaign delivery and measurement on behalf of our advertiser customers. Tracking pixels include first-party pixels placed on advertiser websites to track conversions and campaign performance (e.g., post-click and post-view attribution), as well as impression and click tracking tags embedded within ad creatives to measure delivery and performance. We may also integrate third-party tags and pixels from measurement and attribution vendors within ad creatives or on advertiser landing pages to track campaign performance, and third-party audience segment pixels from data providers used to build or refresh targetable audience pools on behalf of advertiser customers.
  • Clickstream Data: Through programmatic bid requests, we receive information about end users including device type, browser/user agent, IP address, approximate geolocation, page URLs, app bundle IDs, and referral URLs as part of campaign delivery operations. We may collect and use this data to facilitate real-time bidding, audience targeting, frequency management, and campaign measurement on behalf of our advertiser customers.
  • Service Data: We may obtain Service Data from our advertiser customers and their vendors, which we process on behalf of our customers in accordance with our contracts with them. This includes first-party audience data activated via pixels or cookie syncing, campaign briefs, and other data provided for the purposes of campaign execution.
  • From Other Sources: We may obtain information about you from other sources, including: SSPs and ad exchanges via bid requests (device IDs, IP addresses, cookie IDs, user agent strings, approximate geolocation); third-party data providers and DMPs for audience segment data used in campaign targeting; advertiser customers who upload or activate first-party audience data for campaign targeting via pixels or cookie syncing; identity providers (e.g., ID5) through cookie syncing arrangements for the purpose of audience matching and campaign delivery; and fraud detection providers for invalid traffic monitoring.
We do not intentionally collect personal data that is treated as “sensitive” under certain data protection laws (also known as “sensitive personal information” or “SPI”) directly from platform users. However, in connection with executing advertising campaigns on behalf of our advertiser customers, we may process audience segments that involve sensitive categories (including health, political, and financial segments) where permitted by applicable law. For such campaigns, we require advertisers to confirm an appropriate legal basis for targeting. We apply heightened data handling standards to any such data, do not use sensitive category segments to infer characteristics about consumers beyond the specific campaign scope, and do not retain or repurpose such segments after campaign conclusion.
How do we use personal information we collect from you?
We may use, share, sell or otherwise disclose the personal information we collect for one or more of the following purposes:
We collect and use personal data for the following purposes:
  • To communicate with you, which may include:
Contacting you about and providing you and our advertiser customers with our Platform and Services.
Responding to your direct inquiries, requests, issues or feedback, and providing customer service.
Providing platform updates and service-related communications.
  • To provide our products and services, which may include:
Operating the Platform, including operating the TupleAds DSP and providing self-service and managed service campaign execution.
Creating, maintaining, and otherwise managing your account, profile, or subscription.
Executing advertising campaigns on behalf of advertiser customers, including programmatic ad buying, audience targeting, frequency capping, and campaign optimization.
Processing payments and managing billing for platform services;
Measuring and reporting on campaign performance, including impressions, clicks, conversions, spend, and return on investment metrics.
  • For analytics and optimization, which may include:
Conducting research and analytics to improve our Platform and service offerings.
De-identifying and aggregating data for advertiser-facing reporting and analytics, and post-campaign measurement.
Building and applying audience segments on behalf of advertiser customers for campaign targeting.
Performing cross-device matching to enable consistent ad frequency management, cross-device attribution, and audience reach measurement.
  • For security and fraud prevention, which may include:
Helping maintain the safety, security, and integrity of our Platform, databases, and other technology assets.
Detecting and filtering invalid traffic (IVT), bot activity, and fraudulent impressions or clicks to protect advertiser client budgets.
Investigating suspected fraud, violations of any law, rule, or regulation, or violations of our platform policies.
  • To comply with legal obligations, which may include:
Establishing or exercising our rights and defending against legal claims.
Responding to law enforcement requests and as required by applicable law, court order, legal process, or governmental regulation;
Acting in connection with a bankruptcy proceeding or the sale, merger, or change of control of the Company or the division responsible for the services with which your information is associated;
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing Notice.
With whom we share your personal data and for what purposes?
