Privacy Policy

For personal information we collect through our websites, marketing, sales and account-administration activities, doohthis is the controller.

For personal information contained in data that a customer or its authorized users submit to, or generate through, the platform ("Customer Data"), the customer is the controller and doohthis acts as a processor or service provider on the customer's behalf, in accordance with the applicable customer agreement. If you are an individual whose information is processed by doohthis on behalf of a customer, please direct your privacy requests to that customer; we will support the customer's response as required.

2.1 Information You Provide

• Contact and demo requests. When you request a demo, contact us, subscribe to communications or otherwise interact with us, we collect information such as your name, email address, company, job title and phone number.
• Account information. When an account is created, we collect registration and administrator details, credentials and account settings.
• Inventory and business information. Customers and users may submit OOH inventory records, including board and asset locations, coordinates, attributes, availability and audience-measurement identifiers, as well as pricing, proposals, pipeline and related business information.
• Communications. We collect the content of messages, support requests and other communications you send us.
• Payment information. Payments are processed by third-party payment processors; we receive limited billing and transaction details but do not store full payment-card numbers.

2.2 Information We Collect Automatically

When you access our websites or Services, we and our service providers automatically collect:

• IP address and approximate location derived from it;
• browser type, device identifiers, operating system and device characteristics;
• pages and content viewed, referring and exit pages, and the dates, times and duration of visits;
• feature usage, workflow events, and other product and diagnostic telemetry; and
• information collected through cookies, pixels, scripts and similar technologies (see Section 4 and our Cookie Policy).

2.3 Information From Third Parties and Enrichment Sources

We obtain information about businesses and professionals from third-party data providers, including contact and firmographic data providers, to operate and improve the Services and for our own sales and marketing. This includes business contact details, company information and professional attributes.

Website visitor identification. We use a third-party website-visitor identification technology provided by Apollo.io ("Apollo") on our websites. This technology identifies the organization associated with a visit and, for certain visitors (currently U.S.-based visitors), may identify the individual visitor and enrich their profile with information from Apollo's business database, such as name, job title, business email, company and professional details. Section 6 describes this in more detail.

2.4 Call Data and Voice Features

Where a customer enables voice or call-handling features, the Services may process call recordings, audio, transcripts, caller-provided information and call metadata ("Call Data"). Call Data is treated as Customer Data, and the customer is responsible for determining lawful use, providing notices and obtaining any required consents. doohthis processes Call Data on the customer's behalf in accordance with the applicable customer agreement.

We use personal information to:

• provide, operate, maintain, secure and improve the Services;
• create, administer and support accounts, and respond to requests and communications;
• generate location intelligence, audience and inventory intelligence, sales recommendations and proposals based on inventory and related data;
• personalize and develop features, and understand how the Services are used;
• carry out our own sales, marketing and business-development activities, including identifying and reaching prospective customers (see Section 6);
• detect, investigate and prevent fraud, abuse, security incidents and violations of our terms;
• comply with legal obligations, enforce our agreements, and establish, exercise or defend legal claims; and
• carry out business transactions such as financings, reorganizations or sales of assets.

We and our service providers use cookies, pixels, scripts, local storage and similar technologies to operate our websites, remember preferences, measure performance and analytics, and support the website-visitor identification described in Section 6. For details about the specific technologies we use, the purposes, and how to manage your choices, see our Cookie Policy.

The Services use automated and artificial-intelligence systems, including third-party model providers, to generate drafts, recommendations, analyses and other outputs. Outputs may be inaccurate or incomplete and are intended to support, not replace, human review.

We do not use a customer's identifiable inventory data to train general-purpose AI models. Where we generate aggregated, de-identified analytics and insights from use of the Services, we do so in a manner that does not identify a customer, an authorized user or an individual.

To support our sales and marketing, we use Apollo's website-visitor identification technology on our websites. This technology is consent-gated: it is off by default and operates only after you accept marketing cookies through our cookie banner. When it is enabled and you visit, a script provided by Apollo runs in your browser and sets a first-party cookie, and we and Apollo collect information such as your IP address, device and browser characteristics, and the pages and actions taken on our site.

Using this information together with Apollo's data, we may:

• identify the organization associated with a visit (for example, by matching network and firmographic signals to a company); and
• identify the individual visitor and enrich their profile with information from Apollo's business database (such as name, job title, business email, company and professional attributes), currently for U.S.-based visitors.

