Adbridge Inc. ("Adbridge," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our influencer marketing platform and related services (collectively, the "Service").
By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use the Service.
We collect information you voluntarily provide when using the Service:
When brands configure webhook integrations, we receive data from their e-commerce platforms to track campaign performance and conversions. This data may include:
Important: Beyond what a store platform includes with each order, we instruct brands NOT to send personal customer information (such as customer names, email addresses, shipping addresses, or payment details) through webhooks. Webhook payloads are stored as received, so any personal information a brand transmits is retained. When payloads are displayed in the platform, we mask values under common personal-data field names; access to unmasked payload values is restricted and logged. This masking reduces incidental exposure but does not remove data from storage, and the brand remains responsible for not sending it. See our Acceptable Use Policy for webhook data requirements.
When you access the Service, we automatically collect:
We use the information we collect for the following purposes:
We do not sell your personal information. We may share your information in the following circumstances:
We engage trusted third-party service providers to help operate the Service:
A current list of our sub-processors, including their purpose and location, is maintained in our Data Processing Addendum.
These providers are contractually obligated to protect your information and may only use it to provide services to us.
We may disclose your information when required by law or when we believe disclosure is necessary to:
In the event of a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and your choices regarding your information.
We may share your information in other ways if you have given us explicit consent to do so.
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents.
We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
For detailed information, please see our Data Retention Policy.
Depending on your location, you may have certain rights regarding your personal information. We honor these rights regardless of where you are located.
You have the right to access the personal information we hold about you and to receive a copy of it in a structured, commonly used format. Much of your data is visible directly in the Service. For a complete copy, contact us using the details in Section 7.7; we handle these requests manually rather than through a self-service export.
You have the right to request that we correct inaccurate or incomplete personal information. You can update most account information directly in your account settings.
You have the right to request deletion of your personal information, subject to certain exceptions (such as compliance with legal obligations or completing pending transactions). Note that deactivating your account in settings is reversible and does not by itself delete your data; to have personal data deleted, submit a request using the details in Section 7.7.
Some of the email we send is governed by your notification settings: updates about deals, payouts and activity in your workspace. Every one of those carries a "Manage email preferences" link, in both its formatted and plain-text versions, and an unsubscribe header your mail application may surface as a button. Both lead to the notification settings in your account, where you choose which of these emails to receive. For these emails we do not act on an unsubscribe from the message itself: the link takes you to your settings so you can see what you are turning off before it changes.
Invitations sent to someone without an account carry an Unsubscribe link and header that work without signing in. Either one stops all invitation emails from Adbridge to that address, from every brand, and we keep the address on a list so we can honor that choice.
The rest of what we send is transactional or security email: password resets, email verification, security alerts, and notices about your account, your billing or your payouts. That email carries no opt-out and cannot be switched off while your account is open, because it is how we reach you about your own account.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, use, and disclose; the right to request deletion; and the right to opt-out of the sale of personal information. We do not sell personal information.
If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR), including the right to restrict processing, object to processing, and lodge a complaint with a supervisory authority.
To exercise any of these rights, please contact us at legal@adbridge.com. We will acknowledge your request promptly and respond within the period required by applicable law, generally one month under the GDPR and 45 days under the CCPA, and will tell you if we need an extension that the law permits. We may need to verify your identity before processing your request.
Almost everything we set is a first-party cookie or browser storage of our own. The one exception is our payment provider, which sets its own third-party cookies on the single screen where you add a payment method. We do not use advertising cookies, and we do not currently use third-party analytics or tracking cookies.
Because these cookies are strictly necessary, functional, or set by a payment provider at the moment you ask to add a payment method, we do not present a cookie consent banner. If we later introduce analytics or other non-essential cookies, we will update this policy and provide a consent mechanism where required.
Alongside cookies we keep a small amount of data in your browser's own storage, which never reaches our servers. In local storage we remember interface preferences: a theme, a chosen view, a dismissed banner, your saved export columns. In session storage, which is discarded when you close the tab, we keep a partly completed sign-up form so a refresh does not lose it; your password is never written to storage.
Most web browsers allow you to control cookies and clear stored data through their settings. Because the cookies we set are essential or functional, blocking them will prevent you from signing in or will reset your preferences. Clearing them also removes a remembered two-factor device on the browser you clear. To withdraw every remembered device at once, including one you no longer have, turn two-factor authentication off or set it up again; we will then ask for your second factor the next time you sign in anywhere. Resetting your password does not end a remembered device, because that cookie skips only the second factor and never your password.
We do not currently respond to "Do Not Track" browser signals. We will update this policy if we adopt a different practice in the future.
Adbridge is based in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States or other countries where our service providers operate.
When we transfer personal information from the European Economic Area, United Kingdom, or Switzerland, we rely on appropriate transfer mechanisms such as Standard Contractual Clauses approved by the European Commission.
For more information on international transfers, see our Data Processing Addendum.
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us.
The Service may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make changes, we will:
Your continued use of the Service after any changes become effective constitutes your acceptance of the revised Privacy Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
For data protection inquiries from the European Union, you may also contact our designated representative (if applicable) or lodge a complaint with your local supervisory authority.
This Privacy Policy is effective as of September 2026 (Version 2026.5).