In addition to using your personal data ourselves for the reasons stated above (and as otherwise mentioned in this Privacy Notice), we may disclose your personal data to other affiliates and entities in the following instances:
  • Service Providers: We may share your personal data with third-party service providers who may use your information to provide us with services including, but not limited to: cloud hosting and data storage (Google Cloud Platform); content delivery (Cloudflare); campaign measurement and attribution (Appsflyer, Adjust); fraud detection and brand safety monitoring (DoubleVerify, IAS); and identity resolution and audience matching (ID5). These service providers may have access to personal data that is necessary to perform their functions, but they are only permitted to do so in connection with performing services for us. They are not authorized by us to use the information for their own benefit.
  • Ad Exchanges, SSPs, and Advertising Partners: As part of our programmatic advertising operations, we transmit personal data to ad exchanges and SSPs (currently Media.net) in the course of real-time bidding on behalf of our advertiser clients. Data exchanged in the bid stream may include device IDs, IP addresses, cookie IDs, and behavioral signals. We also share data with identity providers for audience matching and cookie syncing purposes. We require contractual restrictions preventing downstream partners from using data for their own purposes beyond providing the contracted services.
  • Legal Compliance and to Defend Our Rights: We may disclose personal data and other information as we believe necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities including public and government authorities outside your country of residence; (d) to enforce our Terms and Conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you, or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.
  • Business Transfers: We may share your personal data and other information with third parties in connection with a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the assets of the Company, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which the assets transferred may include information about the users of our Platform.
  • Non-Personal Data: We may share non-personal data, including aggregated campaign performance data, with advertiser clients and partners for reporting purposes. We publicly commit to maintain and use deidentified information in deidentified or aggregate form, and not to attempt to re-identify the information.
Assurance against unrelated or incompatible uses. We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing consumer notice.
How do we safeguard your personal information?
We seek to protect personal information using technical and organizational measures based on the type of personal information and applicable processing activity. We are committed to minimizing personal information collection to the information that is necessary for some defined purpose. As part of our effort to safeguard personal information collected from you, we implement the following information security measures:
  • Having comprehensive security policies and procedures.
  • Limiting the amount of personal information that we collect.
  • Using SSL or other secure connection technologies when receiving or sending personal information beyond internal networks.
  • Destroying the personal information that we no longer need.
  • Performing regular information security risk assessments.
  • Mitigating risks by following a risk treatment plan.
  • Screening all employees with access to personal information.
  • Providing regular information security awareness training to our employees.
  • Requiring our employees to sign confidentiality agreements.
  • Implementing and monitoring intrusion prevention and detection systems.
  • Technologically separating systems containing personal information from public networks such as the internet. Maintaining up-to-date software and safeguards.
  • Performing due diligence before onboarding our vendors.
  • Performing regular due diligence of our vendors.
  • Implementing physical security measures.
Cookies and other trackers
Our website uses certain tags, log files, web beacons, and similar trackers from third parties (collectively, "Cookies"), of which you should be aware.

Cookies are small data files stored on your hard drive or in device memory that help us to, among other things, improve the services and your experience. Web beacons are clear, electronic images that may be used on the services or in our e-mails and help deliver cookies, count visits, understand usage and campaign effectiveness and determine if an e-mail has been opened and acted upon.
Targeted advertising
As a demand-side platform, our core business involves programmatic advertising, which includes interest-based advertising and cross-context behavioral advertising. We use audience segment data and bid request signals to serve targeted advertisements on behalf of our advertiser customers on third-party publisher websites and applications purchased through real-time bidding. Cookies, device identifiers, and other similar technologies described above are used in this process. If you would like to opt out of these targeted advertisements, please follow the opt-out process described in the section titled Privacy Rights below.
  • Cross-Device Matching: We may engage in cross-device matching as part of campaign delivery and measurement operations on behalf of advertiser clients. This capability is facilitated primarily through third-party identity providers (e.g., ID5) rather than a proprietary identity graph maintained by us. Cross-device matching may include linking device identifiers, cookie IDs, and mobile advertising IDs (MAIDs) across devices to enable consistent ad frequency management, cross-device attribution, and audience reach measurement. To opt-out of or restrict our use of certain cross-device data, please see the section titled Privacy Rights below.
