Privacy Policy

1. Introduction

ADSpresso operates a third-party ad server platform for the delivery, management, and measurement of digital advertising campaigns. This Privacy Policy describes how we collect, use, store, and protect information when you:

• Visit our web properties, including the institutional website (adspresso.com.br) and the platform operational domains/subdomains under adxps.com;
• Use our campaign management dashboard;
• Interact with advertisements served through our platform on third-party websites (publishers).

This Privacy Policy applies to data processing carried out both on adspresso.com.br and on ad serving infrastructure domains/subdomains under adxps.com (for example: ads.adxps.com, shot.adxps.com, and sync.adxps.com).

We are committed to protecting personal data in compliance with Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018), the European Union's General Data Protection Regulation (GDPR), and other applicable legislation.

2. Data We Collect

2.1 Advertising Delivery Data

When an advertisement is served through our platform on third-party websites, we automatically collect the following technical data for measurement and performance reporting purposes:

• IP Address: used for approximate geolocation (country, state, and city) and fraud detection;
• User Identifier (User ID): an anonymous alphanumeric identifier generated by the browser, stored via cookies and/or localStorage, valid for 365 days;
• User-Agent: browser and device information (device type, operating system, browser);
• Page URL: the address of the page where the ad was displayed;
• Viewport data: screen width and height, device pixel ratio;
• Interaction events: impressions, clicks, viewability (ad visibility per IAB/MRC standards), and video events (start, progress, completion, pause, etc.).

2.2 Geolocation Data

We use the IP address to determine approximate geographic location (country, state, and city) through a third-party service (ip-api.com). We do not collect GPS or precise location data.

2.3 Fraud Detection Data

To protect against advertising fraud, we collect and analyze:

• Automated traffic (bot) indicators;
• Datacenter IP and proxy/VPN detection;
• Network information (ASN — Autonomous System Number);
• Behavioral interaction patterns (event frequency, page visibility).

2.4 Dashboard Data

For registered users of the management platform (dashboard), we collect:

• Name, email, and account information;
• Associated entity data (agency, advertiser, or publisher);
• Access logs and platform activity records.

2.5 Website Data

On this website, we use Google Analytics for traffic analysis, which may collect browsing cookies, session data, and device information as described in Google's Privacy Policy.

3. How We Use the Data

Collected data is used exclusively for the following purposes:

• Ad serving: delivering advertising creatives (display and video) on behalf of advertisers and agencies;
• Measurement and reporting: counting impressions, clicks, viewability, and video events for campaign performance reports;
• Geolocation: providing geographic performance reports (by country, state, and city);
• Brand safety: classifying pages and verifying content suitability for campaigns with brand safety restrictions;
• Fraud detection: identifying and filtering invalid traffic, bots, and fraudulent activities;
• Optimization: ensuring efficient ad delivery and stable platform operation;
• Account management: authentication, access control, and platform administration for registered users.

4. Legal Basis for Processing

The processing of personal data by ADSpresso is based on the following legal grounds (per LGPD, Art. 7 and GDPR, Art. 6):

• Legitimate interest: advertising performance measurement, fraud detection, and brand safety assurance, essential for the ad server's operation;
• Contract performance: fulfillment of contractual obligations with advertisers, agencies, and publishers;
• Consent: when applicable and required by the user's local legislation;
• Legal obligation: when necessary to meet regulatory requirements.

5. Cookies and Tracking Technologies

Our platform uses the following technologies:

5.1 Identification Cookie (adxps_uid)

• Purpose: anonymous browser identification for frequency measurement and reach reporting;
• Type: persistent cookie (first-party and third-party);
• Duration: 365 days;
• Scope: used exclusively for advertising measurement purposes.

5.2 localStorage

We use the browser's localStorage as a complementary mechanism to cookies for persisting the user identifier in browsers that restrict third-party cookies.

5.3 Domain Scope

The technologies described in this section may operate in contexts linked to the institutional website adspresso.com.br and/or to delivery and measurement domains under adxps.com, depending on the user's interaction with our services and ads.

5.4 Tracking Pixels (Beacons)

We use transparent pixels (1x1) embedded in ad creatives to record impression, click, and viewability events.

5.5 Google Analytics

This website uses Google Analytics (ID: G-KDX56K1TN2) for traffic analysis and browsing behavior.

6. Data Sharing

Collected data may be shared with:

• Clients (advertisers, agencies, and publishers): aggregated data and campaign performance reports, according to the contracted access level (RBAC);
• Geolocation provider (ip-api.com): IP addresses are sent to the geolocation service for geographic data enrichment;
• Google (Analytics): website browsing data;
• Legal authorities: when required by law, court order, or legal process.

We do not sell personal data to third parties. We do not share individual identification data with advertisers — only aggregated performance reports.

7. Storage and Security

• Database: event data is stored in a dedicated analytics database (TimescaleDB), isolated from the management database;
• Encryption: all communications are protected by TLS/HTTPS;
• Digital signature: tracking beacons use HMAC-SHA256 signatures to ensure data integrity;
• Cache: geolocation data is stored in temporary cache (Redis) with automatic 30-day expiration;
• Hosting: data is stored in cloud infrastructure with appropriate access controls;
• Restricted access: data access is controlled by a role-based permission system (RBAC) with three levels: Administrator, Operator, and Viewer.

8. Data Retention

• Advertising event data: retained as long as necessary to fulfill contractual obligations and campaign reporting, for a maximum period of 24 months after campaign completion;
• Aggregated data: may be retained indefinitely, as it does not contain personally identifiable information;
• Account data (dashboard): retained while the account is active, and for up to 6 months after closure;
• Cookies and identifiers: expire automatically after 365 days and can be removed at any time by the user.

9. Your Rights

In compliance with the LGPD and GDPR, you have the following rights regarding your personal data:

• Access: request information about what personal data is being processed;
• Correction: request correction of incomplete, inaccurate, or outdated data;
• Deletion: request deletion of unnecessary personal data or data processed in non-compliance;
• Portability: request the transfer of data to another provider;
• Objection: object to data processing when based on legitimate interest;
• Consent withdrawal: withdraw consent at any time, when applicable;
• Information: be informed about data sharing with third parties.

To exercise any of these rights, please contact us through the channels indicated in section 12.

10. Opt-Out of Advertising Tracking

You can opt out of being tracked by the ADSpresso platform in the following ways:

• Browser cookies: configure your browser to block third-party cookies or clear cookies regularly;
• localStorage: clear local storage data in your browser's privacy settings;
• Browser extensions: use ad blockers or privacy extensions;
• Automatic local deletion: open sync.adxps.com/forget.html to remove the identifier from this browser;
• Direct request: contact us if you prefer manual support.

11. Changes to this Policy

We reserve the right to update this Privacy Policy periodically. Significant changes will be communicated through a notice on our website. We recommend reviewing this page regularly.

12. Contact

For questions about this Privacy Policy, exercising your rights, or requests related to personal data, please contact: