This Privacy Policy describes how SF Ads Inc., operating as SF Ads Media ("SF Ads," "we," "our," or "us"), collects, uses, discloses, and protects information in the course of operating a programmatic out-of-home (DOOH) advertising network at sfadsmedia.com and the underlying ad-serving services.
We've written this to be readable. If anything below is unclear, email partnerships@sfadsmedia.com and we'll explain.
1 · Who we are
SF Ads Media is operated by SF Ads Inc., a Delaware-incorporated company headquartered at 7179 Stardust Court, Eastvale, CA 92880, United States. For privacy correspondence, the data controller of record is SF Ads Inc.
2 · Scope of this policy
This policy covers two categories of information processing:
- Visitors to sfadsmedia.com — anyone browsing this marketing site, contacting us via email, or otherwise interacting with our web presence.
- Programmatic ad-serving operations — the back-end services that route programmatic ad requests from our publishers' DOOH screens to demand partners. This processing is generally not directed at an identifiable person — DOOH inventory serves to public-space displays, not personal devices.
This policy does not cover the privacy practices of our publishers' venues, the demand partners we route to, or third-party websites we link to.
3 · What we collect
From visitors to sfadsmedia.com
- Server logs. When you load a page, our servers record standard HTTP request data: IP address, user-agent string, requested URL, timestamp, and HTTP response code. These logs are used for security, abuse detection, and aggregate traffic analytics; they are retained for up to 90 days.
-
Email correspondence. If you email us at
partnerships@sfadsmedia.com, your email address and the content of your message become part of our business records.
We do not set tracking cookies on sfadsmedia.com beyond what is strictly necessary for the site to function. There is no analytics script, no advertising pixel, and no third-party tracker on this domain.
From the programmatic ad-serving pipeline
- Per-impression context. Venue type, screen identifier, timestamp, content category, format dimensions, and IAB Tech Lab taxonomy fields, transmitted to demand partners in the OpenRTB bid request.
- Audience signals (anonymized, aggregate). For some inventory, footfall estimates and venue-type audience characteristics derived from third-party measurement providers per IAB OOH Measurement Guidelines.
- Verification beacons. Per-spot playback verification (impression, quartiles, completion) returned to demand partners' VAST tracking endpoints.
DOOH ad-serving does not typically involve persistent personal identifiers. We do not match impressions to individual people. Where audience data is used, it is processed at the venue or panel level, not at the individual level.
4 · How we use information
We use the information we collect to:
- Operate, maintain, and improve the programmatic ad-serving pipeline.
- Provide reporting to our publishers and demand partners.
- Communicate about our services, including responding to your inquiries.
- Detect, prevent, and respond to fraud, security incidents, and abuse.
- Comply with legal obligations and enforce our agreements.
We do not sell visitor information. We do not use sfadsmedia.com visitor information for advertising targeting on this or any other site.
5 · Third parties we work with
To operate the ad-serving pipeline, we transmit ad requests to demand-side
platforms (DSPs) and supply-side platforms (SSPs) that participate in
our exchange. These partners receive only the per-impression context
data described above; they do not receive sfadsmedia.com visitor data.
We require demand partners to comply with the IAB Tech Lab supply-chain
transparency standards (sellers.json, app-ads.txt,
OpenRTB SupplyChain object).
We use third-party infrastructure providers (cloud hosting, email delivery, error-monitoring) to operate our services. These providers process information on our behalf under contractual data-processing obligations and may not use it for their own purposes.
We do not name specific demand partners or infrastructure providers in this public policy; they are disclosed under NDA to our publishers and to any regulator on legitimate request.
6 · Cookies and similar technologies
See our separate Cookie Policy for the full list of cookies set on sfadsmedia.com. Short version: we do not set tracking, analytics, or advertising cookies on this site.
7 · Your rights
Under GDPR (European Economic Area, United Kingdom, Switzerland)
If you are in the EEA, UK, or Switzerland, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of your data, subject to legal-retention obligations.
- Object to processing or request restriction.
- Data portability where applicable.
- Withdraw consent (where consent is the lawful basis).
- Lodge a complaint with your supervisory authority.
To exercise any of these rights, email partnerships@sfadsmedia.com with the subject line "GDPR request." We will respond within 30 days.
Under CCPA/CPRA (California residents)
California residents have the right to know what personal information we collect, to delete it, to correct it, to opt out of any "sale" or "sharing" of personal information (we do not engage in either as defined by the CCPA/CPRA), and to non-discrimination for exercising these rights. To submit a request, email partnerships@sfadsmedia.com with the subject line "CCPA request."
IAB Transparency & Consent Framework
For ad-serving operations that touch EEA users, we honor the IAB Europe Transparency & Consent Framework (TCF v2.2) consent signals transmitted by our publishers' compliant CMPs. Where no valid consent signal is transmitted, demand partners are instructed to operate on non-personalized targeting only.
8 · International transfers
We are a U.S. company. Information we collect may be processed in the United States or in other countries where our service providers operate. Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.
9 · Data retention
- Web server logs: up to 90 days.
- Email correspondence: retained for the duration of the business relationship and up to 7 years thereafter for tax, accounting, and audit-trail purposes.
- Programmatic impression records: aggregated within 30 days; raw per-impression logs retained for up to 13 months for billing and dispute resolution, then deleted.
10 · Security
We use industry-standard technical and organizational measures to protect the information we process — encryption in transit (TLS 1.2+), encryption at rest for all stored data, principle-of-least-privilege access controls, multi-factor authentication for administrative access, and continuous security monitoring of our infrastructure. No method of transmission over the internet or storage is 100% secure; we cannot guarantee absolute security.
11 · Children
Our services are directed at businesses (DOOH publishers and demand partners), not children. We do not knowingly collect personal information from anyone under the age of 16. If you believe we have collected information from a child, please contact us and we will delete it.
12 · Changes to this policy
We may update this policy from time to time. Material changes will be announced via a notice on this page at least 30 days before they take effect. The "Last updated" date at the top of this page indicates the most recent revision.
13 · Contact
For any privacy-related inquiry — including data-subject requests, security disclosures, or general questions about this policy — please email partnerships@sfadsmedia.com with a clear subject line. We aim to respond within one business day for general inquiries and within the timeframes required by law for formal rights requests.
Postal:
SF Ads Inc.
Attn: Privacy
7179 Stardust Court
Eastvale, CA 92880
United States