Privacy Policy

01 Who we are

Webnetic Ads ("Webnetic Ads", "we", "us" or "our") is a performance-driven digital advertising agency operating from [Registered address, Gurugram, Haryana, PIN], India, and reachable at info@webneticads.com.

We operate an advertising platform that connects advertisers, who pay for measurable outcomes such as clicks, leads and sales, with publishers, who monetise their audience by promoting those offers. This policy covers our website at webneticads.com, our advertiser and publisher portals, and the ad delivery and conversion tracking we perform on behalf of clients.

For data collected through our own website and accounts, Webnetic Ads acts as a data controller (or "data fiduciary" under India's Digital Personal Data Protection Act, 2023). When we deliver campaigns and process tracking data on an advertiser's instructions, we may act as a data processor for that advertiser.

02 Information we collect

Information you give us

• Account details — name, business name, email address, phone number, country, website or traffic source, and the account type you register for.
• Verification details — identity and business documents we may request during manual account review, including tax identifiers where required by law.
• Payment details — bank account or payout wallet information for publishers, and billing details for advertisers. Card and bank credentials are handled by our payment processors; we do not store full card numbers.
• Campaign material — creatives, landing page URLs, targeting briefs and any content you upload to run or promote a campaign.
• Correspondence — messages you send to support, sales or your account manager, including attachments.

Information collected automatically

• Device and connection data — IP address, browser type and version, operating system, device type, screen size, language and time zone.
• Usage data — pages viewed, referring URL, time on page, clicks, and the path you take through our site or portal.
• Ad interaction data — impressions served, clicks, post-click events, conversion events, timestamps, and the publisher and campaign identifiers attached to them.
• Approximate location — city, region and country derived from IP address. We do not collect precise GPS location from our website.

Information from third parties

• Advertisers and their tracking platforms — conversion confirmations and postbacks telling us an action was completed.
• Ad exchanges, SSPs and demand partners — delivery and performance data for programmatic inventory.
• Fraud prevention providers — risk signals used to detect bot traffic, click farms and duplicate conversions.
• Analytics and infrastructure providers — aggregated measurement and service reliability data.

03 Cookies and tracking technologies

We and our partners use cookies, pixels, SDK events, server-to-server postbacks and similar technologies. Broadly they fall into four categories:

• Strictly necessary — keep you signed in, secure the session, and protect against fraud and abuse. These cannot be switched off through our site.
• Functional — remember preferences such as language, dashboard layout and dismissed notices.
• Analytics — help us understand which pages and campaigns perform, in aggregate.
• Advertising and attribution — record that a click occurred and match a later conversion back to the publisher and campaign that produced it, so payouts are calculated correctly.

Most browsers let you block or delete cookies through their settings. Blocking strictly necessary cookies will break sign-in and may prevent conversions from being attributed. Where required by applicable law, we ask for consent before setting non-essential cookies and you can withdraw that consent at any time.

04 How we use your information

We use personal data to:

• create, verify and manage advertiser and publisher accounts, including manual approval review;
• deliver, optimise and report on advertising campaigns;
• track clicks, leads and sales, and calculate publisher payouts and advertiser invoices;
• detect, investigate and prevent fraud, invalid traffic, policy violations and security incidents;
• provide customer and account support and respond to your enquiries;
• send service messages about your account, payouts, campaigns and changes to our terms;
• send marketing communications where you have opted in or where permitted by law — you can unsubscribe at any time;
• produce aggregated statistics and improve our platform and services; and
• comply with legal, tax, accounting and regulatory obligations.

Legal bases

Where the GDPR or similar laws apply, we rely on: performance of a contract (operating your account and paying you), legitimate interests (fraud prevention, security, service improvement, direct B2B marketing), consent (non-essential cookies and certain marketing), and legal obligation (tax and record-keeping). Under India's DPDP Act, we process personal data on the basis of consent or for legitimate uses permitted by the Act.

05 Advertising and conversion tracking

Our business depends on knowing which click led to which outcome. When a user clicks an ad served through our network, we generate a click identifier and record technical signals — IP address, user agent, timestamp, referring publisher and campaign. If the advertiser later reports a conversion, we match it back to that click.

We use this data to attribute conversions, pay publishers accurately, cap frequency, and screen for invalid traffic. We do not sell personal data, and we do not build advertising profiles of individuals for sale to third parties.

Advertisers who place our tracking on their properties are responsible for providing their own privacy notice and for obtaining any consent required from their users before conversion data is sent to us.

06 How we share information

We share personal data only as described below:

We do not sell personal data and we do not share it for cross-context behavioural advertising in the sense given to those terms under the CCPA/CPRA.

07 Data retention

We keep personal data only as long as we need it for the purpose it was collected:

• Account records — for the life of the account and up to [X years] after closure, to handle disputes and meet statutory record-keeping duties.
• Financial records — for the period required by Indian tax and company law, typically eight years.
• Click and conversion logs — for the attribution window plus a reconciliation and fraud-review period, then aggregated or deleted.
• Support correspondence — for up to [X years] from the last contact.

When data is no longer needed, we delete it or irreversibly aggregate it so it can no longer identify anyone.

08 Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit (TLS), access controls on a need-to-know basis, segregated environments, logging and monitoring, and vendor due diligence. Payment credentials are handled by regulated payment processors.

No method of transmission or storage is completely secure. If a breach affects your personal data and is likely to result in risk to you, we will notify you and the relevant authority as required by applicable law, including the timelines set by the DPDP Act and CERT-In directions.

09 Your rights and choices

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you and a summary of how it is processed;
• Correct data that is inaccurate, incomplete or out of date;
• Erase data where it is no longer needed or where consent is withdrawn;
• Withdraw consent at any time, without affecting processing already carried out;
• Object to or restrict processing based on legitimate interests, including direct marketing;
• Portability — receive certain data in a structured, machine-readable format;
• Nominate a person to exercise your rights in the event of death or incapacity (DPDP Act); and
• Complain to a supervisory authority, including the Data Protection Board of India.

To exercise any of these, email info@webneticads.com. We will verify your identity and respond within the timeframe required by applicable law. There is no charge unless a request is manifestly unfounded or excessive.

Marketing opt-out: use the unsubscribe link in any marketing email, or write to us. Service and transactional messages about your account will continue.

10 International data transfers

We are based in India and use service providers that may store or process data in other countries. Where personal data is transferred out of its home jurisdiction, we rely on lawful transfer mechanisms — such as the European Commission's Standard Contractual Clauses, adequacy decisions, or equivalent safeguards — and require providers to apply protections consistent with this policy.

11 Children's privacy

Our platform is a business service and is not directed at children. We do not knowingly collect personal data from anyone under 18, and we do not knowingly serve behaviourally targeted advertising to children. If you believe a child has provided us with personal data, contact us and we will delete it.

12 Third-party sites and services

Our site links to third-party destinations, including our tracking portal at webnetics-ads.trackog.io, advertiser landing pages and publisher websites. Those properties are governed by their own privacy policies. We are not responsible for the content or data practices of sites we do not operate, and we encourage you to read their notices before submitting information.

13 Changes to this policy

We may update this policy to reflect changes in our services, technology or the law. The "Last updated" date at the top of this page always shows the current version. If a change materially affects how we handle your personal data, we will give notice by email or through the platform before it takes effect. Continued use after the effective date means you accept the revised policy.

14 Contact and grievance redressal

For any question, request or complaint about this policy or your personal data, contact us first — most issues are resolved quickly.

If you are not satisfied with our response, you may escalate to the Data Protection Board of India or, if you are in the EU/UK, to your local supervisory authority.