Privacy Policy
Updated January 2025
Introduction
Datafy, LLC (“Company”), is committed to keeping any and all personal information collected from our users accurate, confidential, secure, and private. Personal information is personally identifying information which may not otherwise be available to the public. Our collection and use of this information is governed by strict internal policies. We also adhere to industry standards, such as the California Consumer Privacy Act (CCPA), and ensure that we handle your data responsibly.
By accessing our website or using our services, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, do not use our website or services. You may also exercise your rights to opt out, where applicable.
1. Types of Data We Collect
1.a. Data collected from our Customers or Site Visitors
When visiting our site we may ask for basic contact information which you may voluntarily provide through our site, including information such as name, phone number, or email address. This information helps us to find and process leads and allows us to follow up with you after you have made an initial inquiry.
If you sign up for an account to access our software platform, we require basic contact information to manage your account and to send notifications and product updates. This information is only given by your consent, in that you voluntarily provide this information in order to register for an account. For users that sign up for our services, the basic required information includes your name, email address and phone number. We also collect payment and billing information when you register for the use of our products and services. For example, we may ask you to provide a billing address for your account and payment information. We use this information solely to process payments and deliver our products and services.
Electronic and Web Browsing Information we Gather
Like most modern sites, when you visit our website we automatically gather information about your computer such as:
- IP address
- Browser type and information
- Navigation through our sites
- Referring/exit pages
- Device Type
- Operating System
- If applicable, cookie ID
This information does not include personally identifying information. Any personally identifiable information is only collected when voluntarily provided by the user when registering for an account, signing up for our newsletter, or requesting to be contacted. Depending on the browser settings of the website visitor, we may also place a cookie. The cookie, alone or in combination with the other anonymous information listed above in this paragraph, may be used for marketing purposes (i.e. website retargeting advertisements). This information will not be used for any other purpose other than Datafy’s own internal website performance measurement and direct Datafy advertisements.
You may use our website's cookie/pixel consent options to control whether this basic information can be collected from you, and if it can be used for retargeting advertisements. Additionally, our website listens for common industry standard opt out signals including IAB privacy consent strings, and the Global Privacy Control program.
Once a registered user has logged into our platform, we analyze software usage, including time on site, which pages were visited, which tools were accessed, etc. This usage information is connected to each registered account and is used to better understand which features are most utilized. We use this information to improve our products and services and identify opportunities for user training.
1.b. Data Collected for the Purposes of Our Analytics, Advertising, and Marketing Performance Measurement Tools
Data We Directly Collect
Datafy's software platform provides our customers with the ability to analyze anonymous, aggregated consumer behavior data and to take action on that data. Our customers utilize this information to better understand how their customers are interacting with their offerings and our services help them to develop strategies for how, when, and who to advertise to. All of Datafy’s analysis, advertising, and marketing performance analysis is conducted in aggregate, meaning that individuals can never be isolated for analysis or advertising targeting.
Datafy collects digital marketing performance data from partnering organizations that have placed our measurement code (“Pixel”) on their site or on their digital media. Our measurement pixels collect limited data including:
- Browser type
- Device type and characteristics
- IP address
- Time spent on site
- Page where the pixel was viewed
- If applicable, a cookie ID
- If applicable, additional pseudonymous identifiers per the partnering site's practices and privacy policies
We use this data for:
- Advertising Performance Analysis: To measure the effectiveness of digital ads and understand how users interact with our customers' marketing efforts
- Website Performance Analysis: Analysis comprises time on site, referring/exit pages, and website actions.
- Improvement of Marketing Campaigns: By analyzing aggregated data, we can improve ad targeting strategies and campaign optimizations for our customers.
- Website Retargeting Marketing: This is only applicable for partners that have placed our pixel directly on their owned site, and does not apply to 3rd party placements such as external media performance.
Our pixel listens for common industry standard opt-out signals including IAB privacy consent strings, and the Global Privacy Control program. By participating in one of these programs no data will be collected or stored.
Public Data Sources We Utilize
Some of the services we provide require the use and analysis of public (such as Federal or State) data sets. Data may include census data such as population characteristics, demographics, socioeconomic information, publicly available tax information, and public transportation utilization.
This information is used to:
- Identify potential advertising audiences
- Measure and estimate economic impact
- Improvements to analysis and modeling techniques
3rd Party Data Sources We Utilize
Some of our services require the utilization of 3rd party data sources, meaning that we purchase additional data from non-related companies. Our use of these data sets is governed by the policy guidelines of each respective data provider. We only contract with 3rd parties that contractually agree to the same level of data collection and data protection policies and practices as we outline herein.
Types of 3rd party data we purchase comprises:
- Mobile Device Geolocation Data, including precise location data
- Mobile Advertiser IDs
- Pseudonymous IDs
- Demographic Information
- Credit Card Transaction Data
- Email addresses
- Aggregated Lodging Data including Hotel and Short Term Rental
We use this data for:
- Advertising Performance Analysis: To measure the effectiveness of digital ads and understand how users interact with our customers' marketing efforts
- Aggregated and Anonymized Physical Behavior Analysis: We provide analysis and reporting for how visitors interact with our customers' offerings
- Economic Impact Studies: We generate estimates for the economic impact generated from marketing activities
- Targeted Advertising: We build interest-based advertising audiences and purchase digital media advertisements for ourselves and our customers
- Audience Enrichment: We match 1st party data with 3rd party sources to gain additional insights into the composition of potential audiences
1.c. Anonymization
All of our products and services are designed and implemented in a way that makes it impossible for any individual or small groups of people to be isolated for targeted advertising or for analysis by our customers. While some level of personal data is collected, all of our services remove any identifiable information that could potentially be used to re-identify individuals or small groups of people before the data or analysis is delivered to customers.
