Privacy Policy

Innovid, LLC, having its principal office and place of business at 120 Broadway, New York, NY 10004, USA, together with its affiliates and subsidiaries from time to time, (collectively, “Innovid”, “our”, “we”, or “us”) takes privacy seriously. This Privacy Policy explains how we collect and process data from:
1. Visitors to the corporate websites located at Innovid.com, Flashtalking.com, app.audience-hq.com, go.4cinsights.com, and subdomains thereof, and the use of these websites and the B2B services available thereon by our customers (collectively, the “Innovid Websites”); and

2. Our advertising technology products and services currently known as Innovid, InnovidXP, Flashtalking, Audience HQ, Audience Hub and Social Ads Manager. Such advertising technology products and services include advertisement serving, creative personalization, advertising analytics, advertising measurement, and advertising-related activation and facilitation across various thirty-party owned and operated digital, social, and CTV media (the “Advertising Services”).

Please read the following carefully to understand our practices regarding your information and how we will treat it. By accessing or using the Innovid Websites or Advertising Services, you agree to us processing your information in accordance with this Privacy Policy. In this Privacy Policy, the terms “personal information” or “personal data” are defined as any information that is linked or reasonably linkable to an identified or identifiable natural person, or that otherwise constitutes “personal information,” “personal data,” “personally identifiable information,” or similarly defined data or information under applicable law.

The Innovid Websites may link to, and the Advertising Services may appear on, third party websites and online media properties. Innovid does not control and is not responsible for the privacy practices of third parties, and this Privacy Policy does not cover collection or use of information by third parties on such third party websites and media properties. Visitors to or users of such third party websites or other media properties should consult the privacy policies of such third parties to learn about such third parties’ privacy practices.

With respect to data governed by: (i) the EU’s General Data Protection Regulation 2016/679 (“GDPR”), (ii) the GDPR as transposed into UK national law by operation of section 3 of the United Kingdom’s (“UK”) European Union (Withdrawal) Act 2018 (the “UK GDPR”); or (iii) the Swiss Federal Act on Data Protection 1992 (“Swiss DPA”), some of the data processed by Innovid includes “personal data”, as further described below under the Sections entitled “Additional Information for Residents of the European Union, UK and Switzerland” and “The EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF”.

This Privacy Policy does not cover Innovid’s collection, use or disclosure of information relating to employees of Innovid or candidates for employment with Innovid (collectively, “HR Data”), as Innovid provides a separate privacy policy to such individuals governing HR Data.

Table of Contents

‍

1. Innovid Website Visitors and Enterprise Customers

1.1. Data we collect from Innovid Website visitors and prospects

We collect the following categories of personal information during your visits to the Innovid Websites (“Website Data”):

information you directly provide to us through the Innovid Websites, including via our contact form or live chat function, such as first name, last name, title, company name and region;
any phone number used to call our customer service number;
information about your activity on the Innovid Websites, such as mouse scrolls and clicks, keystrokes entered, clickstream behavior, pages and files viewed or visited, the duration of such visits, and the search terms you employ within the Innovid Websites;
Information about the devices and software you use to access the Innovid Websites, such as browser information, operating system information, device identifier, IP address, general geographic location, date, and time of visit, whether you are a new or a return visitor, device type, mobile carrier (if applicable), connection type and identifiers assigned to your browser or device, such as the advertising identifiers assigned by platform providers, and other such information as may be delivered or shared by the applicable browser or access software or device;
In addition, we may collect business contact information for business development purposes, in order to assess and pursue potential business opportunities, including from offline sources. For instance, we may collect business contact information about existing and prospective Customers when we attend conferences, trade shows, webinars and other events. We may receive information from third party sources, from publicly available information, and from general business networking efforts. This information may include your business contact information, including name, title, company name, business address, email address, telephone number, and the Advertising Services that may be of interest to you.

1.2. Data we collect from Customers of our Advertising Services

If you are with an advertiser, agency, publisher or other entity that is a customer of our Advertising Services (a “Customer”), we may collect the following categories of personal information about your use of our Advertising Services (“Account Data”):

Your business contact information, including name, title, company name, business address, email address, telephone number and login credentials;
Website Data, as defined above;
Your training profile, including details of courses you've attended and courses that you're due to complete;
Information that you provide by filling in forms on the Innovid Websites or in our support channels;
Information you provide when you contact us (for example, if you contact us in writing, we keep a record of that correspondence, and if you call our support or customer service team, we may retain a recording of the phone call for a limited period for training purposes);
Details associated with your use of our products and services, including the specific Advertising Services you have ordered from us, billing information and account usage information;
We may contact you to participate in surveys, beta-testing, and other information-gathering activities. If you decide to participate, you may be asked to provide certain information with your consent.

1.3. How we use data collected from the Innovid Websites and from Customers

We use Website Data and Account Data in the following ways:

To conduct processing which is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract;
To carry out obligations arising from contracts entered into between you and us;
For authentication purposes in order to ensure we are communicating with, or allowing access by, the correct individual;
To respond promptly and effectively to your support requests and other queries;
To help us keep the information that we hold about you up-to-date;
To administer your account with us, and to carry out and verify financial transactions in relation to payments you make in connection with our products and services;
To provide you with information, products, or services that you request from us and notify you of any changes to these;
To request feedback regarding products you have purchased or licensed from us;
For compliance and audit purposes, such as meeting our reporting obligations in our various jurisdictions;
To collect debts, prevent fraud, infringement, identity theft and any other service misuse, comply with our legal obligations and take action in any legal dispute and proceeding;
To monitor, improve and optimize the Innovid Website, services and products, including understanding your needs and interests. and to personalize your experience with the Innovid Website, our products and services and our communications;
For other purposes as requested by you, or for other purposes that are clearly disclosed to you at the time you provide the information or with your consent;
For marketing and advertising our products and services:
- We may use personal information to provide you or enable third parties to provide you with content and advertisements related to our own products and services, and to target such content and advertisements to be more relevant to you. We may also use, and permit third parties to use, cookies and other tracking technologies (such as web beacons and pixels) with the aim of collecting certain information to analyze behavior and customize the content and advertising displayed to you related to our own products and services. If you would like to opt out of the use of your personal information for marketing purposes, please review the section entitled “Cookies and Other Tracking Technologies on the Innovid Website” below to exercise your choices.

1.4. Disclosure of data about Innovid Website Visitors and Customers to third parties

Website Data and Account Data may be disclosed as follows:

To the applicable Customer, in order to provide information, invoices, analytics and reports to the Customer;
To the Customer’s selected third party destinations, in accordance with the Customer’s or its agent’s instructions, requests or approvals;
To affiliated and subsidiary companies that we control, or that are under common control with us;
To third party service providers we engage to perform functions and services on our behalf, such as cloud services for storing and processing Customer information (e.g., Salesforce) and enterprise resource planning services (e.g., Priority), to the extent necessary to enable such third party service providers to perform the required functions and services, and only pursuant to obligations on such third party service providers that are consistent with this Privacy Policy. Please see our Subprocessors page for further information regarding the subprocessors used by Innovid. In all cases in which Innovid transfers any personal information to its subprocessor, it does so pursuant to a data protection agreement governing such transfers. Where personal data is transferred outside of the EU or UK, appropriate safeguards are used, such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, as applicable, and/or Innovid's certification under the E.U.-U.S. Data Privacy Framework, the UK Extension to the E.U.-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework.
Innovid reserves the right to disclose information if it believes, in good faith, that such disclosure is required to comply with legal or regulatory requirements, or to protect others’ rights or prevent harm, including in response to lawful requests by public authorities, or to meet national security or law enforcement requirements.
Personal information we have collected may be disclosed to third parties if we sell or buy any business or assets, in which case such personal information may be disclosed to the prospective seller or buyer of such business or assets. Such transfers will be subject to contractual data protection provisions.
Innovid may share aggregate and pseudonymous usage statistics regarding Customers of the Advertising Services and Innovid Website visitors with the public or businesses with whom Innovid works. Innovid may also use such aggregated information to help Innovid improve the design and delivery of its products and services and increase its effectiveness for all users.

1.5. Cookies and other tracking technologies on the Innovid Websites

Like many companies, we use cookies, pixels, web beacons, and other tracking technologies to collect information about your browsing activities and your interactions with the Innovid Website, and to serve targeted ads for our own products and services. There are a number of ways to opt out of having your online activity and device data collected through these methods, which we summarize below:

Opting out of cookie use in our Cookie Preferences tool. You can also use the Cookies widget in the bottom left hand corner of the Innovid Websites to pull up the Cookie Preferences tool. The Cookie Preferences tool enables you to allow or disable non-essential cookies.

Blocking cookies in your browser. Most browsers let you remove or reject cookies, including cookies used for targeted advertising. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit www.allaboutcookies.org.
Using privacy plug-ins or browsers. You can block our websites from setting cookies used for targeted advertising by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, Ghostery or uBlock Origin, and configuring them to block third-party cookies/trackers.
Advertising Industry Opt-Out Tools. You can use available advertising industry opt-out options to limit use of your information for targeted advertising online or in apps by visiting http://optout.aboutads.info.
With each of our vendors individually. Please visit the privacy policies of our vendors/partners to understand their privacy practices and what choices are available for you to opt-out of use of your information for targeted advertising:
- Performance or Analytics Cookies
  - Google Analytics – Google Analytics Opt Out
  - Pendo, Nielsen, Microsoft Clarity, Typekit
  - Vimeo
  - Marketo
- Social Media or Advertising Cookies
  - Casalemedia
  - Challenges
  - Demandbase
  - LinkedIn – LinkedIn Privacy Policy
  - Facebook – Meta Privacy Policy
  - Google Ads and YouTube – Google Privacy Policy
  - TikTok – TikTok Privacy Policy
  - TremorHub
  - Instagram and Threads – Instagram Privacy Policy
  - X – X Privacy Policy

Google Analytics
- Innovid uses Google Analytics, a service provided by Google, to help analyze how users use the Websites. Google Analytics uses “cookies”, which are text files placed on a user’s computer or device, to track the user’s activity (including information such as the user’s flow, location by country, language, browser and OS, ISP, and devices) on the Innovid Websites. We use this service with a view to analyze usage across devices and offer improvements for all users. To learn more about Google Analytics, please click here. To opt out of this feature by installing the Google Analytics Opt-out Browser Add-on, please click here. You may also opt-out by blocking cookies from the Innovid Websites.

Pendo
- Innovid uses Pendo.io to better understand how our Customers are using our platform and tools, in order to assist our product and product design team(s) when making updates to our platform. Through the use of a javascript pixel on the Innovid platform, Pendo may collect a limited amount of behavioral information from customers accessing the Innovid platform, and in addition Innovid may share a limited amount of data with Pendo in order to tie the information together. The information Innovid shares with Pendo includes, name, user ID, email address, and country. To learn more about Pendo, please click here. To view Pendo’s privacy policy and learn more about your choices, please click here.

Please note that because some of these vendors’ opt-out mechanisms may be specific to the device, app or browser on which they are exercised, you may need to opt out separately on every device, app or browser that you use. We will endeavor to honor any browser-specific opt-out preference signals communicated to the Innovid Websites.

1.6. Newsletters

if you subscribed to any of our email newsletters, you can change your subscription status at any time. To unsubscribe, please follow the instructions on the bottom of each newsletter, or by writing to us here. Please note that if you are a Customer, this will not unsubscribe you from required account-related communications relevant to your account.

2. Innovid’s Advertising Services Utilized on Third Party Media Properties

2.1. Introduction

The Advertising Services include a suite of advertising technology products and services such as advertisement serving, creative personalization, advertising measurement, and advertising-related activation across digital, social, and CTV media. Such Advertising Services include products and services known as Innovid, InnovidXP, Flashtalking, Audience HQ, Audience Hub and Social Ads Manager. The Advertising Services are used across various third party linear and digital televisions, channels, platforms, websites, applications (including mobile apps), devices and social media platforms (collectively, “Media Properties”). Visitors to Media Properties are referred to herein as “End Users”.

2.2. Data Collected from End Users for the Advertising Services

When an End User browses or uses Media Properties that make use of the Advertising Services’ ad serving, analytics, activation or measurement functionalities, Innovid may collect data about such interaction, as well as about any further interaction by such End User with the advertisements served or measured by the Advertising Services and the Media Properties on which such Advertising Services are utilized. Such information may include:

advertisements viewed,
impressions, clicks and other actions taken,
mouse movements,
viewing duration,
IP address,
cookie ID,
date and time of interaction,
pages or sections accessed,
information about the general geographical location from which an End User is viewing an advertisement,
URL,
referral URL,
information on browser and operating system, including user agent and device type, connection type, and identifiers assigned to the browser or device, such as the advertising identifiers assigned by platform providers. For example, in the event that the data being collected is from a mobile device, we may collect the mobile advertising ID of the device (e.g., IDFA or Google AdID), and in the event that the data being collected is from a television with third party connected applications, a smart television, or a digital media streaming device (collectively, “CTV”), we may collect the advertising identifiers made available by the CTV,
some ads may include forms where End Users can enter their personal information. Such information may be used in order to allow the End User to sign-up for or receive information regarding a Customer’s product, service, program or other offer, and may be provided by Innovid to the Customer on whose behalf the ad was served. The information is not used by Innovid for other purposes. The End User should review the Customer’s privacy policy to understand how the Customer will process such information and to exercise the End User’s rights with respect to such information.

2.3. Data Collected from Customers for the Advertising Services

Advertisers, agencies and other Customers who use Advertising Services may provide or upload End User advertising delivery or viewership information to Innovid, including IP addresses, cookie IDs and/or advertising or device IDs, and/or advertisement airing information, in order to enable Innovid’s provision of certain Advertising Services to such Customers (e.g., measurement services in the case of InnovidXP Customers). Customers who use AudienceHQ/AudienceHub services may, in addition to or instead of such advertising delivery or viewership information, provide other End User Information to Innovid that may include name, email address, mailing address and/or phone number of End Users.

2.4. Data Processed on behalf of Customers from integrated providers for the Advertising Services

In order to provide certain features of the Advertising Services to Customers, such as social ads management services, measurement services, and advertisement optimization services, we may process certain data provided to us by third party integrated providers. This data may include such End User information as IP address, the Media Property that the End User visited, the date and time of such visit, other identifiers that relate to advertising the End User may have seen from our Customer, the advertising that End Users view on their devices, demographic information, inferred interest categories, hashed email addresses, and/or (in the case of Social Ads Manager services) aggregated information about how End Users engage with social media platforms and identifiers provided by social media companies. We use this information in order to provide our Advertising Services to our Customers, including, as applicable to the specific Advertising Services feature ordered by the Customer, to measure the effectiveness of advertising campaigns, and/or to help our Customers target their advertising campaigns and manage or improve their advertising activities through our Advertising Services. Our Customers may use such integrated provider data to deliver more relevant advertising to End Users, identify advertising that is more likely to be viewed by a Customer’s target audience, measure the performance of advertising campaigns, and/or estimate the number of individuals or households that were exposed to certain advertisements.

By way of example, Innovid integrates with the following third party integrated providers in conjunction with the Advertising Services. Such integrated providers may offer their own means for End Users to opt-out of targeted advertising from time to time. Please visit the links shown below to learn more.

YouTube API Services. Innovid uses video advertising services, including Google’s YouTube API Services. The Google Privacy Policy can be found at: https://policies.google.com/privacy and the Google App Permissions page can be found at: https://myaccount.google.com/permissions. The YouTube Terms of Service (ToS) can be found at: https://www.youtube.com/t/terms.

Nielsen Services. Innovid works with market research companies, including Nielsen, to better understand the reach of ad campaigns. To learn more about what information Nielsen collects, how it uses and shares that information and your choices, please visit http://www.nielsen.com/digitalprivacy.

Innovid contracts with its Customers as a processor and service provider as defined under applicable data protection laws. As a result, we require our Customers to inform End Users separately about the Customer’s own processing of the End User’s personal information and to provide the End User with the necessary disclosures and privacy choices required under applicable data protection laws.

2.5. Usage of data collected or received by the Advertising Services

The data collected and/or received by Innovid for the Advertising Services may be used as follows:

in order to provide information, analytics and reports to our Customers;
to help Customers display, optimize, target, sequence and/or customize advertisements to End Users;
to establish connections between a user’s or household’s devices, to assist in providing targeted and/or synchronized advertising across devices or households, and to measure the performance of advertising across devices or households;
to limit the number of times a specific advertisement is presented to the same browser or device (frequency capping), and to schedule advertising;
for advertising-related security, debugging and brand safety purposes, and to detect or report on fraudulent advertising activity;
to administer, improve, market and enhance the Advertising Services and perform benchmarking and analysis; and
as otherwise requested or instructed by the applicable Customer.

2.6. Tracking technologies used by the Advertising Services

The Advertising Services utilize the following technologies to collect information:

“Cookies”, which are small text files stored on a browser or in device memory that help to recognize that the same device has been seen before, and where, in the context of a Customer’s ad campaign;
“Web beacons” (also known as “tracking pixels”), which are electronic images that help perform a variety of functions, including delivering cookies, counting visits, and understanding usage;
Software development kits (“SDKs”), which are tools that help application developers to enable advertising in applications;
“Macros”, which are dynamic placeholders in ad tags and URLs that are automatically replaced with information when an ad is served;
“Server to Server Connections”, which are a connection enabling two or more servers to communicate directly with each other to synchronize data;
“Ftrack”, which is a technology utilized by Innovid and Flashtalking ad delivery and analytics products that uses probabilistic device recognition to derive an identifier for a device.

The tracking technologies listed above can be used to recognize End Users’ device in order to facilitate the display of ads the End User ads that are relevant to such End User, and/or to understand how End Users interact with the ads they are shown. For more information about the choices available with respect to our use of tracking technologies used in relation to the ad serving functionalities of the Advertising Services (which include Innovid ad serving, as well as Flashtalking ad serving), please see Opt-Out of Targeted Advertising below.

2.7. Disclosure of data from the Advertising Services to third parties

The data collected and/or received by Innovid for the Advertising Services may be disclosed as follows:

To the applicable Customer, in order to provide information, analytics and reports to the Customer;
To the Customer’s selected third party destinations, in accordance with the Customer’s or its agent’s instructions, requests or approvals;
To affiliated and subsidiary companies that we control, or that are under common control with us;
To third party service providers we engage to perform functions and services on our behalf, such as cloud services for storing and processing information (e.g., Amazon Web Services, Snowflake and Akamai), to the extent necessary to enable such third party service providers to perform such functions and services, and only pursuant to obligations on such third party service providers that are consistent with this Privacy Policy. Please see our Subprocessors page for further information regarding the subprocessors used by Innovid. In all cases in which Innovid transfers any personal information to its subprocessor, it does so pursuant to a data protection agreement governing such transfers. Where personal data is transferred outside of the EU or UK, appropriate safeguards are used, such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, as applicable, and/or Innovid's certification under the E.U.-U.S. Data Privacy Framework, the UK Extension to the E.U.-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework.
Innovid reserves the right to disclose information if it believes, in good faith, that such disclosure is required to comply with legal or regulatory requirements, or to protect others’ rights or prevent harm, including in response to lawful requests by public authorities, or to meet national security or law enforcement requirements.
Personal information we have collected may be disclosed to third parties if we sell or buy any business or assets, in which case such personal information may be disclosed to the prospective seller or buyer of such business or assets. Such transfers will be subject to contractual data protection provisions.
Innovid may share aggregate and pseudonymous usage statistics regarding the Advertising Services with the public or businesses with whom Innovid works. Innovid may also use such aggregated information to help Innovid improve the design and delivery of its products and services and increase its effectiveness for all users.

3. Industry Self-Regulation

Innovid LLC, TV Squared Ltd. dba InnovidXP and Flashtalking, Inc. each participates in the IAB Europe Transparency & Consent Framework (TCF) and complies with its Specifications and Policies. Innovid LLC’s identification number within the framework is 452. TV Squared Ltd. dba InnovidXP’s identification number within the framework is 985. Flashtalking, Inc.’s identification number within the framework is 78.

Innovid and Flashtalking are each a member in good standing of the Network Advertising Initiative (NAI). Additionally, Innovid and Flashtalking are members in good standing of the Digital Advertising Alliance (DAA) and the Interactive Advertising Bureau (IAB).

4. Opt-Out of Targeted Advertising

4.1. Advertisements following an opt-out: Following an opt-out using any of the below methods, Innovid’s system may still provide advertisements to the End User. Please note, however, that these advertisements may be less relevant to such End User’s interests.

4.2. Opt-out for desktop or mobile web: End Users can opt out of targeted advertising served via the ad serving functionalities of the Advertising Services (which include Innovid ad serving, as well as Flashtalking ad serving) on browsers used on desktop or mobile web, as follows:

Click Here To Opt Out.

In order to comply with an opt-out request, Innovid may set a non-unique cookie for the sole purpose of complying with such request. Innovid will attempt to set such opt-out cookie for at least 1 year; however, the End User’s browser may impose a shorter timespan. If the browser causes the opt-out cookie to expire, or if an End User deletes its cookies or changes computers or devices after opting out, he or she will need to opt out again by clicking the link in this paragraph. Please note that where an End User blocks cookies on his or her browser, Innovid will be unable to set an opt-out cookie, and therefore unable to abide by such End User opt-out request.

4.3. Opt-out for mobile applications:

To opt-out of targeted advertising served via the ad serving functionalities of the Advertising Services (which include Innovid ad serving, as well as Flashtalking ad serving) for the mobile applications on your current device, the method of opting out depends on the type of device you have. Please also note that, in some cases, such as if you have an older device, it may be necessary for you to provide your device ID in order to opt out.

Opting out on Apple iOS devices: On iOS, users are provided with App Tracking Transparency in their operating system (under “Privacy and Security”). As this tracking feature is turned off by default, users must opt-in on an app-by-app basis through the “Allow Tracking” prompt presented. By each mobile app. To manage tracking by individual apps, or for instructions relating to any other (older or newer) iOS devices, please visit the NAI’s Mobile Choices Page located at https://www.networkadvertising.org/mobile-choices# for instructions.

‍Opting out on Android devices: In Android devices with Android 15.0 or higher, open your device's settings app: Settings > Google, or (depending on your device), open the Google Settings app. Under 'All Services', select Ads, then “Ads Privacy”. Then follow the prompts to opt out of Ad Topics and Ad Measurement. Note: If you clear your cache, you may lose your opt-out setting and may need to opt out again.

For older or different Android devices: please visit the NAI’s Mobile Choices Page located at https://www.networkadvertising.org/mobile-choices# for instructions. Please also visit the NAI’s Mobile Choices Page located at https://www.networkadvertising.org/mobile-choices# for additional detailed instructions on how to use the advertising choice mechanisms for various devices.

4.4. Opt-out for CTV:

To opt-out of targeted advertising served via the ad serving functionalities of the Advertising Services (which include Innovid ad serving, as well as Flashtalking ad serving) for a CTV (i.e., televisions with third party connected applications, smart televisions and/or digital media streaming devices), please visit the NAI’s Internet Connected TV Opt-Out Instructions Page located at https://www.networkadvertising.org/internet-connected-tv-choices/ for detailed instructions on how to use the advertising choice mechanisms for various types of CTVs.

4.5. Opt-out for InnovidXP Measurement Services

The advertiser, as the owner or manager of its website and applications, is responsible for informing its End Users about all data being collected (including by Innovid) and for collecting any legally necessary consents and honoring all opt-out choices from End Users, in accordance with applicable data protection laws.

4.6 Opt-out of Targeted Advertising facilitated through AudienceHub/AudienceHQ

To opt-out of targeted advertising served with the assistance of our social products known as AudienceHub and AudienceHQ, please send us an opt-out request via our privacy request form.

4.7 Additional Information and Opt-Out Tools on Industry Sites

Where available, you may also opt-out of targeted advertising on the Digital Advertising Alliance page located here, or (in Europe), through the European Digital Advertising Alliance page located here. These sites also offer helpful information and resources for consumers concerning targeted advertising.