Children’s privacy
Our services/products are not intended for children under 16 years of age, and you must be at least 16 years old to have permission to use our services and/or access our website/application. We do not knowingly collect, use, or disclose personal data from children under 16. If you believe that we have collected, used, or disclosed the personal data of a child under the age of 16, please contact us using the contact information provided in this Notice, so that we can take appropriate action.
Privacy Rights
Access, correction and deletion of personal information and sensitive personal information
You have the right to Access, Correct, and Delete your personal information across our business platforms, services, businesses, and devices. If you have any questions about your rights, or you would like to exercise any of them, please review information in “How can you exercise your privacy rights section?” of this Notice or contact our Privacy Officer by submitting a privacy rights request here or via email at privacy@tupledsp.com.
Right to opt out of selling or sharing
You have the right to opt-out from the sale or sharing of personal information at any time across business platforms, services, businesses, and devices.
Limit the use of sensitive personal information
You have the right to limit the use of your sensitive personal information to only those purposes that are reasonably necessary for us to provide our products and services and purposes that are reasonably expected by the consumer and do not create a heightened risk of harm to you as a consumer across our business platforms, services, businesses, and devices.
Request information
You have the right to request the disclosure about collection, use, disclosure, and sale of personal information; you may request information beyond the 12-month collection period preceding the verifiable consumer request.
You may request the disclosure of the following:
(1) the categories of personal information we have collected about you.
(2) the categories of sources from which the personal information is collected.
(3) the business or commercial purpose for collecting, selling, or sharing personal information.
(4) the categories of third parties to whom we have disclosed personal information. 
(5) the specific pieces of personal information we have collected about you.
No retaliation or discrimination
We do not discriminate against a consumer because of the exercise by the consumer of any of their privacy rights. right to access, deletion or opt-out from sale or sharing of your personal information. This means that we will not:
  • Deny goods or services to you.
  • Charge you different prices or rates for goods or services.
  • Provide you a different level or quality of goods or services.
  • Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.
Additional U.S. state privacy rights and choices
If you are a California consumer, you have the right to:
  • Know what information we have collected;
  • Ask us to delete your personal information;
  • Ask us to correct personal information if you believe we are keeping inaccurate information about you; and
  • Opt-out of the sale or sharing of your personal information, including by sending a GPC signal from your browser.
If you are a Virginia, Connecticut, Colorado, Oregon, Texas, Utah, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Tennessee, Maryland, Indiana, Kentucky or Rhode Island consumer, you have the right to:
  • Confirm whether or not we are processing your personal information and access your personal information;
  • Correct inaccuracies in your personal data and the purposes for which we are processing it;
  • Delete your personal information;
  • Obtain a copy of personal data you have previously provided to us, or in some states, all the personal data we have obtained about you, in a form that allows it to be shared with another controller;
  • Opt out of targeted advertising
  • Opt out of the sale of your personal information;
  • Opt out of profiling that would be used for significant decisions about you.
  • If and when global privacy controls or other universal opt-out mechanisms are approved and honoring them is required in your state, you will also have the right to opt-out of sale, targeting, or profiling, or all of these, using these browser-based controls.
How can you exercise your privacy rights?
You can exercise these rights by contacting our Privacy Officer by submitting a privacy rights request here or via email at privacy@tupledsp.com. If you have a business account with us, we may use information in that account to authenticate you.

For certain requests (requests to know or correct the information we maintain about you) we may email you to confirm your identity. If we cannot confirm your identity for a request to delete information, we will treat it as a request to opt out of sale and sharing. An authorized agent may make requests on your behalf, but we will request proof that you gave permission for that agent to act for you.

If we are not able to respond to your request, we will notify you and explain your rights to appeal our decision.
Changes to this Notice
05 October 2026: The information in this Privacy Notice changed.
Contact information
If you have any comments or questions in connection with this Notice, or for further information on our personal information processing practices and your rights in relation to your personal information, please contact us at:
Request type:
Number of requests received:
Number of requests complied with (in whole or in part):
Number of requests denied*:
Mean number of days within which we substantively responded**
Right to delete
Right to correct
Right to know
Right to opt out
Right to limit
2026
Preferences
Privacy Policy
Do Not Sell or Share My Personal Information