Privacy Policy
Effective 2026
Attrivo, Inc. ("Attrivo," "we," "our," or "us") is committed to protecting the privacy and security of personal data. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you access or use our mobile attribution, analytics, and marketing measurement platform (collectively, the "Services"). Please read this policy carefully. By using our Services, you acknowledge the practices described herein.
1. Scope of This Policy
This Privacy Policy applies to: (a) visitors and users of our website and platform interfaces; (b) clients and their authorized users who access the Services pursuant to a written agreement; and (c) individuals whose data is processed through the Services in connection with our clients' advertising and marketing campaigns. This policy does not apply to third-party websites, platforms, or services that may be linked from our platform.
2. Who We Are
Attrivo, Inc. is a data-driven marketing analytics company that enables businesses to measure, analyze, and optimize their digital advertising campaigns. Depending on the context, Attrivo may act as a data controller (when collecting data from website or platform visitors), or as a data processor (when processing personal data on behalf of clients under a services agreement).
3. Information We Collect
3.1 Information You Provide Directly
We collect information you provide when you register for an account, request a demo, contact our support team, or communicate with us. This may include:
- Full name and contact information (email, phone number, job title)
- Company name, billing address, and payment details
- Login credentials (username and password)
- Communications and correspondence sent to us
3.2 Information Collected Automatically
When you access our platform or website, we may automatically collect certain technical information, including:
- IP address and approximate geolocation
- Browser type, operating system, and device identifiers
- Pages visited, links clicked, and session duration
- Referral URLs and traffic source information
- Cookies, pixel tags, and similar tracking technologies
3.3 Information Collected Through the Services
In the course of providing attribution and analytics services to our clients, we may process:
- Mobile advertising IDs (e.g., IDFA, GAID) and device fingerprinting signals
- App event data, in-app behavior, and conversion signals
- Campaign and impression data from advertising networks
- User-level analytics data submitted by client integrations
- Hashed or anonymized user identifiers
3.4 Information from Third Parties
We may receive information from advertising networks, data partners, and publicly available sources to supplement or validate data we collect through the Services. Any data received from third parties is governed by those parties' privacy practices and the terms of our data agreements.
4. How We Use Information
We use the information we collect for the following purposes:
- Providing, operating, and improving our Services and platform features
- Attribution and performance measurement on behalf of clients
- Fraud detection, bot filtering, and security monitoring
- Account management, billing, and customer support
- Sending product updates, security notices, and service communications
- Conducting analytics to understand platform usage and improve user experience
- Complying with legal obligations and enforcing our agreements
- Responding to lawful requests from public authorities
We do not sell personal data to third parties for their independent marketing purposes.
5. Legal Bases for Processing (EEA/UK)
If you are located in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases when processing personal data:
- Contract Performance: Processing necessary to fulfill our contractual obligations to you or your organization.
- Legitimate Interests: Processing for fraud prevention, security, product improvement, and internal analytics, where our interests are not overridden by your fundamental rights.
- Legal Obligation: Processing required to comply with applicable laws and regulations.
- Consent: Where you have provided explicit consent, such as for marketing communications or certain cookie usage.
6. Cookies and Tracking Technologies
We use cookies, web beacons, pixels, and similar technologies on our website and platform. These technologies help us:
- Keep you logged in and maintain session state
- Understand how visitors navigate and interact with our platform
- Measure the effectiveness of marketing campaigns
- Deliver relevant content and personalize your experience
You may configure your browser settings to refuse or delete cookies. Note that disabling certain cookies may limit access to features of the platform. For our clients' end users, cookie and tracking behavior is governed by the client's own consent mechanisms and privacy disclosures.
7. How We Share Information
We share data only as described in this policy:
7.1 With Clients
We provide clients with analytics, reports, and attribution data related to their own campaigns and users. This data is processed solely on behalf of the client pursuant to a data processing agreement.
7.2 With Service Providers
We engage third-party vendors and subprocessors to help us deliver the Services, including cloud infrastructure, security monitoring, billing, and customer support tools. These providers access personal data only to the extent necessary and are contractually bound to maintain confidentiality and appropriate security standards.
7.3 For Legal Compliance and Safety
We may disclose information if we believe in good faith that disclosure is required to: (a) comply with applicable law or legal process; (b) respond to a lawful request from governmental authorities; (c) protect the rights, property, or safety of Attrivo, our clients, or the public; or (d) detect or prevent fraud or security threats.
7.4 Business Transfers
In connection with a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of the transaction. We will notify affected parties as required by law prior to any such transfer.
8. International Data Transfers
Attrivo operates globally and your information may be transferred to, stored, and processed in countries outside your country of residence, including countries that may have different data protection laws than your own. When we transfer personal data from the EEA, UK, or Switzerland to countries not deemed adequate by applicable data protection authorities, we rely on approved transfer mechanisms such as Standard Contractual Clauses (SCCs) or Binding Corporate Rules (BCRs).
9. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, and as required or permitted by applicable law. The specific retention period depends on the type of data, the nature of our relationship with you, and applicable legal requirements. When data is no longer required, we securely delete or anonymize it.
10. Data Security
We implement and maintain appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure. These measures include:
- Encryption of data in transit and at rest
- Access controls and role-based permissions
- Regular security audits and vulnerability assessments
- Incident response procedures
While we strive to use commercially reasonable means to protect your information, no security system is impenetrable and we cannot guarantee absolute security.
11. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right of access: request a copy of personal data we hold about you
- Right to rectification: request correction of inaccurate data
- Right to erasure: request deletion of your data under certain circumstances
- Right to restriction: request that we limit how we process your data
- Right to data portability: request transfer of your data in a structured format
- Right to object: object to certain types of processing, including direct marketing
- Right to withdraw consent: where processing is based on consent, withdraw it at any time
To exercise any of the above rights, please contact us at info@attrivo.in. We will respond to all legitimate requests within the timeframes required by applicable law.
12. Children's Privacy
Our Services are not directed at children under the age of 16, and we do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete such information. If you believe a child has submitted personal data to us, please contact us immediately at info@attrivo.in.
13. Third-Party Links
Our platform or website may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites you visit.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will post the revised policy with an updated effective date. For material changes, we will provide additional notice, such as via email or in-platform notification. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the revised policy.
15. Contact Us
For questions, concerns, or requests related to this Privacy Policy, please reach out to: