Legal

Privacy Policy

Last Updated: January 1, 2026

1. Introduction

 

Mixo Ads Inc. (“Mixo Ads,” “we,” “us,” or “our”) is committed to protecting the privacy and security of personal information we process. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information in connection with our AI-powered advertising platform and managed services.

This Privacy Policy applies to:

  • Our corporate website and any other websites we operate
  • Our advertising platform and managed services
  • Our mobile applications
  • Our marketing and business operations
  • Data we process on behalf of our clients
  • Data collected through digital advertising campaigns we manage

We operate as both a data controller (for our own business operations and website) and a data processor (when handling data on behalf of our clients). This Privacy Policy addresses both capacities.

 

2. Information We Collect

 

2.1 Information We Collect Directly

 

Business Contact Information: When you interact with us for business purposes, we collect names, email addresses, phone numbers, company names, job titles, business addresses, and professional background information.

Account Information: For clients and partners accessing our platform, we collect usernames, passwords, account preferences, payment information, tax identification numbers, and authorized user details.

Communications Data: When you communicate with us, we collect the content of your messages, feedback, inquiries, and any information you choose to provide.

Event and Webinar Information: If you attend our events or webinars, we collect registration details, dietary restrictions, accessibility needs, and participation data.

Recruitment Information: Job applicants provide resumes, cover letters, references, background check information, and other employment-related data.

 

2.2 Information We Collect Automatically

 

Website Usage Data: We automatically collect IP addresses, browser types, operating systems, referring URLs, pages viewed, links clicked, time spent on pages, and search terms used on our sites.

Cookie and Tracking Data: We use cookies, pixels, and similar technologies to collect information about your interactions with our websites and emails, including unique identifiers, session information, and preference settings.

Device Information: We collect device identifiers, mobile device types, screen resolutions, and general location information derived from IP addresses.

 

2.3 Information We Process for Clients

 

Advertising Campaign Data: We process consumer data on behalf of our clients including:

  • Demographic information (age ranges, gender, interests)
  • Geographic location data
  • Behavioral data (browsing history, purchase intent signals)
  • Device and browser information
  • Ad interaction data (impressions, clicks, conversions)
  • Cross-device identification data
  • Audience segment information

First-Party Client Data: Clients may provide us with their customer data including:

  • Customer relationship management (CRM) data
  • Transaction and purchase history
  • Email lists and contact databases
  • Website analytics data
  • Offline conversion data
  • Customer lifetime value data

Third-Party Data: We may receive data from third-party sources including:

  • Data management platforms
  • Ad exchanges and supply-side platforms
  • Social media platforms
  • Data brokers and aggregators
  • Public records and commercially available sources

 

3. How We Use Information

 

3.1 Our Business Operations

 

We use personal information to:

  • Provide, maintain, and improve our services
  • Manage client accounts and relationships
  • Process payments and financial transactions
  • Communicate about our services, updates, and marketing
  • Respond to inquiries and provide customer support
  • Conduct research and analytics to improve our offerings
  • Ensure network and information security
  • Comply with legal obligations and enforce our terms
  • Protect against fraud and unauthorized use
  • Manage recruitment and employment matters

 

3.2 Advertising Services

 

We process data to:

  • Create and manage advertising campaigns
  • Develop audience segments and targeting strategies
  • Optimize campaign performance and bidding strategies
  • Measure campaign effectiveness and attribution
  • Generate reports and analytics for clients
  • Conduct A/B testing and creative optimization
  • Prevent ad fraud and invalid traffic
  • Ensure brand safety and content appropriateness
  • Manage frequency capping and user preferences
  • Enable cross-device tracking and attribution

 

3.3 AI and Machine Learning

 

We use artificial intelligence and machine learning to:

  • Predict audience behavior and conversion likelihood
  • Optimize bid strategies and budget allocation
  • Generate creative variants and messaging
  • Identify patterns and insights in campaign data
  • Automate campaign management tasks
  • Detect anomalies and potential fraud
  • Personalize ad experiences
  • Forecast performance and trends

 

4. Legal Bases for Processing (EEA/UK)

 

For individuals in the European Economic Area and United Kingdom, we rely on the following legal bases:

Consent: Where you have provided consent for specific processing activities, particularly for marketing communications and certain cookie usage.

Contract Performance: To fulfill our contractual obligations with clients, partners, and service providers.

Legitimate Interests: We process data based on legitimate interests including:

  • Operating and improving our business
  • Marketing our services to business contacts
  • Ensuring security and preventing fraud
  • Managing legal claims and compliance
  • Conducting analytics and research

Legal Obligations: To comply with applicable laws, regulations, and legal processes.

Vital Interests: In rare cases, to protect vital interests of individuals.

