Last updated: December 2, 2025

StatSocial, Inc (“we,” “our,” “StatSocial”) provides data licensing and marketing services (the “Services”) designed to assist our clients, who are generally advertisers and marketers and the providers that assist them (“Clients”) to better market to consumers. Our solutions and services (our “Services”), which are more fully described on this website (“Website” or “Websites”), are used for online and offline marketing purposes. When we say “you” we are referring to consumers, including the person reading this Privacy Policy.

We take consumer privacy seriously. This Privacy Policy (“Privacy Policy”) describes how we use and manage information used in and licensed through Services, and how consumers can control how information about them is used and shared.

We also describe in Section 6 the information we collect through our corporate website (the website this Privacy Policy is on), which is directed to Clients, prospective Clients and others.

When we handle information on behalf of Clients related to their own actual or prospective customers (such as to provide analysis of this information to customers), we act only as a service provider and do not combine their information with the information we collect and maintain for the purposes described below. We address these practices separately in Section 7 of this Privacy Policy.

1. Information That We Collect

In order to provide our Services, we obtain information about you through a variety of means and sources. Much of the information we collect is publicly available, which means it is not “personal information” under state consumer privacy laws. We also obtain information from third party sources, including data aggregators (which may include data “brokers.”). We likewise may combine any of the information that we collect or receive in order to perform our Services. The categories of our sources include data compilers and resellers, publicly sourced as well as publicly available information (such as the US Census Bureau and US Postal Service), website and mobile application operators.

Categories of Information we collect, maintain, and/or receive in the course of providing our services:

a. Personal and online identifiers: e.g., Email addresses (including in “hashed” or obfuscated form), telephone numbers, name, postal address, social media identifiers or handles. We may work with platform partners who use online identifiers, such as mobile ad identifiers or cookie IDs, and we may on occasion collect or receive such identifiers, whether to help us work with these platform partners, or to perform our own advertising, for our corporate services.

b. Characteristics of protected classifications under California or federal law. E.g., sex/gender, race, ethnicity, age or religion (which may be inferred). This is “sensitive personal information” under state consumer privacy laws.

c. Professional, alumni or employment-related information. E.g., job title, employer information, schools graduated from.

d. Inferenced Data. E.g. Inferences drawn for the sources above about a consumer’s lifestyle, demographic or other “Interest”-based traits, that we license from other data compilers (in addition to inferences we create and/or describe above).

e. Inferenced Data. Inferences drawn for the sources above about a consumer’s lifestyle, demographic or other “Interest”-based traits, that we license from other data compilers (in addition to inferences we create and/or describe above).

f. We also collect information from our own websites, and in the course of operating our corporate affairs, including communicating with our own clients, and marketing and advertising to our actual and prospective clients. We describe this information in greater detail in Section 6.

Except as otherwise indicated in this Privacy Policy, we may combine, link or aggregate the various information we collect or obtain, which we refer to in this Privacy Policy collectively as the “Information.”

2. Our Services and Our Business Purposes for Collecting and Using Personal Information
We use personal information for two main purposes, in offering our Services:

a. First, we collect information from publicly available websites, such as social media identifiers. In particular, we collect such information as it pertains to followers of particular social media accounts, products or influencers. We then analyze that information, and on occasion merge it with other personal information about the individuals associated with those identifiers. We provide our clients with analysis about those individuals, generally in aggregated form. For instance, we might inform a manufacturer of “widgets” that its newest widget product seems to be generating interest among young males, or older females.

b. Second, we use this same information to create digital audiences, and to enhance those audiences with information about other individuals that may have a likelihood to share similar interests, such as interest in the above “widget” or an online widget “influencer” such as a blogger.

c. We then may use information based on the same datasets to measure the performance of digital audiences, digital campaigns, particular influencer impacts, and perform similar analysis.

d. We may provide our Services in a different manner, or using different types of datasets, depending on the particular jurisdiction and its particular privacy laws and requirements. For instance, in certain jurisdictions, we may not offer digital audiences, may aggregate our audiences in a different manner, may truncate retention periods or introduce deidentification or anonymization mechanisms into our datasets.

e. As noted above (and in Section 6) we also collect information from our own websites, and in the course of operating our corporate affairs, including communicating with our own clients, and marketing and advertising to our actual and prospective clients.

