Privacy & Compliance | Audiencemix

Effective Date: June 17, 2025
Last Updated: July 7, 2025

This Privacy Policy and Data Broker Disclosure describes how Audience Mix, LLC ("Audience Mix," "we," "our," or "us") collects, uses, discloses, and safeguards personal information in the course of our data brokerage operations. Our services are focused on enabling programmatic advertising, audience targeting, and marketing analytics by creating pseudonymized audience segments that we license to advertising platforms, demand-side partners, and data onboarding providers.

Audience Mix operates as a third-party data broker. We do not collect personal data directly from consumers. Rather, we license data sets from vetted third-party suppliers who are contractually obligated to collect and provide such data in full compliance with applicable privacy laws. These suppliers represent and warrant that they provide consumers with the required notices and opt-out rights prior to the collection and transfer of data to us.

This Policy applies to all personal information we may process that relates to U.S. residents protected by applicable federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), and comparable legislation in Colorado, Connecticut, Utah, Texas, Oregon, and other states with comprehensive consumer privacy statutes.

By making this disclosure available online, we also fulfill our obligations under various state data broker registration laws, including those of California, Vermont, Texas, and Oregon, which require transparency regarding data broker practices, data sources, uses, and consumer rights.

Please read this Privacy Policy carefully. It is designed to give you a clear understanding of the personal information we process, how and why we use it, your privacy rights under the law, and how you can exercise those rights if applicable.

1. Our Role as a Data Broker

Audience Mix operates exclusively as a data broker and does not engage in direct consumer data collection. We acquire licensed data from third-party suppliers and data providers that aggregate information across a range of lawful sources, such as mobile applications, digital platforms, and commercial data exchanges.

We are currently registered or in the process of registering as a data broker in the following U.S. states:

California – Pursuant to Cal. Civ. Code §§ 1798.99.80–88 (California Data Broker Registration Law)
Vermont – Pursuant to 9 V.S.A. § 2446
Oregon – Pursuant to Oregon Senate Bill 619 (effective January 1, 2024)
Texas – Pursuant to the Texas Data Privacy and Security Act (HB 4, effective July 1, 2024)

In each of these jurisdictions, we meet the statutory definition of a "data broker" and comply with applicable registration and public disclosure obligations, including posting this privacy policy and any required supplemental statements.

We do not collect personal information directly from individuals. Instead:

We license data from contracted third-party data suppliers that are required, by contract, to represent and warrant that they have:
- Collected the data in compliance with all applicable state and federal privacy laws;
- Provided meaningful notice and the opportunity for consumers to exercise rights, including the right to opt out of sale or sharing;
- Affirmed that the data may lawfully be transferred to downstream recipients, such as Audience Mix, for advertising and analytics purposes.

We do not receive or process directly identifiable information, such as full names, personal email addresses, phone numbers, or government-issued identifiers.

The data we license is typically limited to pseudonymized identifiers and related behavioral attributes, including:

Mobile advertising IDs (MAIDs)
Hashed emails
IP addresses
Cookie IDs and other digital tracking identifiers

We take active steps to avoid the ingestion of sensitive personal information and apply internal protocols to ensure that licensed data is pseudonymized and limited to information needed for legitimate commercial purposes.

We do not knowingly process personal data relating to individuals under the age of 16. Furthermore, we do not knowingly license or retain any data relating to individuals under the age of 13. If we learn that any such data has been provided to us, we will promptly delete it in accordance with our obligations under the Children’s Online Privacy Protection Act (COPPA) and applicable state laws.

2. Types of Personal Information We Process

Audience Mix processes only pseudonymized data acquired from authorized third-party sources. We do not collect data directly from consumers, nor do we receive or maintain data that is directly identifiable. The categories of personal information we process include the following:

Identifiers: This includes hashed email addresses, mobile advertising IDs (MAIDs), cookie IDs, and IP addresses. These identifiers are used to help form non-personalized audience segments across digital ecosystems.
Commercial Behavior: Information reflecting consumer purchasing trends, brand affinities, loyalty activity, and past transactions. This data is typically modeled at the device or household level and used for interest-based segmentation.
Browsing and Interaction Data: Aggregated interaction data such as time spent on particular types of websites, page views, ad impressions, click-throughs, and general engagement with digital media.
General Geolocation: Coarse geolocation data, generally restricted to the city or ZIP code level. This information is used for approximate regional targeting and market trend analysis.
Demographic Indicators: Modeled characteristics including age group, income range, gender assumptions, family size, or education level. This information supports demographic-based segmentation, not individual profiling.
Inferences: Behavioral or predictive classifications derived from aggregated datasets, such as interests in specific categories (e.g., health & wellness, luxury travel, sports enthusiasts). These are not tied to known identities.