5. Data Retention

Personal information collected by Innovid from Media Properties and advertisements may be retained for performance of the Advertising Services, to fulfill legitimate business needs and as required by law and/or audit obligations, for up to 13 months.

Information that is anonymized or aggregated may be stored for as long as necessary to fulfill legitimate business needs or as required by law.

6. Data and Information Security

Innovid is deeply committed to safeguarding the security and integrity of the data it collects. We implement robust and industry standard measures to protect the data in our possession against unauthorized alteration, destruction, access, or misuse. We maintain stringent controls over all collected data, retaining it in firewalled and secured databases. Access to these systems is strictly controlled and monitored, with limited access rights. Personal Information is further protected by authentication, strong password requirements and granular access permissions. Please note that where you are provided with (or choose) login credentials that enable you to access the Innovid Websites or Advertising Services, you are obligated to maintain their confidentiality. Please be aware that while we employ sophisticated defenses, no method of Internet transmission or electronic storage entirely infallible. Innovid cannot guarantee the absolute security of information you transmit to us, and such transmission is undertaken at your own discretion.

7. Children’s Privacy

The Innovid Website and the Advertising Services are not intended for minors, and minors are ineligible to register for an account on the Innovid Website. Innovid will not knowingly accept or solicit personal information from an Innovid Website visitor under the age of 18 and will delete accounts that it believes to be in violation of this restriction. If you become aware that a minor has registered to use the Innovid Website or has provided personal information to Innovid without Innovid’s prior written authorization, please contact Innovid here, so that Innovid can confirm and take appropriate steps to remove such account and delete the information.

8. Additional Information for Residents of the European Union, UK and Switzerland

When administering the Innovid Website, Innovid acts as a data controller/business. When providing the Advertising Services to its Customers, Innovid is a data processor with respect to personal data collected by Innovid on behalf of, or provided to Innovid by, brands, agencies, publishers and other Customers; as such it is the responsibility of such brand, agency, publisher or other Customer to secure the lawful basis for such processing.

The following lawful bases may be used by Innovid to collect and process personal data:

• Legitimate business interests. We may use your personal data for our legitimate business interests to improve our websites and content, and to optimize your experience, where permitted under applicable data protection law. Consistent with our legitimate business interests and any choices that we offer or consents that may be required under applicable laws and regulations, we may use personal data and technical information for direct marketing.

• Performance of contract. We collect and use personal data where needed to fulfill a contract with our Customer, who engages us to perform Advertising Services related to advertisements. For example, when you visit a Media Property on which our Customers offer advertising, Innovid may facilitate the serving or measurement of an advertisement and collect information about the display and performance of the advertisement.

• User Consent. Where required under applicable laws and regulations, we may collect and use personal data described in this Privacy Policy subject to your consent. Notably and where required by applicable laws and regulations, we will rely on your consent for electronic marketing and personalization of message content, which may include collecting information from your device or browser. You may withdraw your consent at any time using the opt-out and preference management mechanisms provided within the message or by contacting us as described in this Privacy Policy. Withdrawing consent will not affect the lawfulness of consent-based processing before consent was withdrawn.

If you are an individual with respect to whose personal data the General Data Protection Regulation (“GDPR”) applies (a “data subject”), and where we are a controller of your personal data under GDPR, you have the following rights under GDPR and local laws, including, as applicable:

The right to be informed about processing activities and applicable rights
The right to access personal data being processed
The right to rectify personal data when outdated or incorrect
The right to erasure (and to be publicly forgotten)
The right to object to processing with respect to processing activities based on consent
The right to restrict processing when processing is deemed to be unlawful
The right to data portability between proprietary systems in a common format
The rights related to automated decision making, including decisions based on profiling activities.

To exercise your rights, you may, or may have your authorized representative, contact Innovid and its Data Protection Officer here. Data subjects also have the right to lodge a complaint with a supervisory or data protection authority in their jurisdiction in the place of their habitual residence. If the supervisory authority fails to deal with a complaint, the data subject may have the right to an effective judicial remedy.

Please note that we may have to undertake a process to identify a data subject exercising their rights. There may be exemptions to the rights for specific legal reasons which, if applicable, we will set out for you in our response to your request. We may keep details of data subject requests exercised for our own compliance and audit requirements.

Where personal data is provided by a data subject acting in their capacity of an employee or personnel of a Customer of Innovid, such data subject’s rights will have to be effected through that Customer in its capacity as the data subject’s employer.

The information that we collect from you and about you may be transferred to and stored in a country other than your country of residence, such as the USA and the UK, which may not offer the same level of protection of personal data as your country of residence. However, we will take contractual and/or other measures as required by GDPR Chapter V and other applicable laws, to ensure your personal data is protected; this also includes Standard Contractual Clauses approved by the EU Commission and the UK International Data Transfer Addendum and/or the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework, where applicable, as further described below. Your personal data may also be transferred to countries that have been recognized by the EU as having adequate data protection, such as Israel and Canada.

Our EU representative may be contacted as follows: info@myedpo.com

Or by mail:

MyEDPO

Attn: Innovid EU Representative

Unit 3d North Point House, North Point Business Park

New Mallow Road

Cork, Ireland T23 AT2P

Our Data Protection Officer may be contacted as follows:

info@myedpo.com

Or by mail:

MyEDPO Israel Ltd.

Unit 3, 12 Hamaapilim

Jerusalem, Israel 9358801

In addition to the above, Innovid has certified under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework, as further described below.

9. The EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF

In this Section, references to “Innovid” shall mean, collectively, Innovid, LLC and its affiliated entity, Flashtalking, Inc.

In respect of non-HR Data, Innovid, a U.S. company, complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF (“UK DPF Extension”), and the Swiss-U.S. DPF (“Swiss-U.S. DPF”).

Innovid has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. DPF Principles with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. Innovid has certified to the U.S. Department of Commerce that it adheres to the UK DPF Extension with regard to the processing of personal data received from the UK in reliance on the UK Extension to the EU-U.S. DPF. Innovid has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. DPF with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the policies in this privacy policy and data subject rights under the EU-U.S. DPF Principles, UK DPF Extension or Swiss-U.S. DPF, the applicable DPF Principles shall govern and prevail over this privacy policy. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

If you are from the European Union, the UK or Switzerland and would like to gain access to, or request amendment, correction, or deletion of information that Innovid holds about you, please contact us using the details in the “Contact Us” section below. We will consider and respond to your request in accordance with the EU-U.S. DPF, the UK DPF Extension and the Swiss-U.S. DPF, and any applicable laws.

