Home/Privacy and Terms/

Privacy Policy for End User

The Pangle End User Data Privacy Policy applies to personal data that we process through Pangle (as defined below), where you interact with Pangle through mobile applications and/or websites that have integrated with Pangle's advertising platform either directly or via an advertising exchange, each a “Partner”. The Pangle End User Data Privacy Policy will apply to the processing of your personal data in your capacity as an end user.

Last updated: 15 December 2020

I. Who we are and who this applies to

I.1 We are Bytedance Pte. Ltd., a company incorporated in Singapore whose registered office is at 1 Raffles Quay, #26-10 ,Singapore 048583 (" we", "our" or " us"). This Pangle End User Data Privacy Policy ("Privacy Policy") explains who we are, how we collect, process, store, use, transfer, share, and disclose ("process") personal data about you, and how you can exercise your data privacy rights.

I.2 It is the Partner’s responsibility to inform you of Pangle’s use of your data (i.e. by directing you to this policy) and to acquire all consent necessary for Pangle’s use of your data. We will process your personal data on the basis that your personal data is required for us to provide our services to the Partner under the relevant contract between us and the Partner.

I.3 If you have any questions or concerns about our processing of your personal data, please contact us using the contact details provided at the bottom of this Privacy Policy.

II. What is Pangle?

II.1 Pangle is a mobile advertising platform, including support systems and services operated by Bytedance and accessible via www.pangleglobal.com ("Pangle"). Pangle enables advertisers to serve advertisements on third party mobile applications and/or websites owned or operated by a Partner or to which a Partner has the right to serve advertising (each a“Partner Site”). We do this by processing certain information collected from those Partner Sites, as described in this Privacy Policy.

III. What personal data we process

III.1 The types of personal data that we process depend on the circumstances of collection and on the nature of the services requested or transaction undertaken for our Partners.

III.2 When you interact with a Partner Site, we process certain information about you and your device. This information may be collected automatically from your device using our software code (referred to as a "software development kit", or "SDK"), or shared with us by other advertising platforms that use Pangle. We also use cookies (text files inserted in your browser when you visit our partners' or customers' mobile applications and websites) and other tracking technologies available on your device.

III.3 The information that we process about you may include some or all of the following categories:

a. Information obtained automatically from your device

i. Identifiers: We may process device-specific identifiers such as your IP address, mobile advertising identifier (such as the "Google Advertising ID" on Android phones or the "ID for Advertisers" on iOS devices), or a Pangle-specific identifier which our SDK has assigned to your device. A mobile advertising identifier is a resettable persistent identifier generated by Android or iOS that allows online advertising companies, like Pangle, to recognise your device across third party apps. In addition, we may also process other information about your device, such as the device model, operating system (e.g. iOS or Android), system language and region, time zone, network type, ROM version, screen resolution, mobile country code and mobile network code.

ii. Geolocation data: We may infer your approximate geo-location from your device's IP address. We may also process your precise latitude and longitude using your phone's GPS data, where we have your consent or are otherwise permitted to do so in accordance with applicable data protection laws.

iii. Internet activity: We may process information about your app and website usage, including the name and version of the app or website that has integrated Pangle. We may also process information about your interactions with any advertisements we deliver (e.g. information about the advertisements served, viewed, or clicked on, such as the type of ad, where and when the ad was served, whether you clicked on it, and whether you visited the advertiser's website or downloaded the advertiser's app, as well as any preferences you may have expressed in respect of that advertisement).

b. Information obtained from other sources

i. From time to time, we may receive information about you from other sources. For example, we may receive information about you from third parties, such as advertising exchanges that share data with us for the purposes of serving advertising, if third parties are legally permitted to disclose this information to us.

ii. The information we receive from these sources may include identifiers (such as your IP address or mobile advertising identifier), information about your Internet activity (such as information about your interaction with third party websites, applications and advertisements) and inferences relating to your preferences and characteristics (e.g. your approximate age and gender).

IV.How we use personal data

IV.1 We use personal data to serve you with personalised advertisements and understand the audiences who see the advertisements we serve. Specifically, we process personal data for the following purposes:

a. To serve you advertisements: To enable third party advertisers to bid on and fill advertising space on Partner Apps with their advertising. We use your mobile advertising identifier, together with the other device identifiers described above, to serve you with personalised advertising and for related purposes such as frequency capping (limiting the number of times you see the same ad), attribution (making sure we get paid by advertisers for the advertisements we deliver), and fraud detection (detecting malicious software, or "bots", that generate false interactions with advertisements to drive fraudulent advertising revenues). We also use your device data to ensure we display advertisements that display properly on your device.

b. To personalise the advertisements we show you: To infer your interests from the types of apps you use and the adverts you interact with, as well as to infer certain demographic information about you (such as your age and gender) so we can show you advertisements that are more relevant to you;

c. To serve you advertisements on the basis of your location: To serve you advertisements that are relevant for your region and displayed in the relevant local language, as well as to better understand the audiences who see our advertisements, based on your current or prior location, including through location-based targeting segments created by us or by our third party advertisers.

