Privacy
Policy

Ogury Services Privacy Statement

Last Updated: 1 January 2021

Ogury Limited (“Ogury”, “we” or “us”) cares about its users’ privacy and is committed to clearly describing and disclosing its data practices.

Welcome to Ogury

Ogury is a mobile advertising technology company. We develop and maintain software, cookies, pixels and similar tracking technologies (“Ogury Technologies”) that mobile app publishers and developers ("Publishers") can integrate into their mobile apps ("Apps ") to help them and us to:

  • manage end-user transparency and privacy choices,
  • understand the interests and demographics of users visiting their Apps, and
  • display ads of advertisers and advertising agencies (together “Partner(s)”) within their Apps.

Specifically, we use Ogury Technologies to provide the following products for Publishers, Active Insights, Consent Manager and User Engagement – in this Privacy Statement, we call these solutions the “Ogury Services” and we call ads that we display on behalf of our Partners in connection with the Ogury Services, "Ogury Ads".

In connection with the Ogury Services, we process certain data ("User Data") of end-users accessing Apps on which Ogury Technologies are used, and from other third party partner sources.

This Ogury Services Privacy Statement explains what User Data we process in connection with our provision of the Ogury Services, how we process and share User Data and your rights to your User Data.

Contents

What User Data we process?

The User Data we process comprises the following categories of information:

"Usage Data"

Data about how Users use their mobiles, tablets or other handheld devices ("Devices") and the applications and systems installed on those Devices – this information includes:

Which websites/URLs Users have visited and information related to these URLs.

What applications are installed on the Users’ Device.

Users’ usage levels of the applications installed on the Users' Device.

"Technical Information"

Information relating to Users' Devices – this information includes:

The type of Device being used (including manufacturer, model, operating system, screen dimensions, OS version, Virtual Machine name and version and android standby bucket).

Details of the App in which the Ogury Technologies are incorporated (asset key, App name and version).

The version number of the Ogury Technologies used by the App.

Device language and country codes, local time and time-zone

Device connection type; GSM, 3G, 4G, Wi-Fi etc.).

"What User Data we process with Identifiers"

Ogury links the Usage Data and Technical Information it collects listed above to certain Device and User identifiers that it collects from Users and their Devices – this information includes:

The User's email address & other identifiers linked to the Device (Ogury collects this information only where a User’s Device allows it through the Publisher Apps in order to derive insights such as gender and then we anonymise the identifier after 3 days).

Unique Advertising ID, such as Google AAID or Apple IDFA.

IP Address.

Approximate geolocation.

All User Data we collect is associated with these identifiers.

"Cross Device Linking"

We also collect and infer data (either ourselves or from other companies) about the links between different Devices, such as a mobile phone and tablet, where we believe they are being used by single User. We do this using of cookies, Advertising IDs and other User Data we collect.

"Ad Engagement Information"

Information on how Users engage with Ogury Ads, including:

Content of the Ogury Ad (what the Ogury Ad relates to).

The format of each Ogury Ad (e.g., text, image, or video).

Where the Ogury Ad is displayed within an App or elsewhere.

The User's interaction with the Ogury Ad (for example, clicks and how long the Ogury Ad was displayed for).

User interaction with Partner sites after clicking on an Ogury Ad.

We combine Ad Engagement Information with Usage Data to determine what Users do when interacting with or after viewing each Ogury Ad – for example, to identify whether a User proceeded to buy the product or services that were displayed to them in an Ogury Ad.

"Crash Reporting Information"

Information relating to when an App has crashed – this information includes:

Date and time

Advertising ID

API key

App package name and version

Device model and OS version

Crash message

"Other information"

User Data includes any other information (including personal data) that may be submitted to us directly (for example, through a User submitted form or survey response).

Our policy towards children

In accordance with applicable European Union guidance on the practice, we do not knowingly collect User Data from children under the age of 16 or use any User Data to target adverts to children under the age of 16. Accordingly, we do not collect or use User Data to target Ogury Ads to children under the age of 16. If you believe we have inadvertently collected User Data from or about a child, please contact us using the details provided under the heading How to Contact Us below.