Innovid acknowledges the individual’s right to access their personal data and will provide you access to the personal data we hold about you to the extent it is reasonably available and allow you to correct, amend, or delete inaccurate personal data, as required, and permitted by applicable law. If you’d like us to correct, amend, or delete any other personal data that you have provided to us, please send your request to us at here and we will respond to your request within 30 days.

You may request that we cease sending you any marketing communications (including by email and SMS) at any time by notifying us in writing using the contact details provided below or following any “unsubscribe” instructions included in any marketing communications which we send to you.

We will also provide an individual opt-out or opt-in choice before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal data, please submit a written request using the details in the “Contact Us” section below.

With respect to personal data received or transferred pursuant to the EU-U.S. DPF, the UK DPF Extension or the Swiss-U.S. DPF, Innovid is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission (FTC). Under certain conditions specified by the EU-U.S. DPF, the UK DPF Extension or the Swiss-U.S. DPF, you may also be able to invoke binding arbitration to resolve your complaint. Please click here for more information or to submit a complaint.

Under the EU-U.S. DPF, the UK DPF Extension and the Swiss-U.S. DPF, Innovid may remain liable if its third-party service providers process your personal data in a manner inconsistent with the EU-U.S. DPF Principles, the UK DPF Extension Principles or the Swiss-U.S. DPF Principles, unless we prove that we are not responsible for the event giving rise to the damage.

EU, UK and Swiss Individuals who believe that their personal data has not been processed in compliance with the EU-U.S. DPF, the UK DPF Extension or the Swiss-U.S. DPF may raise their complaint in the following ways:

In compliance with the EU-U.S. DPF Principles, the UK DPF Extension and the Swiss-U.S. DPF Principles, Innovid commits to resolve complaints about your privacy and our collection or use of your personal data. European Union, UK or Swiss individuals with EU-U.S. DPF, UK DPF Extension or Swiss-U.S. DPF-related inquiries or complaints should first contact Innovid directly using the details in the “Contact Us” section below. We will respond to your complaint within 45 days of receipt.
Innovid has further committed to refer unresolved privacy complaints related to non-HR Data, under the EU-U.S. DPF Principles, the UK DPF Extension or the Swiss-U.S. DPF Principles, to the BBB National Programs DPF Service as its dispute recourse mechanism. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://bbbprograms.org/programs/all-programs/dpf-consumers for more information and to file a complaint. This service is provided free of charge to you.

10. Additional Privacy Information for Customers and Innovid Website Visitors who are Residents of California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia and Other U.S. States in Which an Applicable State Privacy Law is in Effect.

10.1. Introduction

In this section, we provide information for Customers and Innovid Website visitors who are residents of California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia and other states in which an applicable State Privacy Law is in effect as may be required under applicable privacy laws of such states from time to time (“State Privacy Laws”). For instance, the California Consumer Privacy Act (“CCPA”), as amended by the California Consumer Privacy Rights Act (“CPRA”), and the Virginia Consumer Data Protection Act (“VCDPA”), require that we provide our Customers and Innovid Website visitors who are residents of such states certain specific information about how we handle their personal information.

Under State Privacy Laws, subject to certain exceptions, “personal information” is generally any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular resident or household in the applicable state. Because certain State Privacy Laws require that we disclose specific information about how we handle personal information collected about our Customers and Innovid Website visitors who are residents of such states, the scope of this section may be different than the scope of our Privacy Policy.

Please note that for Innovid employee information-related requests, the Innovid employee privacy policy (which is separately provided to Innovid employees) applies.

10.2. Key concepts

(a) What is a “sale” of personal information under State Privacy Laws such as CCPA and VCDPA? What is a “share” of personal information under the CPRA?

A “sale” of personal information under State Privacy Laws may occur any time a business sells or makes available any personal information to a third party for monetary or other valuable consideration. Under the CPRA, “sharing” generally means disclosing, making available or communicating personal information by a business to a third party for cross-context behavioral advertising (also known as targeted advertising), whether or not for monetary or other valuable consideration, including transactions between a business and a third party for targeted advertising for the benefit of a business in which no money is exchanged. Targeted advertising to a consumer is based on the consumer’s personal information obtained from the consumer’s activity across businesses, distinctly-branded websites, applications, or services, other than the business, distinctly-branded website, application, or service with which the consumer intentionally interacts.

The use of some third party cookies placed on our Innovid Websites may be considered or “sharing” of personal information under State Privacy Laws. For example, we may share information from the Innovid Websites with our social media and other advertising partners, such as LinkedIn, in order to serve targeted ads for our own products and services and assess the effectiveness of such campaigns. You may opt out of such cookies as detailed in the section entitled “Cookies and Other Tracking Technologies” above.

(b) What is “sensitive information” under State Privacy Laws?

“Sensitive information” is generally defined as personal information that reveals sensitive information about a consumer, such as social security, driver’s license, state identification card or passport numbers, account log-in, financial account, debit card or credit card numbers in combination with any required security or access code, password or credentials allowing access to an account, precise geolocation, data revealing racial or ethnic origin, religious beliefs, physical or mental health diagnosis, sexual orientation, or citizen or immigrant status, as well as processing of genetic or biometric data for identification, and personal data collected from a known child. Innovid does not collect sensitive information as defined under applicable law.

10.3. Categories of personal information of Customers and Innovid Website Visitors that we collect and disclose to others for a business purpose

The items below set out generally the categories of personal information that we collect and disclose to others for a business purpose from Customers and Innovid Website visitors.

(a) Name, Contact Information, and other Identifiers: Identifiers such as a real name, alias, address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.

Do we collect? – YES
Do we disclose for a business purpose? – YES
Do we sell? – NO
Do we share with third parties for targeted advertising? – YES (to the limited extent that use of non-essential third-party tracking technologies on the Innovid Websites could be deemed a “sale” or a “share” under State Privacy Laws).