d. For auditing and reporting: To verify accurate delivery of, and count the number of end users who see and interact with, advertisements we serve on behalf of our advertisers and what ad campaigns led to further consumer activity (such as a purchase, app install or visit) (sometimes called "attribution"). We use this information to report to our advertisers about the advertisements users have seen and interacted with, so that we and our publishers are paid appropriately for the advertisements we display.

e. To provide campaign analytics to advertisers: To provide advertisers information about how well their campaigns perform, whether relative to their prior campaigns, or bench-marked against third party campaigns or other data.

f. For cross-device targeting: To "link" or "resolve" the same user across their various devices (such as across mobile devices, browsers and tablets). For instance, we (or a third party partner we work with) may help an advertiser "find" a consumer they have engaged with previously on a mobile device when that consumer is browsing on their tablet, in order to target ads to the user across those devices.

g. To detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and prosecute those responsible for such activities: For example, to identify invalid clicks (or advertising queries) and protect us and our advertisers from fraudulent behaviour.

h. To verify or maintain the quality of Pangle and improve, upgrade or enhance Pangle: For example, (i) for audit, research, and analysis of the information in order to maintain, improve, upgrade or enhance our advertising services, and to ensure that our technologies function properly; and (ii) other internal operations, such as debugging, support, and security.

i. For compliance with legal obligations: To comply with legal obligations that apply to us, for example to respond to law enforcement requests.

j. For archiving purposes in the public interest, scientific or historical research purposes.

k. For any other purpose to which you consent: To use your personal data for any other purpose to which you have provided consent.

IV.2 In general, we will process personal data only for the purposes described in this Privacy Policy or for purposes that are explained to you at the time your personal data is collected. However, we may also use your personal data for other purposes that are not incompatible with the purposes we have disclosed to you if and where this is permitted by applicable data protection laws.

V. Who we share your personal data with

V.1 We may share your personal data for the purposes described above in this Privacy Policy with the following categories of recipients:

a. Our advertising partners: We share personal data with our third party advertising partners in connection with their bidding on the opportunity to display advertisements on Partner Apps on behalf of the advertisers they represent.

b. Our advertisers: We also share limited personal data in aggregated form with our advertising partners, through reports about the kinds of people seeing their advertisements and how their advertisements are performing (for example, that an ad was seen by 100 men between the ages of 25 and 34 who live in Singapore and like football). Aggregated data cannot by itself can be used to contact you or identify your name. We also report to our advertising partners which Pangle advertisements resulted in you making a purchase or taking an action with an advertiser.

c. Partners: We share aggregated data with Partners through reports about the types of advertisements served to their apps, in order that they can measure the effectiveness and value of our services. As these reports are aggregated they do not reveal any information that directly identifies you.

d. Our affiliates and third party services providers: We share personal data with our affiliates and other companies who help us operate our business, perform functions on our behalf or provide services to us, including data processing services to us (for example, to support, provide functionality on, or help to enhance the accuracy, safety and security of our services, or to provide analytics or attribution services to us, as well as service providers who provide technical, customer, hosting, data hygiene and enhancement or operational support), as well as other professional advisors.

e. Our analytics and attribution partners: We share personal data with our analytics and attribution partners who help us monitor the success of our advertising campaigns (such as how many end users saw and clicked on an advertisement) and provide reporting to our advertisers.

f. Any competent law enforcement body, regulatory, government agency, court or other third party: We may share personal data with these parties where we believe disclosure is necessary (i) as a matter of applicable law or regulation; (ii) to exercise, establish or defend our legal rights; (iii) to detect and protect against fraud or other security or technical vulnerabilities; (iv) to respond to an emergency; or (v) to otherwise protect your vital interests or those of any other person where permitted by applicable law.

g. Any other person: We will only share personal data with any other person with your consent to the disclosure or as otherwise permitted under applicable data protection law.

VI. How we keep your personal data secure

VI.1 We use reasonable technical and organisational measures to protect the personal data that we process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal data.

VII. International data transfers

VII.1 Your personal data may be transferred to, and processed in, countries other than the country in which you are located or in which your personal data was collected. However, we will not transfer or permit any of your personal data to be transferred outside of such country unless we have taken measures necessary to ensure the transfer is in compliance with applicable laws, and in any case to a recipient that has comparable privacy protections in place.

VII.2 Specifically, our servers are located in the United States of America and Singapore, and our group companies and third party service providers and partners operate around the world. This means that we may process your personal data in any of these countries in accordance with this Privacy Policy.

VIII. Data retention

VIII.1 We retain the personal data we process where we have an ongoing legitimate business need to do so (for example, to provide you with personalised advertisements or to comply with applicable legal, tax or accounting requirements) or as necessary to comply with the law.

VIII.2 When we have no ongoing legitimate business or legal need to process your personal data, we will either delete or anonymise it or, if this is not possible (for example, because your personal data has been stored in backup archives or the law requires otherwise), then we will securely store your personal data and isolate it from any further processing until deletion is possible.

