This Privacy Policy describes how AdCider Attribution, operated by Nixes ("we", "us", or "our"), collects, uses, and shares information when you use our mobile attribution service. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable European Union data protection laws.
1. Data Controller
Nixes is the data controller responsible for your personal data. For any questions regarding this Privacy Policy or your data, please contact us at hi@adcider.com.
2. Information We Collect
We collect the following categories of information:
- Account Information: Email address, name, and authentication credentials when you create an account.
- SDK Attribution Data: Device identifiers (IDFV - Identifier for Vendor), attribution tokens from Apple AdServices, and install timestamps collected through our SDK integrated into your mobile applications.
- Transaction Data: In-app purchase information including product IDs, prices, currencies, and transaction timestamps.
- Apple Search Ads Data: Campaign performance metrics including impressions, taps, installs, and advertising spend data received via Apple's Search Ads API.
3. Legal Basis for Processing
We process your data under the following legal bases:
- Contract Performance: Processing your account data is necessary to provide you with our attribution service.
- Legitimate Interest: We process SDK data (device identifiers, attribution tokens, transaction data) based on our legitimate interest in providing mobile attribution analytics. This processing is essential to our core service offering and you have a reasonable expectation of such processing when integrating our SDK.
4. How We Use Your Information
We use collected information to:
- Provide and maintain our attribution service
- Track and attribute app installs to Apple Search Ads campaigns
- Calculate revenue attribution and return on ad spend (ROAS) metrics
- Generate reports and analytics for your campaigns
- Communicate with you about your account and service updates
5. Data Sharing
We do not sell your personal information. We may share data with:
- Cloud Hosting Providers: Infrastructure providers that host our platform and databases within the EU or under appropriate safeguards.
- Payment Processors: Third-party payment services for subscription billing (if applicable).
- Apple: We receive attribution data from Apple's AdServices framework and Search Ads API. Apple processes this data according to their own privacy policy.
- Legal Requirements: When required by law, court order, or to protect our legal rights.
6. Data Retention
We retain data according to the following schedule:
- Account Data: Retained while your account is active. Upon account deletion, personal data is permanently deleted.
- Attribution & Transaction Data: We retain anonymized, aggregated metrics for up to 1 year for reporting purposes. Personally identifiable data is deleted upon account closure.
You may request deletion of your account and all associated data at any time by contacting us.
7. SDK End-User Data
Our SDK collects data from end-users of applications that integrate it. As a developer using our SDK, you are responsible for obtaining appropriate consents from your end-users and disclosing our SDK's data collection in your application's privacy policy. End-users seeking to exercise their data rights should contact the app developer directly.
8. Security
We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, secure authentication, and access controls. We regularly review our security practices to ensure ongoing protection of your data.
9. Your Rights Under GDPR
As a data subject under GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Data Portability: Receive your data in a structured, machine-readable format
- Object: Object to processing based on legitimate interest
- Restriction: Request limitation of processing in certain circumstances
To exercise any of these rights, please contact us at hi@adcider.com. We will respond to your request within 30 days.
10. Cookies
We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.
11. International Transfers
Your data is primarily processed within the European Union. If data is transferred outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top indicates when changes were last made.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at hi@adcider.com