3. How We Disclose Information to Third Parties
In the course of providing our Services as described in Section 2, we typically disclose certain categories of personal information collected to third parties in the form of licensing agreements, including to our Clients and their own service providers.

We also may disclose any of the personal information we collect and maintain as follows:

Disclosure for Legal Purposes: We also may disclose personal information to third parties in order to: (a) comply with legal process (civil or criminal) or a government investigation (e.g. a subpoena or court order); (b) enforce our Terms of Service, this Privacy Policy, or our contracts (or our rights under the law); (c) and/or to protect the rights, property or personal safety of us, our platform, our clients or any other person. We likewise may provide information to other companies and service providers for fraud protection, security and similar purposes.

Disclosure In Event of a Corporate Transaction: We may also disclose personal information in the event of a major corporate transaction, including for example a merger, investment, acquisition, reorganization, consolidation, bankruptcy, liquidation, sale of some or all of our assets or for purposes of due diligence connected with any such transaction.

Disclosure to Service Providers: We disclose any personal information we collect to our service providers, which may include (for instance) providers involved in tech or customer support, operations, web or data hosting, billing, accounting, security, marketing, data management, validation, enhancement or hygiene, or otherwise assisting us to provide, develop, maintain and improve our services.

Aggregate and Deidentified Information. We may aggregate and/or de-identify any information collected so that such information can no longer be reasonably linked to you, your household, or your device. We may use Aggregate/De-Identified Information for any purpose, including without limitation for research and marketing purposes, and may also disclose such data to any third parties, including advertisers, promotional partners, and sponsors, in our discretion.

4. Cookies and Similar Technologies

a. Cookies and How We Use Them

Our website (https://www.statsocial.com) uses cookies to distinguish you from other users of our Website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our Website. We use these technologies on our Website, for instance, and our partners may use these technologies in their own marketing services.

Separately, we may work with third parties to provide or enhance our Services (e.g. for purposes of tailoring ads, or placing browser cookies), or to offer marketers ways to access or use our Information, often in de-identified form. These partners may set and access their own cookies, pixel tags and similar technologies on your device, which may have cookies with varying expiration periods. Those partners may, likewise, collect various types of information about your browser, device, or browsing activities through use of these cookies.

Cookies, in turn, are small data files that contain a string of characters, such as a unique browser identifier. Cookies are stored on your computer or other device and act as tags that identify your device. Our (or other companies’) servers send your device a cookie when you visit a website. A pixel tag (also commonly known as a web beacon or clear GIF) is an invisible 1 x 1 pixel that is placed on certain web pages. When you access web pages (such as the website of a marketer), pixel tags may permit our partners (or sometimes, us) to read the cookies that a respective company or server has deployed. Pixel tags are used in combination with cookies to track the activity on a site by a particular device.

Through such technologies, we gather information about you, such as your browser type, operating system, IP address, mobile device identification number, the sites visited before and after our Site, and about your interactions with our services, such as the time and date when you viewed a page, which advertisements you have clicked on, and whether you filled out an online form.

We use the following cookies:

• “Essential” (Strictly necessary) cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
• Analytical or performance cookies. These allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
• Functionality cookies. These are used to recognize you when you return to our website. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
• Targeting or Advertisement cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose or allow the third party to collect this information as disclosed below.
Not all our cookies collect personal identifiable information: We use information gathered through cookies to improve the way our Sites work, for example by employing third-party analytics tools which aggregate anonymous user information to help us better design our sites and enhance the functionality of our services for example, by remembering preferences or other choices that you make – such as user names, language preferences, and the like – we can better understand how you use our site(s) over time. In short, these tools allow us to provide you with a better, more relevant online experience. We may also work with third-party advertising companies to suggest advertisements from the services or on third-party sites based on your preferences.

