Flashtalking

Privacy Policy Overview: Innovid

1. Data Collection & Usage

Website visitors and customers

Innovid may collect:

• Identifiers and contact details: name, email, address, phone number, account information, IP address and online identifiers.
• Usage and technical data: browsing history, clicks, pages viewed, URLs, device/browser information, and interactions with websites, advertisements, newsletters and webinars.
• Customer account data: information about use of Innovid’s business and advertising services, including campaign, analytics and account-related information.
• Advertising and audience data: cookie IDs, mobile and connected-TV advertising IDs, hashed email addresses, approximate geographic location, device information, impressions, clicks, viewing duration and other ad interactions.
• Customer-uploaded data: customers may provide names, email addresses, mailing addresses, phone numbers, IP addresses, cookie IDs and advertising or device IDs.
• Inferences and profiles: preferences, interests, audience characteristics and other conclusions derived from collected data.

Innovid uses this information to provide and improve its services; serve, personalize, measure, optimize and sequence advertising; limit ad frequency; detect fraud and protect brand safety; provide reports and analytics; conduct benchmarking and marketing; manage accounts; and comply with legal or audit obligations.

Advertising-related personal information may generally be retained for up to 13 months. Aggregated or de-identified information may be retained longer.

2. User Rights and Choices

Rights vary by location and whether Innovid or an Innovid customer controls the data.

EU, UK and Switzerland

Where Innovid is the controller, users may have rights to:

• Be informed about processing
• Access, correct or delete data
• Restrict or object to processing
• Port data in a usable format
• Withdraw consent
• Challenge certain automated decision-making or profiling
• Complain to a data protection authority

Requests may require identity verification and can be subject to legal exceptions. If Innovid processes advertising data for a customer, users generally must exercise access, deletion and similar rights through that customer.

Certain U.S. states

Residents of listed states—including California, Colorado, Connecticut, Texas and Virginia—may have rights to:

• Know or confirm what data is collected
• Obtain copies of personal data
• Correct inaccurate data
• Delete data, subject to exceptions
• Opt out of targeted advertising or certain “sales” or “sharing”
• Revoke consent and appeal denied requests
• Use an authorized agent

Innovid states that it does not collect legally defined sensitive information and does not discriminate against users exercising privacy rights.

Advertising opt-outs

Users can opt out through:

• Innovid’s cookie-preference tool
• Global Privacy Control, where supported
• Device settings for iOS and Android
• NAI, DAA or EDAA advertising-choice tools
• CTV-specific opt-out mechanisms
• Innovid’s privacy request form for AudienceHub/AudienceHQ

Opt-outs are often device- or browser-specific. Deleting cookies, changing devices, or blocking cookies may require opting out again. Users may still receive non-targeted advertisements.

3. Third-Party Sharing

Innovid may disclose data to:

• Its affiliates and subsidiaries
• Service providers and contractors
• Advertising, social-media, analytics and integrated data providers
• Customers, including advertisers, agencies and publishers
• Media properties and platforms supporting advertising delivery
• Government authorities or other parties where legally required

Innovid describes itself as generally acting as a processor/service provider for customer advertising data, meaning the customer determines the purposes of processing and must provide its own notices and legal bases.

The policy expressly does not cover third-party websites or media properties that Innovid does not control. Some third-party cookies on Innovid’s own websites may qualify as “sharing” for targeted advertising under California law.

4. AI/ML Training

The policy does not expressly state that user data is used to train artificial-intelligence or machine-learning models. It permits broad “improvement,” “benchmarking,” “analysis,” optimization and service-enhancement activities, but does not specifically authorize AI training. Users seeking certainty should request clarification from Innovid or their applicable customer.

5. Key User Obligations and Restrictions

• Users must keep login credentials confidential.
• Websites and services are not intended for individuals under 18; Innovid may delete suspected minor accounts.
• Users are responsible for reviewing the privacy policies of customers and third-party media properties.
• Information submitted through an advertisement form may be provided to the relevant customer, whose privacy policy governs subsequent use.
• Continued use after policy changes constitutes acceptance.

6. Liability and Disputes

The policy contains no detailed arbitration, governing-law, forum-selection or general liability clause. Innovid does state that:

• Internet transmission and storage cannot be guaranteed absolutely secure.
• Users transmit information at their own discretion.
• Innovid is not responsible for third-party privacy practices.
• Under the Data Privacy Framework, Innovid may remain responsible for certain service-provider violations unless it proves it was not responsible.

EU, UK and Swiss users may complain to regulators, and DPF-covered complaints may be subject to FTC enforcement and specified DPF dispute processes.

7. Changes

Innovid may modify the policy by posting a revised version on its websites. Continued use of the websites or services signifies acceptance. The policy does not promise individualized notice, email notification, or a specific advance-notice period.