‍(b) Customer Records: Paper and electronic customer records containing personal information, such as name, signature, physical characteristics or description, address, telephone number, education, current employment, employment history, social security number, passport number, driver’s license or state identification card number, insurance policy number, bank account number, credit card number, debit card number, or any other financial or payment information, medical information, or health insurance information.

Do we collect? – YES
Do we disclose for a business purpose? – YES
Do we sell? – NO
Do we share with third parties for targeted advertising? – NO

‍(c) Protected Classifications: Characteristics of protected classifications under California or federal law such as race, color, sex, age, religion, national origin, disability, citizenship status, and genetic information.

Do we collect? – NO
Do we disclose for a business purpose? – NO
Do we sell? – NO
Do we share with third parties for targeted advertising? – NO

(d) Purchase History and Tendencies: Commercial information including records of personal property, products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies.

Do we collect? – YES
Do we disclose for a business purpose? – YES
Do we sell? – NO
Do we share with third parties for targeted advertising? – NO

(e) Biometric Information: Physiological, biological, or behavioral characteristics that can be used alone or in combination with each other to establish individual identity, including DNA, imagery of the iris, retina, fingerprint, faceprint, hand, palm, vein patterns, and voice recordings, keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.

Do we collect? – NO
Do we disclose for a business purpose? – NO
Do we sell? – NO
Do we share with third parties for targeted advertising? – NO

(f) Usage Data: Internet or other electronic network activity information, including, but not limited to, browsing history, clickstream data, search history, and information regarding a resident’s interaction with an internet website, application, or advertisement, including access logs and other activity information related to your use of any Innovid websites, applications or other online services.

Do we collect? – YES
Do we disclose for a business purpose? – YES
Do we sell? – NO
Do we share with third parties for targeted advertising? – YES (to the limited extent that use of non-essential third-party tracking technologies on the Innovid Websites could be deemed a “sale” or a “share” under State Privacy Laws).

(g) Geolocation Data: Precise geographic location information about a particular individual or device.

Do we collect? – NO
Do we disclose for a business purpose? – NO
Do we sell? – NO
Do we share with third parties for targeted advertising? – NO

(h) Audio, Video and other Electronic Data: Audio, electronic, visual, thermal, olfactory, or similar information, such as CCTV footage, photographs, and call recordings and other audio recording (e.g., recorded meetings and webinars).

Do we collect? – YES (for internal training purposes)
Do we disclose for a business purpose? – YES
Do we sell? – NO
Do we share with third parties for targeted advertising? – NO

(i) Professional or employment-related information: Employment history, qualifications, licensing, disciplinary record.

Do we collect? – NO
Do we disclose for a business purpose? – NO
Do we sell? – NO
Do we share with third parties for targeted advertising? – NO

(j) Education Information: Information about education history or background that is not publicly available personally identifiable information as defined in the federal Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99).

Do we collect? – NO
Do we disclose for a business purpose? – NO
Do we sell? – NO
Do we share with third parties for targeted advertising? – NO

(k) Profiles and Inferences: Inferences drawn from any of the information identified above to create a profile reflecting a resident’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.

Do we collect? – YES
Do we disclose for a business purpose? – YES
Do we sell? – NO
Do we share with third parties for targeted advertising? – NO

10.4. Rights of Customers and Innovid Website Visitors who are residents of California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, and other U.S. states in which an applicable State Privacy Law is in effect

State Privacy Laws grant our Customers and Innovid Website visitors who are residents of certain states the rights set forth below.

For the purposes of advertising served via our Advertising Services, except as may expressly be agreed otherwise in a data processing agreement between us and our Customer, we are a service provider and a processor to the Customer who has engaged us for such Advertising Services, and such Customer determines the purposes and means of processing personal information. If you are an End User and wish to opt-out of targeted advertising displayed with the assistance of the ad serving functionalities of our Advertising Services (which include Innovid ad serving, as well as Flashtalking ad serving), please visit the section of this Privacy Policy entitled “Opt-Out of Targeted Advertising”. If you are an End User and wish to opt out of targeted advertising facilitated by our AudienceHub/AudienceHQ Advertising Services, please contact us here.

If you are an End User and wish to exercise any of your other rights with respect to your personal information (for instance, right to know, right to delete or right to appeal), please contact the relevant Customer to exercise such other rights.

(a) Right to Opt-out of Sale and/or Sharing of Personal Information. Customers and Innovid Website visitors who are residents of certain states have the right to opt out of the “sale” of their personal information. Residents of certain states such as California also have the right to opt out of the “sharing” of their personal information for targeted advertising. The use of some third party cookies placed on our Innovid Website may be considered “sharing” of personal information under State Privacy Laws. For example, we may share information with our social media and other advertising partners, such as LinkedIn, in order to serve targeted ads for our own products and services and assess the effectiveness of such campaigns. You may opt out of such cookies as detailed in the section entitled “Cookies and other tracking technologies on the Innovid Website” above.

(b) Right to opt out of targeted advertising or cross-context behavioral advertising. Some third party cookies on the Innovid Website are used for targeted advertising purposes with respect to our own products and services. You may opt out of such cookies as detailed in the section entitled “Cookies and other tracking technologies on the Innovid Website” above. If you are an End User and wish to opt-out of targeted advertising displayed with the assistance of the ad serving functionalities of our Advertising Services (which include Innovid ad serving, as well as Flashtalking ad serving), please visit the section of this Privacy Policy entitled “Opt-Out of Targeted Advertising”. If you are an End User and wish to opt out of targeted advertising facilitated by our AudienceHub/AudienceHQ Advertising Services, please contact us here.

(c) Right to Limit Use and Disclosure of Sensitive Personal Information. Innovid does not collect, use, or disclose sensitive information.

(d) Right to Revoke Consent. Under certain State Privacy Laws, Customers and Innovid Website visitors who are residents of certain states have the right to revoke consent they previously provided to the processing of their personal information, subject to exceptions provided by applicable law.

(e) Notice at Collection. At or before the point of collection, notice must be provided to the individual of the categories of personal information collected and the purposes for which such information is used.