You can find more information about the individual cookies we use and are not “strictly necessary” for the operation of the website, and process personally identifiable information and the purposes for which we use them in the table below. Please note that the mentioned third parties use cookies, over which we have no control. These named third parties may include, for example, advertising networks and providers of external services like web traffic analysis services. These third-party cookies are likely to be analytical cookies or performance cookies or targeting/ advertisement cookies:

b. Disabling Cookies

You can manage or disable cookies at any time by adjusting your browser settings or by using our cookie management tool.

You may set your browser to block all cookies, including StatSocial’s cookies that are not strictly necessary while using our services, but doing so will prevent some aspects of our services to not function properly). You may also set your browser to block third-party cookies and allow first-party cookies, which would allow us (but not third parties) to collect such information while you are on our sites. In addition, some browsers may allow you to block certain web beacons and similar tracking codes. Please refer to your browser’s documentation if you wish to block some or all cookies, web beacons, and/or similar tools. To find out more about cookies, including how to manage and delete cookies, visit www.allaboutcookies.org. While browsers vary, the following links may be helpful:

(a) Cookie settings in Internet Explorer
(b) Cookie settings in Firefox
(c) Cookie settings in Chrome
(d) Cookie settings in Safari on Mac and Safari on iPhone, iPad, or iPod touch.

Google Analytics. Google Analytics is a service provided by Google, Inc. (“Google”). We use Google Analytics to collect anonymized statistics in order to improve the Site. You can learn about Google’s practices by going to Google Analytics and privacy, and opt out of them by downloading the Google Analytics Opt-out Browser Add-on. We have taken the following measures to protect the data collected through Google Analytics:

• We have concluded a data processing agreement with Google about how Google may process the data collected through Google Analytics;
• We have configured Google Analytics settings to mask the last octet of user IP addresses;
• We have configured Google Analytics to not share data with third parties; and
• We do not use other Google services in conjunction with Google Analytics.

5. Your Marketing and “Opt Out” Choices

There are several ways that you may exercise choices about how information about you is used to market to you. Residents of states that grant particularized rights regarding such choices may also refer to Section 11 in this Privacy Policy, or the “California Privacy Rights Addendum” at the end of this Privacy Policy.

a. Opting Out of our marketing databases. To “opt out” of our marketing databases, please go to our “Do Not Sell or Share My Personal Information” page here. If you “opt out” in this way, we will maintain certain of your information in our internal “suppression” files.

b. Opting Out of personalized advertising. In addition, any consumers who wish to “opt out” of personalized (sometimes called “interest-based”) online marketing may go to the industry opt-out and educational pages operated by the NAI and DAA, two industry self-regulatory groups, here and here.

c. Unsubscribing from our corporate email. In addition, we will generally provide an “unsubscribe” link in any marketing emails we send. You may opt out of receiving those “b2b” marketing emails by clicking on that link.

6. Data Collected Through Our Website and For Our Corporate Purposes
We will sometimes give you the opportunity to provide information directly to us through our corporate Website – such as if you are a business interested in a relationship with us or an individual completing one of our surveys. Additionally, as you interact with our Website, we may use (or engage with business partners and vendors that use) automatic data collection technologies such as cookies (described above) to collect certain information about your equipment, browsing actions, and patterns. Our data collection practices concerning our Website are included in the following chart:

StatSocial, as a service provider or processor, provides its Clients with services, such as customer insights and analytics (generally, providing our customers information about their own consumers or prospective consumers). When our Clients provide us with information relating to their own customers or prospective customers, we function as a service provider to those Clients. We do not combine our Clients’ data with our own data when we act as a Service Provider.

Our Clients determine how to engage with their customers and thus act as the business that determines the purposes and means of handling their own customer and transactional information. Under these circumstances, consumers are ultimately subject to the privacy policies of the Clients controlling their data. We are not responsible for the privacy practices of our Clients.