Sources of User Data

We collect User Data from the following sources:

Directly from Devices of Users visiting Apps and websites on which Ogury Technologies are used

Third parties such as Publishers, Partners or other audience data partners, media agencies and supply side platforms. We receive this User Data in different ways (including by means of third party tags and syncing methods) for the purposes described in the section How is User Data used below.

How is User Data used?

In simple terms – User Data is used by Ogury to provide the Ogury Services. More specifically, and dependent on your privacy choices, we use User Data for the following purposes:

To store and/or access information on a Device – We will store or access cookies, device identifiers, or other information for the purposes presented to you. (TCF P1)

To select basic Ogury Ads for you – To show Ogury Ads to you based on the content you’re viewing, the app you’re using, your approximate location, or your device type. (TCF P2)

To create a personalised ads profile – To build a profile about you and your interests to show you personalised Ogury Ads that are relevant to you. (TCF P3)

To select personalised Ogury Ads for you – To show you personalised Ogury Ads based on your personalised ads profile. (TCF P4)

To measure the performance of Ogury Ads – To measure the performance and effectiveness of Ogury Ads that you see or interact with. (TCF P7)

To apply market research to generate audience insights – To use market research to learn more about the audiences who visit apps and/or view Ogury Ads. (TCF P9)

To develop and improve products – To improve existing Ogury systems and Ogury Technologies and to develop new products. (TCF P10)

To ensure security, prevent fraud and debug – To monitor and prevent fraudulent activity, and ensure that systems and processes work properly and securely. (TCF SP1)

To technically deliver Ogury Ads – To allow you to see and interact with ads. (TCF SP2)

We may also perform the following functions to use User Data for the purposes listed above:

Match and combine offline data sources – We may combine User Data that we receive from offline data sources with your online User Data in support of one or more of the above purposes. (TCF F1)

Link different Devices – We may determine that different Devices belong to the same User or householder in support of one or more of the above purposes. (TCF F2)

Receive and use automatically-sent device characteristics for identification – We may distinguish your Device from other Devices based on information that it automatically sends, such as IP address or browser type. (TCF F3)

Ogury is a member of the Interactive Advertising Bureau's ("IAB") Transparency and Consent Framework v2 ("TCF"). The purposes for which Ogury processes User Data (and the functions that it carries out for such purposes) described above are aligned with the IAB's TCF policies here https://iabeurope.eu/iab-europe-transparency-consent-framework-policies/ ("TCF Policies". References above to "TCF P's", "TCF SP's" and "TCF F's" are references to the corresponding TCF Purposes, TCF Special Purposes and TCF Features as outlined in the TCF Policies.

Personalised ads referred to above are commonly referred to as “interest-based advertisements” or “behavioural advertising”. For more information on interest-based advertising, how it works, and information on choices about how Users can interact with it, Users can go to http://www.youronlinechoices.com/uk/. This guide is made available by the European Interactive Digital Advertising Alliance a cross-industry coalition of European-level associations with an interest in delivering a responsible European Self-Regulatory Programme for Online Behavioural Advertising, which benefits internet users with greater transparency, choice and control.

Our legal basis for processing User Data will depend on the User Data concerned, the specific context in which we process it and your privacy preferences that you communicate at the point at which the User Data is collected.

However, we normally process User Data for you on the basis of your consent or where the processing is in our (or a third party's) legitimate interests and are not overridden by your rights, such as your right to opt out.

If we process User Data in reliance on our legitimate interests, these interests will normally be to technically deliver Ogury Ads, to ensure security, prevent fraud and debug in respect of Ogury Ads, to develop and improve products.

When Users use a version of an App which contains Ogury Technologies, a page is displayed which notifies them that, subject to User preferences, certain User Data will be collected by Ogury Technologies unless and until the User subsequently changes their preferences. To ensure that Users appropriately informed about how their User Data is used, they are also provided with a link to this Privacy Statement.

As a member of the IAB's TCF, Ogury we may share User preferences and User Data with other IAB approved vendors in accordance with the IAB's TCF transparency and user choice requirements and specifications as set out in the TCF Policies. The full TCF vendor list is available here: https://iabeurope.eu/vendor-list-tcf-v2-0/.

Managing Your Choices

Users can:

Opt-out of receiving targeted Ogury Ads (and from having their User Data collected by Ogury) or,

Request the deletion of their User Data

by following the below link and entering their Google Advertising ID (AAID) or Apple advertising ID (IDFA) in the form: https://consent.ogury.co.

If Users opt-out of receiving targeted Ogury Ads or request deletion of User Data, Users may still see non-tailored ads.

In addition to the opt-out process described above, if their Device permits, Users may be able to manage their choices by changing the settings of their Device as follows:

Google Advertising ID (AAID)

You can change your Google Advertising ID settings by following these instructions: open Settings on your Device and go to Google > Ads > Opt out of Ads Personalisation. Users should be aware that clicking this opt-out button will disable interest-based ads from all advertising networks that use Google Advertising IDs, although Users will still see untargeted advertisements.

Apple iOS Advertising ID (IDFA)

You can change your Apple Advertising ID settings by following these instructions: open Settings on your device and go to Privacy > Advertising > Limit Ad Tracking. Users should be aware that clicking this opt-out button will disable personalised ads from all advertising networks that use Apple Advertising IDs, although Users will still see untargeted advertisements.

How Ogury shares User Data

We share the User Data with the following categories of recipients:

Publishers and Partners

We may share User Data with Publishers and Partners for the purposes described in the How is User Data Used section above, including for example, for measurement and reporting to aid in their understanding of how Users are using Apps and engaging with Ogury Ads.

Ogury Group Companies, Third Party Service Providers

We may share User Data with group companies and third-party service providers who provide data processing services to us, for example, payment processing, product fulfilment, technical infrastructure, engineering and other technical support, and email and customer support.

Adtech partners

We may share User Data with other ad tech partners (including for example, other vendors registered with the IAB's TCF) for the purposes described in the How is User Data Used section above (and where applicable, in accordance with the TCF Policies).

Actual or Potential Buyer

We may share User Data with an actual or potential buyer (and its agents and advisers) in connection with any actual or proposed merger, reorganisation, sale of some or all Ogury assets, or a financing or acquisition of all or a portion of our business by another company. In these circumstances, Ogury will instruct the parties with whom User Data is shared to process User Data in accordance with this Privacy Statement.

Competent Law Enforcement Body, Regulatory, Government Agency, Court or other Third Party

We may share User Data with any competent law enforcement body, regulatory, government agency, court or other third party, where we believe disclosure is necessary:

As a matter of applicable law or regulation;

To enable us to exercise, establish or defend our legal rights;

To protect your vital interests or those of any other person (including our employees and agents or Partners)

Your Data Protection rights

Users have the following data protection rights:

  • If you wish to access, correct, update or request deletion of your User Data, you can do so at any time by contacting us using the contact details provided under the How to Contact Us heading below.
  • You can also object to processing of your User Data where we are processing your personal data based on our legitimate interests, ask us to restrict processing of your User Data or request portability of your User Data. Again, you can exercise these rights by contacting us using the contact details provided under the How to Contact Us heading below.
  • Similarly, if we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. To opt-out of interest-based advertising based on your User Data, please see the heading Managing Your Choices above.
  • You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. (Contact details for data protection authorities in the European Economic Area, Switzerland and certain non-European countries (including the US and Canada) are available here.)

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

International Data Transfers

User Data may be transferred to, stored or processed in countries other than the country in which you are resident.

Users should be aware that these countries may have data protection and privacy laws that are different to the laws of your country. However, we take appropriate safeguards to ensure that your User Data remains protected in accordance with this Privacy Statement. These safeguards include transferring User Data from the EEA or UK:

  • to countries which have been deemed to provide an adequate level of protection by the European Commission (or UK authority, as appropriate); or
  • implementing the Standard Contractual Clauses adopted by the European Commission (or UK authority, as appropriate) for transfers of personal information outside of the EEA or UK.

If you have any questions about our international transfers of User Data, please contact us using the contact details provided in the How to Contact Us section below.

Data retention

We will delete or anonymise User Data from our live systems before the expiry of 13 months.

We will automatically delete User Data from our archive within 3 years.

General

Data security

We maintain appropriate organisational, technical and administrative security measures to protect User Data in accordance with applicable laws.

Customer support

If, while using one of our Apps, a User recognises a problem with an Ogury Ad, they can notify us of the problem by contacting us via email at privacy@ogury.co. We will ask for their email address and other contact information so that they can receive a response.