 

5. Information Sharing and Disclosure

 

5.1 Service Providers

 

We share information with trusted service providers who assist us in:

  • Cloud hosting and data storage
  • Payment processing
  • Customer relationship management
  • Email and communication services
  • Analytics and business intelligence
  • Security and fraud prevention
  • Legal and professional services

 

5.2 Advertising Ecosystem Partners

 

In providing advertising services, we share data with:

  • Demand-side platforms (DSPs)
  • Ad exchanges and networks
  • Social media advertising platforms
  • Search engine advertising platforms
  • Publisher and media partners
  • Measurement and attribution partners
  • Data management platforms
  • Brand safety and verification partners

 

5.3 Client Data Sharing

 

We share campaign performance data and insights with our clients, including aggregated and anonymized consumer data, but do not share individual consumer data between different clients.

 

5.4 Legal and Compliance Disclosures

 

We may disclose information when required to:

  • Comply with laws, regulations, or legal processes
  • Respond to government or regulatory requests
  • Protect our rights, property, or safety
  • Prevent fraud or illegal activities
  • Enforce our terms and agreements
  • Respond to emergencies

 

5.5 Business Transfers

 

If we are involved in a merger, acquisition, sale of assets, or bankruptcy, personal information may be transferred as part of the transaction. We will notify affected individuals of any change in ownership or uses of personal information.

 

6. Data Retention

 

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

Client Data: We retain client account information for the duration of our business relationship and for seven years after termination for legal and tax purposes.

Campaign Data: Advertising campaign data is retained for up to three years after campaign completion for optimization and analysis purposes, unless clients request earlier deletion.

Website Visitors: Website analytics and cookie data is retained for up to two years from the last interaction.

Job Applicants: Unsuccessful applicant data is retained for one year for consideration of future opportunities, with consent.

Legal Holds: We may retain information beyond standard periods when subject to legal holds or preservation obligations.

 

7. Your Privacy Rights

 

7.1 Rights for All Individuals

 

Regardless of location, you may:

  • Request information about our privacy practices
  • Opt-out of marketing communications
  • Request correction of inaccurate information
  • Lodge complaints with us about privacy concerns

 

7.2 California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: Request disclosure of personal information we collect, use, and share
  • Right to Delete: Request deletion of personal information, subject to exceptions
  • Right to Opt-Out: Opt-out of the sale or sharing of personal information
  • Right to Non-Discrimination: Not receive discriminatory treatment for exercising privacy rights
  • Right to Correction: Request correction of inaccurate personal information
  • Right to Limit Use: Limit use and disclosure of sensitive personal information

 

7.3 European and UK Privacy Rights

Individuals in the EEA and UK have rights under GDPR including:

  • Right of Access: Obtain confirmation and copies of personal information
  • Right to Rectification: Correct inaccurate or incomplete information
  • Right to Erasure: Request deletion in certain circumstances
  • Right to Restriction: Limit processing in specific situations
  • Right to Data Portability: Receive data in a portable format
  • Right to Object: Object to certain processing activities
  • Rights Related to Automated Decision-Making: Not be subject to solely automated decisions with legal effects

 

7.4 Other State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws have similar rights to access, delete, correct, and opt-out of certain data processing.

 

8. Exercising Your Rights

 

To exercise your privacy rights, contact us at:

  • Email: [email protected]
  • Mail: Mixo Ads Inc., Attn: Privacy Rights, 131 Continental Dr, Ste 305, Newark, DE 19713, United States

We will verify your identity before processing requests. We may request additional information to confirm your identity and locate your information in our systems.

For California residents, authorized agents may submit requests on your behalf with proper documentation.

We will respond to requests within the timeframes required by applicable law (generally 30-45 days).

 

9. Cookies and Tracking Technologies

 

9.1 Technologies We Use

 

Cookies: Small text files stored on your device that help us recognize you and remember preferences.

Pixels and Web Beacons: Invisible images that track email opens and website interactions.

Local Storage: Browser-based storage for maintaining preferences and session information.

Device Fingerprinting: Techniques to identify devices based on configuration and settings.

Software Development Kits (SDKs): Code libraries in mobile applications that collect app usage data.

 

9.2 Types of Cookies

 

Essential Cookies: Required for website functionality, security, and accessibility.

Performance Cookies: Collect information about website usage to improve performance.

Functionality Cookies: Remember preferences and enable personalized features.

Advertising Cookies: Used to deliver relevant advertising and measure campaign effectiveness.

Analytics Cookies: Help us understand user behavior and improve our services.

 

9.3 Managing Cookies

 

You can manage cookies through:

  • Browser settings to block or delete cookies
  • Our cookie preference center on our websites
  • Industry opt-out tools like the NAI Consumer Opt-Out or DAA WebChoices
  • Global Privacy Control signals where legally required

Note that blocking cookies may impact website functionality and prevent us from providing certain services.

 

10. International Data Transfers

 

We are based in the United States and process information globally. When we transfer personal information internationally, we ensure appropriate safeguards:

Standard Contractual Clauses: We use European Commission-approved standard contractual clauses for transfers from the EEA/UK.

Adequacy Decisions: We rely on adequacy decisions where applicable.

Consent: In some cases, we may rely on explicit consent for international transfers.

Other Safeguards: We implement technical and organizational measures to protect data during transfer.

 

11. Security Measures

 

We implement comprehensive security measures including:

Technical Safeguards:

  • Encryption of data in transit and at rest
  • Multi-factor authentication
  • Network segmentation and firewalls
  • Intrusion detection and prevention systems
  • Regular security updates and patches
  • Secure development practices

Organizational Safeguards:

  • Access controls and least privilege principles
  • Employee training and awareness programs
  • Confidentiality agreements
  • Vendor security assessments
  • Incident response procedures
  • Regular security audits and assessments

Compliance Certifications:

  • SOC 2 Type II certification
  • ISO 27001 certification
  • PCI DSS compliance where applicable
  • FedRAMP authorization for government clients
  • HIPAA compliance for healthcare-related data

While we implement robust security measures, no system is completely secure. We cannot guarantee absolute security of personal information.

 

12. Children’s Privacy

 

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

For advertising campaigns, we do not knowingly target advertising to children under 13 (or higher age where required by local law) and comply with applicable regulations including COPPA.

 

13. Do Not Track Signals

 

Some browsers transmit “Do Not Track” (DNT) signals. Because there is no industry consensus on how to respond to DNT signals, we do not currently respond to browser DNT signals. We do honor Global Privacy Control signals where legally required.

 

14. Industry-Specific Compliance

 

14.1 Financial Services

 

When working with financial services clients, we comply with:

  • Gramm-Leach-Bliley Act (GLBA) requirements
  • Fair Credit Reporting Act (FCRA) limitations
  • PCI DSS standards for payment card data
  • Financial sector cybersecurity requirements

 

14.2 Healthcare

 

For healthcare-related advertising, we:

  • Maintain HIPAA compliance as a business associate where applicable
  • Avoid using protected health information for advertising without authorization
  • Comply with FDA regulations on pharmaceutical advertising
  • Respect sensitive health data restrictions

 

14.3 Government and Public Sector

 

When serving government clients, we adhere to:

  • FedRAMP security requirements
  • State and local government privacy laws
  • FOIA and public records considerations
  • Government data handling requirements
  • Criminal Justice Information Services (CJIS) standards where applicable

 

15. Privacy Policy Updates

 

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by:

  • Posting a notice on our website
  • Sending an email to registered users
  • Obtaining consent where required by law

The “Last Updated” date at the top indicates when this Privacy Policy was last revised. Your continued use of our services after changes constitutes acceptance of the updated Privacy Policy.

 

16. Contact Information

 

For privacy-related questions, concerns, or requests, please contact:

Data Protection Officer: Miranda Tan Email: [email protected]

Postal Address: Mixo Ads Inc. Attn: Privacy Department 131 Continental Dr, Ste 305 Newark, DE 19713 United States

General Inquiries: Email: [email protected]

 

16.1 Supervisory Authorities

 

You have the right to lodge a complaint with supervisory authorities:

United States: While there is no single federal privacy authority, you may contact:

  • Federal Trade Commission (FTC)
  • Your state’s Attorney General

European Union: Contact your local data protection authority. A list is available at: https://edpb.europa.eu/about-edpb/board/members_en

United Kingdom: Information Commissioner’s Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Website: https://ico.org.uk

 

17. Additional Information for Specific Jurisdictions

 

17.1 Nevada Privacy Rights

 

Nevada residents may opt-out of the sale of covered information by emailing [email protected] with “Nevada Opt-Out” in the subject line.

 

17.2 Brazil (LGPD)

 

For individuals in Brazil, we process personal data in accordance with the Lei Geral de Proteção de Dados (LGPD), including recognizing your rights to access, correction, deletion, and data portability.

 

17.3 Canada

 

We comply with Canadian privacy laws including PIPEDA and provincial privacy legislation. Canadian residents have rights to access and correct personal information and to withdraw consent for certain uses.

 

17.4 Australia

 

We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988. Australian residents may access and correct personal information and complain to the Office of the Australian Information Commissioner.

 

18. Accessibility

 

This Privacy Policy is designed to be accessible to people with disabilities. If you experience any difficulties accessing this Privacy Policy, please contact us at [email protected].

 

19. Glossary

 

Personal Information: Information that identifies, relates to, or could reasonably be linked to an individual or household.

Processing: Any operation performed on personal information including collection, use, storage, disclosure, and deletion.

Controller: The entity that determines the purposes and means of processing personal information.

Processor: The entity that processes personal information on behalf of a controller.

Sensitive Personal Information: Special categories of data including racial or ethnic origin, political opinions, religious beliefs, genetic data, biometric data, health data, and data concerning sexual orientation.

Anonymization: The process of removing personally identifiable information so that individuals cannot be identified.

Pseudonymization: Processing personal information so it cannot be attributed to an individual without additional information kept separately.