8. Links
This website may provide links to other websites that StatSocial thinks users will find interesting or useful. StatSocial is not responsible for the privacy practices of these other sites or companies.

9. Security and Data Integrity
StatSocial takes steps designed to help ensure that the data we possess is housed and transmitted securely. This may include physical and electronic security precautions, firewall protections, encryption, hashing or truncation of data, and access controls to personal information. Although neither we nor any platform can guarantee 100 percent safety from hacks or illegal intrusion, we employ efforts that are designed to minimize the risk of this occurring.

10. Changes to this Privacy Policy
From time to time, we may update this Privacy Policy. Any changes to it will become effective when it is posted to our website (or at a later date we designate). Please continue to check back to learn of any changes to this Privacy Policy.

11. Your Rights and Marketing Choices (and Notice of Your Right to Opt Out)

Certain states have passed state-specific privacy laws that grant residents of their states particular privacy rights. These states include California (as to which a separate “Addendum” is provided below), as well as Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia. It also includes other states as their own states’ laws become effective over time (during 2025 and 2026) including Indiana, Kentucky, Maryland, Nebraska, Rhode Island, and Tennessee. A useful privacy “tracker” as to what these states are, and when each privacy law becomes effective, is provided by the “IAPP,” an industry association devoted to privacy issues, at https://iapp.org/resources/article/us-state-privacy-legislation-tracker/.

If you live in one of these states, you may have the following rights with respect to your “personal information” or “personal data” (as such terms are defined under applicable law, and collectively referred to herein as “personal information”):

• The right to know what Personal Information we have collected, used, disclosed, and sold about you, including the categories of Personal Information, the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom StatSocial discloses Personal Information, and the specific pieces of Personal Information StatSocial has collected about you, which you can exercise on our website.
• The right to obtain a copy of Personal Information we have obtained about you in a portable and, to the extent technically feasible, readily usable format, which can be done on our website here.
• The right to correct inaccurate personal information about you, taking into account the nature of the Personal Information and the purposes of the processing.
• The right to request that we delete any Personal Information we have about you.
• The right to opt-out of the selling your Personal Information, which you can exercise on our website here.
• The right to opt-out of targeting advertising. You may also opt out of targeted advertising, which you can exercise on our website here.
• The right to limit the use of your Sensitive Personal Information, which you can exercise through the contact form available on our website.
• If we deny your request, you may have the right to appeal our decision.

Submitting Requests
If you are a resident of one of the above states you may submit any of the above requests by call us at 1 (800) 793-6855 or use the contact form available on our website. We will respond to your request in compliance with the requirements of your state’s applicable laws. Please note that we are only required to honor California requests to know twice in a 12-month period.

Verification of Your Identity
When you exercise your rights correct, delete, and/or to know/obtain Personal Information we have about you and submit a request to us, we will verify your identity by asking you to provide us with additional information such as your email address, a partial driver’s license number, or other information that would help us ensure the right person is making the request. We also may use a third-party verification provider to verify your identity.

Appeal
Residents of certain of the above states may appeal a decision we have made regarding their requests by using the form available on our website. We will respond to such appeals as prescribed by the applicable state statute.

Non–Discrimination
If you make a request under your state privacy laws, we will not discriminate against you with respect to your statutory rights, or other rights we grant herein.

Authorized Agents
You may permit an authorized agent to submit a request to know or to delete your Personal Information. If we receive a request on your behalf, we will ask that person to give us proof that you gave that person written permission to make a request for you. If that person does not provide us with written proof, we will deny their request so that we can protect your Personal Information. As applicable under state laws, we may ask for a power of attorney.

Automated Decision-Making
We generally do not use automated decision-making technology, as that term is defined by State Privacy Laws. If we make use of automated decision-making technology, you will be informed through a separate privacy notice.

