Privacy Policy

1. Scope of This Policy

This policy covers three groups of people:

• Visitors: People who browse RelayYield.com.
• Account Holders: Advertisers and publishers who register for and use the platform.
• End Users: People who interact with ads, links, or widgets served through our tracking technology on advertiser and publisher properties.

This policy does not cover the practices of advertisers, publishers, or other third parties. Their websites and apps are governed by their own privacy policies, and we encourage you to review those policies.

2. Information We Collect

Information you provide directly:

• Account and application data: Name, email address, company name, website or property details, and professional information you submit when applying for or managing an advertiser or publisher account.
• Payment and tax data: Payout details, billing information, and tax documentation we need to pay publishers and invoice advertisers. Card and bank details submitted to payment processors are handled by those processors, not stored by us.
• Communications: The contents of messages you send us through contact forms, email, or support channels.

Information collected automatically:

• Device and usage data: IP address, browser type and version, operating system, device type, referring URL, pages viewed, and interactions with the site, collected via cookies and similar technologies.
• Tracking and attribution data: Click IDs, transaction IDs, event timestamps, offer and placement identifiers, and conversion events recorded through our pixels, redirect links, widgets, and server-to-server postbacks (described in detail in Section 6).
• Log and security data: Server logs, authentication events, and signals we use to detect fraud, bots, and abuse.

Information from third parties: We may receive conversion confirmations from advertisers, traffic quality signals from fraud detection vendors, and business information from publicly available sources used to verify accounts.

3. How We Use Your Information

The information we collect is used to:

• Provide, operate, and maintain the Services, including matching offers to placements and serving ad units.
• Track clicks and attribute conversions so that advertisers are billed and publishers are paid accurately.
• Review and approve account applications and offer participation.
• Process payments, generate statements, and satisfy tax and accounting requirements.
• Communicate with you, including customer support, service announcements, and technical updates.
• Analyze traffic and usage patterns to improve performance, reporting, and user experience.
• Detect, investigate, and prevent invalid traffic, fraud, security incidents, and violations of our Terms of Service.
• Comply with legal obligations and enforce our agreements.

We do not use the data described in this policy to train artificial intelligence models, and we do not use end user tracking data to build advertising profiles of individuals across unrelated contexts.

4. Legal Bases for Processing

Where laws such as the GDPR apply, we rely on the following legal bases:

• Contract: Processing needed to provide the platform to account holders, including tracking, reporting, and payments.
• Legitimate interests: Measuring campaign performance, preventing fraud, securing our systems, and improving the Services, balanced against your rights and expectations.
• Consent: Where required, for example for non-essential cookies or marketing communications. You may withdraw consent at any time.
• Legal obligation: Processing needed to satisfy tax, accounting, and other legal requirements.

5. Cookies and Similar Technologies

RelayYield.com uses the following categories of cookies and similar technologies:

• Strictly necessary: Cookies required for core functions such as login sessions, security, and load balancing. These cannot be disabled through our site.
• Functional: Cookies that remember preferences such as dashboard settings.
• Analytics: Cookies that help us understand how visitors use the site so we can improve it. Data is used in aggregate.
• Attribution: First-party cookies and identifiers used to connect a click to a later conversion for measurement and payment purposes.

You can control cookies through your browser settings, including blocking or deleting them. Disabling cookies may affect the functionality of certain parts of the site, such as staying logged in. Where required by law, we request consent before setting non-essential cookies.

6. Tracking and Attribution Technology (Pixels and S2S)

To accurately measure campaign performance, Relay Yield uses the following tracking methods:

• Pixels (web beacons): Small pieces of code that record interactions such as ad views and clicks, so we can understand how users engage with specific advertisements or content.
• Redirect and smart links: Links that pass through our servers, recording the click before sending the user to the advertiser's page.
• Server-to-server (S2S) postbacks: Conversion notifications (for example a purchase or sign-up) transmitted directly between the advertiser's server and ours. Because this happens server-side rather than in the browser, it offers higher accuracy and exposes less data to third parties than traditional browser-based tracking.
• Embeddable widgets: JavaScript ad units placed on publisher sites that request offers from our servers and record views and clicks.

Data points collected: Through these methods, we collect data that is pseudonymous or non-identifying, including:

• Unique click IDs and transaction IDs.
• Device type, browser version, and operating system.
• Timestamp of the event (view, click, or conversion).
• Obfuscated IP addresses used for geographic routing and fraud detection.
• Offer, placement, and publisher identifiers.

What we do not collect through tracking: Our tracking parameters are not designed to carry names, email addresses, precise location, or the contents of what a user purchased. We contractually prohibit advertisers and publishers from passing sensitive personal information through our tracking parameters.

Purpose limitation: Data collected via pixels and postbacks is used strictly for attribution (determining which marketing efforts led to an action), fraud prevention (identifying bot traffic and fraudulent conversions), and reporting (aggregated, non-personally identifiable reports for partners and advertisers).

7. Our Role: Controller and Processor

For account holder data (advertiser and publisher registration, payment, and support data) and for visitor data on RelayYield.com, Relay Yield acts as the data controller. For end user tracking data processed on behalf of advertisers and publishers to measure their campaigns, we generally act as a processor or service provider, handling the data according to our agreements with those partners. Where we use tracking data for our own fraud prevention and platform integrity purposes, we act as a controller of that data.

8. Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We share data only in the following circumstances:

• Advertisers and publishers: We share the performance data needed to run the platform, such as conversion counts, click IDs, and aggregated statistics. We do not share a publisher's account details with advertisers, or vice versa, beyond what reporting requires.
• Service providers: We share data with vendors who assist us in operating the Services, such as cloud hosting, payment processing, email delivery, analytics, and fraud detection providers. They may use the data only to perform services for us and must protect it.
• Legal compliance: We may disclose information if required by law, subpoena, or court order, or in response to valid requests by public authorities, and to protect the rights, property, or safety of Relay Yield, our users, or the public.
• Business transfers: If Relay Yield is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will notify you of any change in ownership or in the use of your personal information.
• With your direction: We share information when you ask us to or otherwise consent.

9. International Data Transfers

We are based in the United States, and information we collect is processed in the United States and in other countries where our service providers operate. These countries may have data protection laws different from those in your jurisdiction. When we transfer personal data out of the European Economic Area, the United Kingdom, or Switzerland, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or transfer to recipients covered by an adequacy decision.

10. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy. As a general guide:

• Account data: Retained while your account is active and for a reasonable period afterward to handle final payments, disputes, and re-activation requests.
• Click and conversion records: Retained at event level for as long as needed for attribution windows, payment reconciliation, and fraud review, then aggregated or deleted.
• Payment and tax records: Retained for the periods required by tax, accounting, and financial regulations.
• Support communications: Retained for as long as useful to resolve the matter and improve our support.

When data is no longer needed, we delete it or de-identify it so it can no longer be associated with you.

11. Data Security

We implement technical and organizational measures designed to protect personal information, including encryption of data in transit (TLS), access controls that limit data access to personnel who need it, logging and monitoring of production systems, and separation of production and development environments. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

12. Your Rights and Choices

Depending on your location, you may have the following rights regarding your data:

• The right to access the personal data we hold about you and receive a copy of it.
• The right to request the correction of inaccurate data or the deletion of your data.
• The right to object to or restrict certain processing activities.
• The right to withdraw consent where processing is based on consent.
• The right not to be discriminated against for exercising your privacy rights.

To exercise any of these rights, email support@relayyield.com. We will verify your request using the email address associated with your account or other reasonable means, respond within the timeframe required by applicable law, and let you know if we need more information. If we act as a processor for the data in question, we may direct you to the responsible advertiser or publisher, or forward your request to them.

Marketing choices: You can opt out of marketing emails at any time using the unsubscribe link in the message. We will still send transactional messages such as payment notices and service announcements.

13. Supplemental Notice for European Users (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, you have specific rights under the General Data Protection Regulation (GDPR) and equivalent laws. Relay Yield acts as the data controller for the visitor and account holder data we collect, as described in Section 7.

Legal basis for processing: We process your data only when we have a legal basis to do so, as set out in Section 4.

International data transfers: If we transfer your data outside of the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), as described in Section 9.

Your rights: In addition to the rights in Section 12, you have the right to data portability (requesting a copy of your data in a structured, machine-readable format) and the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Complaints: You have the right to lodge a complaint with a supervisory authority in your jurisdiction if you believe our processing of your data infringes the GDPR. We would appreciate the chance to address your concerns first, so please consider contacting us before filing a complaint.

14. Supplemental Notice for California Residents (CCPA/CPRA)

This section applies to residents of California under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Categories of personal information we collect: Identifiers (name, email, IP address), commercial information (transactions and payout records), internet activity (browsing and interaction data), professional information (company and property details), and inferences used solely for fraud detection. We collect these from the sources and for the purposes described in Sections 2 and 3, and share them with the categories of recipients described in Section 8.

Your rights include:

• Right to know: Request that we disclose what personal information we collect, use, disclose, and sell or share.
• Right to delete: Request the deletion of personal information we have collected from you, subject to certain legal exceptions.
• Right to correct: Request the correction of inaccurate personal information.
• Right to opt out of sale or sharing: We do not sell your personal information. If we "share" data for cross-context behavioral advertising as defined by the CPRA, you have the right to opt out.
• Right to limit use of sensitive personal information: We do not use or disclose sensitive personal information for purposes requiring a right to limit.
• Right to non-discrimination: We will not deny services, charge different prices, or provide a different level of quality because you exercised your privacy rights.

To exercise these rights, contact us at support@relayyield.com with the subject line "California Privacy Request." You may designate an authorized agent to submit a request on your behalf; we will require proof of authorization and may still verify your identity directly.

15. Other US State Privacy Laws

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, and Oregon) may have similar rights of access, correction, deletion, portability, and opt-out of targeted advertising or profiling. We extend the rights described in Section 12 to residents of these states. If we deny a rights request, you may appeal by replying to our decision, and we will respond as required by your state's law.

16. Do Not Track and Global Privacy Control

Some browsers offer a "Do Not Track" (DNT) setting. There is no common industry standard for DNT, so our site does not currently respond to DNT signals. Where required by law, we honor the Global Privacy Control (GPC) signal as a valid opt-out of sale or sharing for the browser or device that sends it.

17. Children's Privacy

The Services are intended for business use by adults. We do not knowingly collect personal information from children under 16, and the platform may not be used to run campaigns directed at children. If you believe a child has provided us with personal information, contact us and we will delete it.

18. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated "Effective Date," and for material changes we will provide additional notice where practical, such as by email or a notice within the platform. We encourage you to review this page periodically.

19. Contact Us

If you have any questions about this Privacy Policy or our data practices, or wish to exercise your rights, please contact us at: Email: support@relayyield.com