(f) Verifiable Requests to Delete and Requests to Know/Confirm. Subject to certain exceptions, Customers and Innovid Website visitors who are residents of certain states have the right to make the following requests, at no charge:

Request to Delete: Customers and Innovid Website visitors who are residents of certain states have the right to request deletion of their personal information that we have collected about them and to have such personal information deleted, except where an exemption applies.

Request to Know/Confirm: Customers and Innovid Website visitors who are residents of certain states have the right to request and, subject to certain exemptions, receive a copy of the specific pieces of personal information that we have collected about them in the past and to have this delivered, free of charge, either (a) by mail or (b) electronically in a portable and, to the extent technically feasible, readily useable format that allows the individual to transmit this information to another entity without hindrance. Residents of certain states also have the right to request that we provide them certain information about how we have handled their personal information in the past, including the:
- categories of personal information collected;
- categories of sources of personal information;
- business and/or commercial purposes for collecting and selling their personal information;
- categories of third parties/with whom we have disclosed or shared their personal information;
- categories of personal information that we have disclosed or shared with a third party for a business purpose;
- categories of personal information collected; and
- categories of third parties to whom the residents’ personal information has been sold and the specific categories of personal information sold to each category of third party.

(g) Right to Appeal. Customers and Innovid Website visitors may appeal our decision with respect to a request they have submitted by contacting us here.

Some U.S. states provide you with the right to further appeal our determination to a consumer protection agency located in that state. For example:

Colorado – Colorado Attorney General’s Office
Maryland – Maryland Attorney General Consumer Protection Division
Minnesota – Minnesota Attorney General's Office
Nebraska – Nebraska Attorney General’s Office
New Hampshire – Data Privacy Unit of the Consumer Protection and Antitrust Bureau of the New Hampshire Attorney General’s Office
New Jersey - Division of Consumer Affairs in the Department of Law and Public Safety of New Jersey
Texas - For denied appeals, visit the Texas Attorney General’s Office, Consumer Protection Division
Virginia – For denied appeals, visit the Virginia Attorney General’s Office, Consumer Protection Division

(h) Right to Non-Discrimination. Certain State Privacy Laws prohibit discrimination against their residents for exercising their rights under applicable state laws. Discrimination may exist where a business denies or provides a different level or quality of goods or services, or charges (or suggests that it will charge) different prices, rates or penalties on residents who exercise their privacy rights, unless doing so is reasonably related to the value provided to the business by the residents’ data. We do not engage in said discrimination practices.

(i) Authorized Agents. Where permitted by law, you may also authorize an agent (an "Authorized Agent") to exercise your rights on your behalf. To do this, you must provide your Authorized Agent with written permission to exercise your rights on your behalf, and we may request a copy of this written permission from your Authorized Agent when they make a request on your behalf. Please note that we may ask you or your Authorized Agent for additional information to verify your identity and state of residency before executing your privacy request.

(j) Financial Incentives. A business may offer financial incentives for the collection, sale, or deletion of certain state residents’ personal information, provided the incentive is not unjust, unreasonable, coercive, or usurious, and is made available in compliance with applicable transparency, informed consent, and opt-out requirements. Residents of certain states have the right to be notified of any financial incentive offers and their material terms, the right to opt-out of such incentives at any time and may not be included in such incentives without their prior informed opt-in consent. We do not offer any financial incentives at this time.

(k) Exceptions to These Rights. The law provides for certain exceptions to the rights described above. We reserve the right to avail ourselves of these exceptions where applicable.

‍

10.5. Submitting Requests

Some third party cookies on the Innovid Website are used for targeted advertising purposes with respect to our own products and services. Customers and Innovid Website visitors may opt out of such cookies as detailed in the section entitled “Cookies and other tracking technologies on the Innovid Website” above.

Customers and Innovid Website visitors may submit requests to know/confirm, requests to delete, requests to appeal and/or requests to revoke consent by contacting us here. We will respond to verifiable requests received from Customers and Innovid Website visitors who are residents of the applicable states as required by law.

10.6. CCPA Metrics for 2024

Pursuant to CCPA Regulation 999.317(g), Innovid informs you of the following metrics with respect to the year 2024 for the Advertising Services, excluding Social Ads Manager and AudienceHub. Note: The foregoing numbers are based upon requests received from all individuals and not only from “consumers” as defined under the CCPA.
a. In 2024, the number of requests to know that Innovid received, complied with in whole or in part, or denied: 18, 18, 0.
b. In 2024, the number of requests to delete that Innovid received, complied with in whole or in part, or denied: 33, 33, 0.
c. The median number of days within which Innovid substantively responded to requests to know, requests to delete, and requests to opt-out: 2.

Pursuant to CCPA Regulation 999.317(g), Innovid informs you of the following metrics with respect to the year 2024 for Social Ads Manager and AudienceHub. Note: The foregoing numbers are based upon requests received from all individuals and not only from “consumers” as defined under the CCPA.
a. In 2024, the number of requests to know that Innovid received, complied with in whole or in part, or denied: 2, 0, 2.
b. In 2024, the number of requests to delete that Innovid received, complied with in whole or in part, or denied: 93, 39, 54.
c. In 2024, the number of requests to opt out of personal information sales or sharing that Innovid received, complied with in whole or in part, or denied: 88, 28, 40.
d. The median number of days within which Innovid substantively responded to requests to know, requests to delete, and requests to opt-out: 7.

*Requests may have been denied if we were unable to verify the requestor’s identity, the requestor was not a resident of a state in which an applicable State Privacy Law was in effect when the request was made, the request called for information or action that is exempt, or other grounds. If you have any questions about our privacy rights process, please contact us using the contact details provided below.

11. Contact Us

You may contact us and our Data Protection Officer here.

You may also write to us as follows:

Innovid

Attn: Privacy

Blue Fin Bldg., Second Floor

110 Southwark St.

London SE1 0TA

United Kingdom

Innovid
Attn.: Privacy
120 Broadway

New York, NY 10004

12. Changes to the Privacy Policy

Innovid reserves the right to change or modify this Privacy Policy from time to time by posting the modified Privacy Policy on the Innovid Websites. Your continued use of the Innovid Websites or Advertising Services indicates your acceptance of the modified Privacy Policy.

Last updated: November 21st, 2025

‍