Privacy Policy

Effective date: 10/31/2026

1. Who we are and what this policy covers

Jounce Media, LLC ("Jounce," "we," "us") is a programmatic advertising research company. Our mailing address is PO Box 86, Norwalk, CT 06852. For privacy questions or requests, email support@jouncemedia.com.

This policy explains how we collect, use, share, and protect personal information. It covers:

Visitors to jouncemedia.com
Portal users who log in to the Jounce portal
Business contacts, such as clients, prospects, and partners
Advertising transaction data we receive from media buyers, technology platforms, and publishers for our research and analysis services

Jounce is the controller of the personal information described here, except where we process advertising data on behalf of a client. In that case we act as the client's processor (or "service provider") under our contract with them, and the client's privacy policy also applies.

2. Information we collect (Notice at Collection)

We collect only what we need to run the portal, support our clients, and produce our research. We do not sell or share personal information, and we do not use it for targeted advertising.

Account and contact information. Your name, email address, and login details, which you give us when you register or contact us. We use them to provide the portal, support you, and send product updates. We keep them so you can return to the portal later, and delete them when you ask us to.

Portal usage information. Records of the pages and features you use, with timestamps, collected automatically when you use the portal. We use them to understand usage, offer help, improve our products, and keep the portal secure. After 36 months, we de-identify usage logs by removing your user ID, name, and email. We delete or truncate IP addresses after 12 months.

Professional information. Your company, job title, and business correspondence, from you and your colleagues, used to manage our business relationship. We keep it for as long as we need it for business, legal, and accounting records.

Identifiers and location in advertising data. Device or browser IDs, IP addresses, user agents, and latitude/longitude can appear in advertising transaction records we receive from media buyers, technology platforms, and publishers. We delete all records containing these fields within 30 days, keeping only aggregated counts. We use the data only to produce aggregated, de-identified measurements of advertising supply, such as volumes, prices, and supply paths. We do not use it to identify individuals, build profiles of people, or target advertising. We do not sell or share any of these categories.

Cookies and trackers. Our website and portal use only cookies needed to log you in and keep the site working. We do not use third-party analytics, advertising cookies, or tracking pixels on our site. Our product update emails, sent through our email service provider, record whether an email was opened and which links were clicked.

Information we do not collect. We do not knowingly collect payment card numbers, government ID numbers, health information, or information about children.

3. How we use information, and our legal bases

We use personal information only for the purposes below. Where the EU or UK GDPR applies, each purpose relies on the legal basis shown.

To create and run your portal account and deliver our products. Legal basis: performance of our contract with you or your employer.
To understand how the portal is used and reach out when you may need help. Legal basis: our legitimate interest in supporting clients and improving our products.
To send product updates and research announcements. Legal basis: our legitimate interest in keeping clients informed. You can unsubscribe at any time.
To keep our systems secure and prevent fraud. Legal basis: our legitimate interest in security.
To produce aggregated, de-identified research on advertising supply. Legal basis: our legitimate interest in market research.
To comply with law and enforce our agreements. Legal basis: legal obligation, and our legitimate interest in protecting our rights.

We do not rely on consent for any processing, and we do not make decisions about people that are based solely on automated processing and produce legal or similarly significant effects. We do not use personal information to train artificial intelligence or large language models.

We use information only for the purposes it was collected for. If we plan a new use that is not compatible with these purposes, we will update this policy and notify you first.

4. Sharing, sale, and retention

We do not sell or share personal information, as those terms are defined under California and other U.S. state privacy laws. We have not done so at any point in the past. We do not process personal information for targeted advertising. We have no actual knowledge of selling or sharing information about anyone under 16. Because we do not sell or share, we do not offer a "Do Not Sell or Share" link.

We disclose personal information only to:

Service providers that host our systems, provide email and workspace tools, and send our product update emails. They process information only on our instructions, under written contracts that require confidentiality and security.
Clients, who receive only aggregated, de-identified research outputs, never personal data.
Authorities or other parties when the law requires it, or to protect our rights, users, or others.
A buyer or successor, if Jounce is involved in a merger, acquisition, or sale of assets, subject to this policy.

How long we keep information

Portal account record: kept until you ask us to delete it.
Portal usage logs: de-identified after 36 months.
IP addresses in portal logs: deleted or truncated after 12 months.
Business correspondence: kept as long as needed for business, legal, and accounting records.
Advertising transaction records containing identifiers: deleted within 30 days.
Aggregated, de-identified research data: kept indefinitely; it contains no personal information.

We keep information longer only when the law requires it or to resolve disputes.

5. Your privacy rights

Depending on where you live, you may have the right to:

Know and access the personal information we hold about you, including the categories, sources, purposes, and recipients
Correct inaccurate information
Delete your information
Receive a copy in a portable format
Object to or restrict processing based on our legitimate interests
Object to direct marketing at any time, which we will always honor
Formally opt out of sale, sharing, targeted advertising, or significant automated decisions, although we already do not use data for any of these purposes
Not be discriminated against for exercising these rights

Your right to object. Where we rely on our legitimate interests to use your personal information, you can object at any time, and we will stop unless we have compelling legitimate grounds that override your interests or need the information to establish, exercise, or defend legal claims. You can always object to product update emails, and we will stop sending them.

How to make a request. Email support@jouncemedia.com with "Privacy request" in the subject, or write to Jounce Media, LLC, Attn: Privacy Requests, PO Box 86, Norwalk, CT 06852. You will not need to create an account or pay a fee. We will confirm receipt within 10 business days. We will respond within 30 days. If we need more time, we will tell you why, as the law allows.

Verification. To protect your information, we verify your identity by matching details you give us, such as your name and the email address on your account. We may ask for one more piece of information for requests to see or delete specific data. We use what you give us only to verify and respond.

Authorized agents. Someone you authorize may make a request for you. We may ask for written proof of their authority and confirm your identity directly.

Appeals and complaints. If we decline your request, we will explain why. You can appeal by replying to our decision with "Appeal" in the subject. We will respond in writing within 45 days. If you are still not satisfied, you may contact your state attorney general or your data protection authority.

Product update emails. Every email includes an unsubscribe link, or you can email us to stop them.

Privacy request metrics. For calendar year 2025, we received no requests to know, delete, correct, opt out of sale or sharing, limit the use of sensitive personal information, or access or opt out of automated decision-making technology. We therefore complied with or denied none, and there is no response time to report. We update these figures each year by July 1.

6. Transfers, security, children, and changes

International transfers. Jounce is based in the United States, and we store information in the U.S. If you are in the EU or UK, we collect your information directly to provide our services. Where our service providers transfer it onward, they use the European Commission's Standard Contractual Clauses or another approved safeguard.

Security. We maintain administrative, technical, and physical safeguards that are independently audited under SOC 2. Access to personal information is limited to staff and contractors who need it, under confidentiality obligations. If a breach affects your personal information, we will notify you and the authorities as the law requires.

Children. Our services are for business professionals. We do not knowingly collect information from anyone under 16. If you believe we have, contact us and we will delete it.

Changes. We review this policy at least once per year. If we make a material change, we will post the new version here with a new effective date and email active portal users before it takes effect.

Accessibility. This policy is available as a web page that can be printed or read with assistive technology. For another format, contact us.

Contact. Jounce Media, LLC, PO Box 86, Norwalk, CT 06852. Email: support@jouncemedia.com.