We do not process or retain:

Precise Geolocation Data: We do not use GPS-level or fine-grained geolocation coordinates, nor do we receive signals capable of pinpointing a device’s real-time physical location.
Sensitive Personal Information: We avoid processing any sensitive information under applicable law, including biometric identifiers, health diagnoses, union membership, political beliefs, sexual orientation, or racial or ethnic origin.
Direct Identifiers: We do not receive or license names, personal addresses, unencrypted email addresses, phone numbers, Social Security Numbers, or any information that directly identifies a natural person.

This approach is designed to minimize risk, preserve consumer anonymity, and comply with applicable state privacy statutes, including specific limitations on the processing of sensitive personal information and requirements for data minimization.

3. Data Sources and Supplier Obligations

All personal information processed by Audience Mix is obtained through formal licensing arrangements with authorized third-party data suppliers. These suppliers may include:

Data Aggregators – entities that compile consumer data from various online and offline sources for resale or redistribution;
Mobile App Publishers – developers or owners of mobile applications who collect user interaction data and make it available for marketing or analytics use;
Other Data Brokers and Analytics Platforms – companies engaged in the collection, modeling, and segmentation of consumer data for digital advertising purposes.

Our supplier relationships are governed by written contracts that impose the following legal obligations on each data provider:

Compliance with Laws: Suppliers must collect and process data in compliance with applicable state and federal privacy laws, including but not limited to the CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA, TDPSA, and other similar legislation.
Notice and Consent: Suppliers are required to provide clear and meaningful privacy notices to individuals at or before the point of collection and to obtain all necessary consents or authorizations required under law. Where applicable, this includes honoring consumer opt-out requests for data sales or targeted advertising.
Permissible Use Disclosures: Each supplier must disclose to data subjects that their personal information may be shared, licensed, or sold to downstream recipients such as Audience Mix for purposes of digital advertising, audience creation, or analytics.
Representations and Warranties: Suppliers must warrant that they have a lawful basis to transfer the data to Audience Mix, including any contractual, statutory, or regulatory authority to do so, and that the data does not include prohibited or sensitive categories absent specific legal justification.

Audience Mix does not independently verify the collection practices or consent records of end users. Rather, consistent with standard data broker industry practice, we rely on the contractual representations and warranties of our suppliers as to the lawfulness of the data transfer. We reserve the right to audit supplier compliance or terminate relationships where deficiencies are identified.

This sourcing model enables us to maintain a legally defensible and privacy-conscious data operation while supporting the scalable delivery of privacy-compliant audience segments to our advertising clients.

4. Use of Personal Information

Audience Mix processes personal information exclusively for legitimate business-to-business (B2B) purposes in connection with the digital advertising and marketing ecosystem. The data we license is used to support the delivery of privacy-conscious, pseudonymized audience segments to advertising platforms, publishers, and other third-party partners. Our permitted use cases include:

Audience Creation and Segmentation: Using pseudonymized identifiers and behavioral data to group individuals into aggregated segments (e.g., "sports enthusiasts," "urban commuters") for contextual or behavioral advertising.
Behavioral Ad Targeting: Enabling advertisers and ad-tech partners to deliver targeted ads based on non-identifiable traits and behaviors inferred from aggregated user activity.
Attribution and Measurement: Supporting post-campaign analysis and reporting for advertisers by matching anonymized audience exposure to aggregated campaign performance outcomes (e.g., ad views to purchase behavior).
Campaign Optimization and Analytics: Providing insights that help advertisers adjust campaigns in real time based on broad audience trends and interactions — without ever re-identifying individuals.

We apply contractual and technical controls to ensure our clients and partners use the data only for the above purposes. In addition, we impose restrictions that prohibit the misuse of data in ways that could harm individuals or circumvent legal protections.

Specifically, our data is not used for:

Determining eligibility for credit, insurance, housing, employment, healthcare access, or any other benefits governed by federal or state fair use laws (e.g., FCRA, FHA, or ADA).
Automated profiling in a way that produces legal effects or similarly significant impacts on individuals, such as predictive evaluations of performance, reliability, or personal characteristics in sensitive contexts.
Sensitive Data Targeting: We prohibit targeting based on sensitive characteristics, including race or ethnicity, health conditions, political or religious affiliation, or precise geolocation data.

Furthermore, Audience Mix does not re-identify any individual, and we take measures to prohibit re-identification attempts by our clients, partners, or downstream users. Any such activity would constitute a material breach of contract and trigger legal and enforcement remedies.

This limited, purpose-bound use of data helps us ensure compliance with applicable privacy laws and maintain a responsible and defensible data brokerage model.