12. California Shine the Light Act

California’s Shine the Light Law (CA Civil Code § 1798.83) allows residents with which a business has an established business relationship to request a list of the third parties to which the business has disclosed certain “personal information” (as specifically defined by the Shine the Light law) during the preceding year where the business knows or reasonably should know that the third parties used the personal information for the third parties’ own “direct marketing purposes,” defined by the Shine the Light law as the use of personal information to solicit or induce a purchase, rental, lease, or exchange of products, goods, property, or services directly to individuals by means of the mail, telephone, or electronic mail for their personal, family, or household purposes. However, the business is not required to provide this information where the business adopts and discloses, in its privacy policy, a policy of not disclosing “personal information” to third parties for their “direct marketing purposes” 1) unless the resident first affirmatively agrees or 2) if the resident has exercised an option that prevents that information from being disclosed. StatSocial maintains such a policy and thus is not required to provide this information. StatSocial does not engage in any disclosures in which it knows or reasonably should know that the third parties use the personal information for their own direct marketing purposes as defined by Shine the Light. However, StatSocial provides California residents the ability to exercise rights under the California Consumer Privacy Act (“CCPA”) to opt out of “sales” and “sharing” of their personal information for cross-context behavioral advertising. Such opt out would apply to disclosures covered by Shine the Light if applicable. Please visit the Your Privacy Choices link in the website footer to exercise those CCPA rights.

13. Record Retention
We may retain your personal information for as long as necessary to fulfill the purpose for which it was collected or to comply with legal or regulatory requirements. We strive to retain your personal information no longer than is reasonably necessary to carry out the purposes listed in this Notice or as required by law. The criteria used to determine our retention periods include: (a) the length of time we have an ongoing relationship with our Customers and provide services, (b) whether there is a legal obligation to which we are subject, and (c) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

14. Storage of Information in the United States
If you are accessing our Website from a location outside of the United States, your connection will be through and to servers located in the United States and the Information you provide will likely be processed and securely maintained in our web servers and internal systems located within the United States. (We likewise generally store the Information used in our Services in the United States.) Thus, you should be aware that in accessing this website or otherwise communicating with us, the information we collect or receive from you may be subject to laws with lesser or different privacy standards than those in your own country (such as if you are in a country located in the European Union).

15. Where Our Services are Hosted and Operated

Our Services are hosted and operated in the United States. If you are visiting our website from outside the United States, your information may be transferred to, stored and processed in the United States in accordance with this Privacy Policy. The data privacy and other applicable laws of the United States may not be as comprehensive as those laws or regulations in your country or may differ from the data protection or consumer protection laws in your country. In some cases, your information may be available to government authorities under lawful orders and law applicable in such jurisdictions. We are not at this time offering our Services to data subjects in Europe. However, we may receive European personal data for data subjects in Europe through our agreements with our European partners.

16. Personal Information of Minors
You must be at least 16 years old (depending on the state of residence) in order to provide us with personal information, and at least 18 years old to request any of the Services. We do not have actual knowledge about selling or sharing personal information of consumers under the age of 16. If you become aware of any selling or sharing information from children under 16, please email us at privacy@StatSocial.com.

StatSocial complies with the Children’s Online Privacy Protection Act of 1998, which prohibits collecting personal information from children under the age of 13 without verifiable parental consent. If it comes to our attention that we have unknowingly collected information from a child under the age of 13, we will take all reasonable measures to delete it as soon as possible and will not use such information for any purpose (except where necessary to protect the safety of the child or others as required or allowed by law). If you become aware of any personally identifiable information we have collected from children under 13, please email us at privacy@StatSocial.com.

Minors under 18 years of age may have the personal information that they provide to us deleted by sending an email to privacy@StatSocial.com requesting deletion. Please note that, while we make reasonable efforts to comply with such requests, deletion of your personal information does not ensure complete and comprehensive removal of that data from all systems.