IX. Your right to control personalised advertisements

IX.1 Our Partners use our SDKs and similar tracking technology to process information about you and your device which is returned to us for the purpose of serving personalised advertisements. You can use your device settings to turn off personalised advertisements as follows:

a. On iOS, you can turn off personalised advertisements by following the instructions specified https://support.apple.com/en-us/HT202074

b. On Android, you can turn off personalised advertisements by following the instructions specified https://support.google.com/ads/answer/2662922?hl=en

IX.2 If we receive a signal that you have turned off personalised advertisements, then the next time you use an application or website that has integrated with Pangle we will respect your preferences, and will no longer process personal data from that device to serve personalised advertisements. However, please note that we may still serve you with non-personalised advertisements based on the nature and type of application or website you are using (e.g. sports advertisements in a sports app).

X. Your data protection rights

X.1 Pangle supports the exercise of your data protection rights which may be available in your country in accordance with applicable data protection laws. Specifically:

a. You can request to access, correct, update or delete your personal data by contacting us using the contact details provided under the "How to contact us" section below, and we will fulfil your request if these rights are available under applicable data protection laws in your country.

b. You can opt-out of targeted advertising by following the instructions described above under the "Your right to control personalised advertisements" section above.

X.2 We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. We do not discriminate against any individual based on the exercise of their data protection rights. However, we may request for you to further provide us with your personal information for the purposes of verifying your identity.

XI. Children

XI.1 Where applicable laws prohibit us from processing personal data about children who are under specified age thresholds, or require us to obtain parental consent before we may process personal data about such children, then we will not knowingly process personal data about children unless we are in compliance with those laws.

XI.2 If you believe we may be processing personal data relating to children contrary to applicable law, please contact us using the contact details provided under the "How to contact us" section below and we will investigate and, where necessary, take appropriate steps to cease any such processing and delete any such personal data.

XII. Updates to this Privacy Policy

XII.1 This Privacy Policy is effective as of the date set out at the top of this Privacy Policy.

XII.2 We may update this Privacy Policy from time to time, including in response to changing legal, technical or business developments, in accordance with applicable law.

XII.3 You can see when this Privacy Policy was last updated by checking the "last updated" date displayed at the top of this Privacy Policy.

XIII. How to contact us

XIII.1 If you have any questions or concerns about our use of your personal data, please contact us at : privacy@pangleglobal.com.

XIV. Language

XIV.1 This Privacy Policy is made in English and translations into other languages may be provided. In the event of any conflict between the English version and any translations, the English version will prevail to the extent permitted by the prevailing laws.

Jurisdiction-specific terms

For Account Holders and Site Visitors located in the European Union, United Kingdom or Switzerland:

The following paragraph shall replace section X. of this Privacy Policy:

Your data protection rights

X.1 Pangle supports the exercise of your data protection rights which may be available in your country in accordance with applicable data protection laws. Specifically:

a. Opt-out of targeted advertising: You can opt out of targeted advertising by following the instructions described above under the "Your right to control personalised advertisements" section above.

b. Access Your Data: You can ask us, free of charge, to confirm we process your personal data and for a copy of your personal data.

c. Delete Your Data: You can ask us to delete all or some of your personal data.

d. Change or Correct Data: You can ask us to change or fix your data.

e. Portability: You can ask for a copy of personal data you provided in a machine-readable for

f. Object or Restrict Use of Data and Withdraw Consent: You can ask us to stop using some or all of your data, e.g. if we have no legal right to keep using it. You can ask us to stop processing your personal data for direct marketing purposes; withdraw your consent or ask us to stop making any automatic individual decisions, including profiling. If you object to such processing, we ask you to share the reason for your objection in order for us to examine the processing of your personal data and to balance our legitimate interest in processing and your objection to this processing.

g. Complain: The right to lodge complaints before the competent data protection regulator.

X.2 For further information, contact us using the contact details provided under the "How to contact us" section below. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. If you do not provide your personal data, we will not be able to provide some or all of our services to you. If you have made a specific request to us, and do not provide personal data that we can use to identify you (such as a device identifier) we will be unable to fulfil your request. The following paragraph shall be added as section XIV of this Privacy Policy:

XIV. Legal basis

XIV.1 In the European Economic Area and the United Kingdom we must have a legal basis to process your personal data. For users located in these regions, we will only serve targeted adverts to you with your consent. The legal basis for other processing of your personal data will depend on the personal data concerned and the specific context in which we process it. If we process your personal data in our legitimate interests, such as for security and product improvement purposes, this interest will normally be to provide an effective, secure and dynamic platform.

XIV.2 In some cases, we process your data to comply with our legal obligations, with your consent or where it is in the vital interests of you or another person.

XIV.3 If you have questions about or need further information concerning the legal basis on which we collect and use your personal data, please contact us using the contact details provided under the “How to contact us” heading below.