We accomplish this anonymization by:
- Minimum cohort sizes: Any advertising audience has a minimum cohort size of 5,000 devices. This ensures that any targeted advertising delivered to an individual is based on broader categories that make it impossible to identify or isolate any one individual from within the cohort
- Encryption and Hasing: Any personally identifiable information is encrypted or hashed. For example, we do not store direct email addresses. Any email address is irreversibly hashed before it is stored or matched in our system
2. Opt-Out and Data Control Options
You have the ability to manage cookies and other tracking technologies through your browser settings or by utilizing our website's cookie consent banner. You can update your preferences at any time by utilizing our provided consent widget.
You can also opt out of personal data collection and processing by utilizing a browser or a browser extension that supports Global Privacy Control (GPC). If we detect that you have opted out via GPC we will not store or utilize any non-essential data.
You can opt out of many third-party advertising industry participants by using the cookie management services provided by advertising industry websites. You can also indicate your personal data preferences at many 3rd parties all at the same time by visiting an industry opt-out page such as the Digital Advertising Alliance or Network Advertising Initiative.
For most mobile devices, you can opt out of third party use of information about your usage of mobile apps for interest-based advertising by using your device settings. You can find information about setting up your advertising preferences on mobile devices by visiting the Network Advertising Initiative.
2.a. Subject Rights
If you live in a location that provides additional Subject User Rights, you may have additional data control rights.
You have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that we update or correct inaccurate or incomplete data.
- Deletion: Request the deletion of your personal data under certain circumstances.
- Opt-Out: You can opt out of targeted advertising or the sale of your personal data.
- Portability: Request your data in a structured, machine-readable format.
- Restrict Processing: Limit how we process your personal data.
You can exercise one or more of these rights by visiting https://datafy.com/opt-out, by sending an email to [email protected] or by calling toll free 1-877-328-2391.
All of the 3rd party data we purchase is governed by the privacy policies of the data originators. If you have submitted a deletion or opt-out request via one of these 3rd parties, those requests are forwarded to us and we are committed to fulfilling the requests as governed by our contractual agreements with our 3rd party sources.
3. Legal Basis for Data Processing (for relevant jurisdictions)
Under the guidelines of CCPA and similar user data protection regulations, we process your data based on the following legal grounds:
- Consent: Where you have explicitly given your consent (e.g., by signing up for an account, subscribing to our services, or indicating consent via our website tools or by providing consent through one of the 3rd party data providers that we purchase data from).
- Contractual Necessity: To fulfill the contract we have with you (e.g., providing services, customer support).
- Legitimate Interests: To pursue our legitimate business interests and/or legitimate interests of our customers, such as improving our services, marketing, and analytics, provided these interests do not override your rights and freedoms.
- Legal Obligation: To comply with applicable laws and regulations.
4. Data Sharing
4.a. Personal Data
We will only use customer personal information for the purposes described in this privacy statement or as agreed to in a separate professional services agreement. We restrict access to nonpublic personal and client information about you or your company/organization to those employees or service providers who need the information to provide products or services to you. We practice least privilege access principles, meaning that all Company employees are given the least privilege access possible to maintain our services. If an employee doesn’t absolutely need access to a set of information to provide our service, then that access is not granted. We maintain physical, electronic and procedural safeguards that comply with applicable laws to guard your nonpublic information and we reinforce this privacy policy with our employees.
To summarize, we only share data under the following circumstances:
- Least Privilege Employees: Datafy employees that need access to this information to provide our services (billing contact information, account management, etc.)
- Service Providers: To facilitate our operations, such as communication, payment processing, etc.
- Legal Compliance: To comply with legal obligations, protect our rights, or respond to requests from government authorities.
- Business Transactions: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity.
4.b. Software Usage Data
As outlined previously in our Privacy Policy, we collect software usage information from registered users to identify opportunities to improve our services and provide tailored training opportunities. When a user registers for our software, they are assigned to an organization. For example, User 1 may register as the primary contact and administrator for Organization A. Subsequently, additional users, such as User 2, may be added to Organization A at the request of User 1. Usage information for User 2 and any other users added to Organization A will be accessible to administrators within the same organization. This information enables administrators to monitor user activity within their organization and identify opportunities for training or service improvements.
Importantly, software usage information is strictly confined to the registered organization. Under no circumstances will usage data from Organization A's users be shared with users from any other organization.
5. Data Storage and Processing Location
All data collected, stored and analyzed as part of providing our services is located within the United States of America. We do not transfer or process any data outside of the United States of America.
6. Children's Policy
Our services and our analytics tools are not intended for children under the age of 13. We do not knowingly collect personal information from children, nor do we purchase 3rd party data collected from children. If we learn that we have collected information from a child, we will take steps to delete that information.
7. Links to Other Websites
Our Site contains links to other websites whose privacy policy and practices may differ from the Company's. If you visit those pages, you are no longer subject to our privacy policy; rather, any information you provide to those parties will be governed by their privacy policies. Please practice discretion and read the privacy policy of any website you visit.
8. Security
When we collect data from you, we follow accepted and supported industry standards to protect the information given to us. Of course, no method of delivering or receiving data over the internet is completely secure, and we cannot guarantee its absolute security. However, this website and all of our data transmission and storage procedures are protected by an additional encryption/authentication layer between the HTTP and TCP, known as HTTPS. If you have questions regarding your account or your personal information, please contact us.
9. Notification of Privacy Statement Changes
We may update this privacy policy from time to time. If we make any material changes, we will notify you by email (sent to the email address specified in your account).
Contact Information
You can contact us about this privacy policy through one of the following means:
Datafy, LLC
5974 S Fashion Pointe Drive, Suite 200
Ogden, Utah 84403
Telephone: 877-328-2391
Email: [email protected]