17. Your Rights Under the GDPR and the Swiss/ UK Data Protection Acts

The General Data Privacy Regulation (the “GDPR”) as well as the Swiss and UK Data Protection Acts provide data subjects in the EEA, Switzerland and the United Kingdom with certain rights, regarding how their “personal data” (as defined by these laws) is processed. All data subjects in the EEA, Switzerland and the United Kingdom should note that the GDPR and Swiss/U.K. data protection laws make a distinction between organizations that process personal data for their own purposes (“data controllers”) and organizations that process personal data on behalf of other organizations (“data processors”). These laws provide residents of EU nations and the United Kingdom with certain rights, and places certain obligations on us, regarding how your “personal data” (as the GDPR uses that term) is used. We describe those rights and obligations below.

17.1. Legal Basis.The GDPR requires us to tell you about the legal ground we’re relying on to process any “personal data” (as the GDPR uses that term) about you. The legal grounds for us processing your personal data for the purposes set out in Sections 2 and 6 above will typically be because:

• You provided your consent;
• it is necessary for our contractual relationship, e.g., in order to provide you services or features you’ve requested or agreed to;
• the processing is necessary for us to comply with our legal or regulatory obligations; and/or
• the processing is in our legitimate interest (for example, to protect the security and integrity of our systems or to provide you with customer service).

17.2 The right to notice. You have the right to notice – i.e., to be informed — about how we protect your data and respect your privacy. We provide that notice by posting this Privacy Policy or through other means at the time of or after personal information is collected.

17.3 Your rights to delete or withdraw consent (also called a “right to be forgotten”): You may request that we “opt you out” of our active data services databases by going to this page: https://www.statsocial.com/optout/. When you use our “opt out” feature, we will retain your information in order to maintain it on a “suppression” list to avoid your personal information being re-collected in the future (if you do not want us to do this, then please email us at privacy@StatSocial.com.

We may retain information after deletion or opt-out for important legal, auditing, accounting or security purposes.  (If you are seeking deletion of information we may hold for you as our corporate customer, or potential customer, please see section 17.5, below.)

17.4 Right to Access or Rectify/Correct Your Personal Information. You may also request access to a copy of your personal data by emailing us at privacy@StatSocial.com or on our website here. We may request certain information about you (as the law requires us to do) in order to verify that you are the person to which the datafile we hold pertains. You may also email us at the above address if you would like to “rectify” or correct incorrect information we hold about you in our database.

17.5. Our Corporate Customers. If you have a corporate account with us, you can exercise other rights, such as your account deletion or “access” rights, by contacting us at privacy@StatSocial.com. Please note that when we delete your information, we may retain it for certain important internal purposes such as legal, accounting, security or auditing purposes.

17.6 You may object to profiling or targeted advertising by online advertising platforms (who are generally separate third party “controllers” of Your data). You may visit industry websites provided at https://optout.aboutads.info (by the Digital Advertising Alliance and https://optout.networkadvertising.org/ (by the Network Advertising Alliance or https://www.youronlinechoices.eu/ (the European Digital Advertising Alliance to do so.

17.7 You may also unsubscribe from marketing and other communications that we may send (on behalf of ourselves or others) by clicking on the “unsubscribe” link in any email that we send to you.

StatSocial, Inc is the controller of the Personal Data that we process as described in this Privacy Policy.

If you need to contact our Data Protection Officer, including regarding any complaint or inquiry about how we process Personal Data, please email us at the privacy@statsocial.com email address.

As an EU resident, you have the right to report a concern to your country’s Data Protection Authority.  UK residents can report a concern to the Information Commissioner’s Office. However, we respectfully request that you contact us directly first so that we can assist you

18. StatSocial as a Data Controller and a Data Processor

EU data protection law makes a distinction between organisations that process personal data for their own purposes (known as “data controllers”) and organisations that process personal data on behalf of other organisations (known as “data processors”). If you have a question or complaint about how your personal data is handled, those should always be directed to the relevant data controller as they are the ones with primary responsibility (legally and organizationally) for your personal data.

In this regard, StatSocial may act as either a data controller or a data processor with respect to your personal data, depending on the specific circumstances. For instance, when we offer our own products and services, we generally act as a “controller” as to the personal data used in those products and services. On the other hand, if we hold or process our customers’ information (such as a customer CRM file), we would generally act as a “processor” as to that information