We use this information to understand who is engaging with our website, to prioritize and inform outreach to prospective business customers, and to improve our marketing. We rely on our legitimate interest in business development for this activity, and, where required, on your consent.

Because this technology is enabled only with your consent, it does not operate unless you have accepted marketing cookies. You can withdraw your consent, or otherwise limit or prevent this identification, by declining non-essential cookies through our cookie controls, using a recognized opt-out preference signal such as Global Privacy Control, or contacting us as described in Section 14. For more information about Apollo's data practices and your choices, see Apollo's privacy policy at apollo.io/privacy-policy.

We disclose personal information in the following ways:

• Service providers and subprocessors. We share information with vendors that perform services for us, such as cloud hosting and infrastructure, database and authentication (for example, Supabase), analytics (for example, Google Analytics), email delivery (for example, Resend), website-visitor identification and data enrichment (for example, Apollo), payment processing, telephony, and artificial-intelligence model and infrastructure providers. These providers are permitted to use information only to provide services to us.
• Affiliates. We share information with our affiliates and personnel, including our operations in India, for support, engineering, security and business operations.
• Legal and safety. We disclose information where required by law, subpoena or legal process, or where we believe disclosure is necessary to protect rights, safety, our Services, our users or the public, or to prevent fraud or abuse.
• Business transfers. We may disclose information in connection with a financing, merger, acquisition, reorganization, change of control or sale of assets.
• With your direction or consent. We share information as you otherwise direct or authorize.

We do not sell personal information for monetary consideration.

However, some of our uses of cookies, analytics and website-visitor identification technologies (including the Apollo technology described in Section 6) may be considered a "sale" or "sharing" of personal information, or processing for "targeted advertising," under certain U.S. state privacy laws. You may opt out of this activity by declining non-essential cookies through our cookie controls, by using a recognized opt-out preference signal such as Global Privacy Control, or by contacting us as described in Section 14. We do not knowingly sell or share the personal information of individuals under 18.

Where the laws of the European Economic Area, the United Kingdom or a similar jurisdiction apply, we process personal information on the following legal bases: performance of a contract; our legitimate interests (such as operating, securing and improving the Services and carrying out business development), balanced against your interests and rights; compliance with legal obligations; and your consent, where required (for example, for certain cookies and marketing). Where we rely on consent, you may withdraw it at any time.

We retain personal information for as long as necessary to provide the Services, operate our business, and comply with our legal obligations, resolve disputes and enforce our agreements. Inventory and other Customer Data are retained in accordance with the applicable customer agreement and are deleted upon request or account termination, except where retention is required by law or for backup, security, fraud-prevention or dispute-resolution purposes. Retention periods vary depending on the type of information and the purpose for which it is processed.

We are based in the United States, and we host and process information in the United States. Information may also be accessed or processed from other jurisdictions, including India, by our affiliates, personnel and subprocessors. Where we transfer personal information across borders, we implement appropriate safeguards as required by applicable law, such as standard contractual clauses.

We maintain administrative, technical and organizational safeguards designed to protect personal information appropriate to its nature and the risks involved. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live and subject to applicable law, you may have the right to:

• access the personal information we hold about you and obtain a copy;
• correct inaccurate personal information;
• delete personal information;
• port your personal information to another provider;
• opt out of marketing communications;
• opt out of the "sale" or "sharing" of personal information and of targeted advertising, and to limit certain automated processing; and
• object to or restrict certain processing, or withdraw consent.

You may exercise these rights by contacting us as described in Section 14. We will respond within the time required by applicable law, generally within thirty (30) days. We will not discriminate against you for exercising your rights. You may also have the right to appeal a decision or to lodge a complaint with a supervisory authority or your state attorney general. If we process your information on behalf of a customer, please direct your request to that customer.

To opt out of marketing emails, use the unsubscribe link in the message. To manage cookies and opt out of website-visitor identification, use our cookie controls or a recognized opt-out preference signal such as Global Privacy Control. To opt out of Google Analytics, you may use the Google Analytics opt-out browser add-on.

If you have questions or requests regarding this Privacy Policy or our privacy practices, contact us at:

Our websites and Services are intended for business and professional use and are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

Our websites and Services may link to or integrate with third-party websites and services that we do not control. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above and, where required by law, provide additional notice. Your continued use of our websites or Services after an update takes effect constitutes acceptance of the revised Privacy Policy.