Third-party websites

If Users follow a link to any of third-party websites via an Ogury Ad, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. The links to third party websites or locations are for convenience only and do not signify our endorsement of such third parties or their products, content, or websites. Ogury does not control the privacy policies of third parties.

California Residents and the CCPA

The following section of our Services Privacy Statement sets out the rights of California residents under the California Consumer Privacy Act of 2018 (CCPA) and how Ogury will comply with the requirements of the CCPA.

Right to Know

You have the right to:

  1. know the categories of personal information Ogury has collected about you, the source of the information, and how and what information was used, disclosed, or sold, and
  2. request a copy of the specific personal information Ogury collected about you during the last 12 months.

In order to exercise your right to know you will need to provide us with your device ID (either Android Advertising ID (AAID) or Apple ID for Advertisers (IDFA)) which will allow us to locate your personal information. For help finding your AAID or IDFA please see the section Managing Your Choices above or contact us using one of the methods below.

We may ask you for additional information to verify that your request is legitimate, and you will be required to provide a signed declaration confirming you are the consumer to which the personal information relates.

You may exercise your right to know by

If you contact us via telephone you must also provide a contact email address for future correspondence and the provision of your personal information.

We will acknowledge receipt of your request within 10 days, informing you of how we will process your request. We will fulfil your request within 45 days of receipt. If we need more time to comply, we will inform you that your request will be delayed by a maximum of an additional 45 days.

Sale and Disclosure of your Personal Information

Ogury does not sell your personal information and has not done so in the last 12 months.

We treat you as having instructed us not to sell your personal information. If you wish to withdraw your consent to Ogury using your personal information and transferring it to any third parties completely you may do so here.

We disclose and have disclosed in the past 12 months, personal information to service providers or third parties that you have consented to us sharing it with. This personal information includes the following:

  • Online Identifiers such as AAID and IDFA;
  • Information regarding your interaction with Ogury Ads; and
  • Approximate Geolocation data.

Requests for Deletion

You have the right to have the Personal Information Ogury has collected regarding you be deleted.

In order to exercise your right to deletion of your personal information you will need to provide us with your device ID (either Android Advertising ID (AAID) or Apple ID for Advertisers (IDFA)). This will enable us to identify you and verify your request. For help finding your AAID or IDFA please see the section Managing Your Choices above or contact us using one of the methods below.

You may exercise your right to request deletion of your personal information by

If you submit your request online your data will be deleted automatically within 24 hours. If you submit your request by any other means we will acknowledge receipt of your request within 10 days, informing you of how we will process your request. We will fulfil your request within 45 days of receipt. If we need more time to comply, we will inform you that your request will be delayed by a maximum of an additional 45 days.

Right to Non-Discrimination

You have the right not to receive discriminatory treatment by Ogury for the exercise of the rights conferred on you by the CCPA.

Authorized Agent

You may nominate an authorized agent (registered with the California Secretary of State) to exercise your rights on your behalf. If you choose to do so we will need to obtain from you a signed declaration that you are the consumer to which the information relates and written proof that the authorized agent is entitled to act on your behalf. We will also need you to verify your identity directly with us.

CCPA Metrics

CCPA came into force on 1 January 2020. We will provide metrics regarding the exercise of rights conferred on consumers by CCPA in January 2021.

Categories of Personal Information Collected

Please see the section What User Data we process above.

How we collect your Personal Information

Please see the section Sources of User Data above.

What we used your personal information for

Please see the section How is User Data used above.

More information

If you have any questions about your rights under CCPA please contact us at privacy@ogury.co.

Updates to this Privacy Statement

We may update this Privacy Statement from time to time in response to changing legal, technical or business developments. When we update our Privacy Statement, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Statement changes if and where this is required by applicable data protection laws.

You can see when this Privacy Statement was last updated by checking the “last updated” date displayed at the top of this Privacy Statement.

How to Contact Us

If you have any questions or concerns regarding our data usage practices or this Privacy Statement, please send us a message at DPO@ogury.co. Our data protection officer can also be contacted at this e-mail address.

The data controller of any personal information contained within User Data is Ogury Limited, whose address is 3rd Floor, Classic House, 174-180 Old Street, London EC1V 9BP.

Our representative in the EU is Ogury France, a company registered in Paris, France, whose registered address is 6 rue de Berri, 75008 Paris, France.