5. Recipients of the Data

Audience Mix may disclose, license, or otherwise make available pseudonymized audience segments to downstream recipients within the digital advertising and analytics ecosystem. These recipients include:

Programmatic Advertising Marketplaces – such as LiveRamp, TransUnion, and similar onboarding platforms that assist with identity resolution, audience activation, and cross-platform delivery.
Demand-Side Platforms (DSPs) and Supply-Side Platforms (SSPs) – including technology providers that facilitate the real-time buying and selling of digital advertising inventory based on pseudonymized audience data.
Advertisers and Advertising Agencies – who utilize licensed audience segments for lawful marketing, targeting, or performance analytics.
Measurement and Attribution Vendors – partners that assist in determining the effectiveness of digital campaigns through anonymized exposure and conversion tracking.

All data recipients are bound by written agreements that strictly limit their use of the data to the specific purposes permitted by Audience Mix. These contracts require that recipients:

Use the data only for advertising-related purposes, such as targeting, measurement, or campaign optimization;
Refrain from attempting to re-identify any individual associated with the data;
Implement reasonable safeguards to prevent unauthorized access, disclosure, or secondary use;
Comply with all applicable privacy laws and regulatory requirements.

We do not license data to any recipient that intends to use it for creditworthiness assessments, insurance underwriting, employment decisions, housing eligibility, or any other purposes prohibited by applicable law or regulation.

Audience Mix monitors its data licensing relationships and reserves the right to suspend or terminate access to any recipient that fails to comply with contractual or regulatory obligations.

6. Consumer Rights by State

Depending on your state of residence, you may have certain rights under state privacy legislation that govern how your personal information is collected, processed, and shared. Audience Mix is committed to honoring all applicable consumer rights under relevant U.S. state laws.

The rights commonly granted to residents in states with comprehensive privacy laws include:

Right to Know – You have the right to know what categories of personal information are being collected, the purposes for which they are used, and the categories of third parties to whom the data may be disclosed or sold.
Right to Access – You may request access to a copy of the personal information that we have processed about you.
Right to Delete – You may request the deletion of certain personal information collected or maintained about you, subject to applicable legal exceptions.
Right to Correct – You may request that we correct inaccuracies in your personal information.
Right to Opt Out – You may opt out of the sale or sharing of your personal information for targeted advertising or cross-context behavioral advertising purposes.
Right to Appeal – If we deny your request, you have the right to appeal our decision and receive an explanation.
Right to Data Portability – You may request that we provide your personal data in a portable and readily usable format, to the extent feasible.
Right to Non-Discrimination – You have the right not to be discriminated against for exercising your privacy rights.

These rights are granted under laws such as:

California Consumer Privacy Act (as amended by the CPRA)
Colorado Privacy Act (CPA)
Virginia Consumer Data Protection Act (VCDPA)
Connecticut Data Privacy Act (CTDPA)
Utah Consumer Privacy Act (UCPA)
Oregon Consumer Privacy Act (OCPA)
Texas Data Privacy and Security Act (TDPSA)
Montana Consumer Data Privacy Act (MCDPA)
Tennessee Information Protection Act (TIPA)
Other emerging or future U.S. state laws with similar provisions

Audience Mix will process consumer rights requests in accordance with applicable laws, including required verification procedures, response timeframes, and documentation protocols. Additional instructions on how to submit such requests can be found in Section 7.

7. How to Exercise Your Rights

To submit a consumer privacy request, you may contact Audience Mix using one of the following methods:

Email: Send your request to privacy@audiencemix.net with a subject line indicating the nature of your request.
Mail: Audience Mix – Attn: Privacy Officer
2232 Dell Range Blvd, Suite 245
Cheyenne, WY 82009

When submitting your request, please include the following information to enable us to verify and process it:

Your full name
Your state of residence
The type of request being made

To verify your identity, we may request additional non-identifying data points such as a hashed email address, device advertising ID, or other pseudonymized identifiers associated with the data we process. This is to ensure we are fulfilling privacy rights without compromising the security of any personal information.

You may also designate an authorized agent to act on your behalf. If you choose to do so, the agent must provide:

A valid, written authorization signed by you; and
Proof of their identity and authority to act on your behalf.

Audience Mix will respond to verifiable consumer requests in accordance with applicable legal timeframes (typically within 45 days), and may extend the response period once by an additional 45 days when necessary, with prior notice.

Appeals of denied requests may be submitted through the same contact channels listed above. Please include the term "Appeal" in your subject line or communication header.

8. Opting Out of Sale or Sharing

Residents of certain U.S. states have the right to opt out of the sale or sharing of their personal information for targeted advertising and cross-context behavioral advertising purposes. Audience Mix honors and facilitates this right in accordance with applicable law.

To exercise your opt-out rights, you may:

Submit a Do Not Sell or Share My Personal Information form: https://www.audiencemix.net/limit-the-use-of-my-sensitive-infor – This form will enable you to communicate your opt-out request electronically in a secure manner.
Email: Send your opt-out request to privacy@audiencemix.net with the subject line: "Do Not Sell or Share."
Enable the Global Privacy Control (GPC): We honor browser-based GPC signals as a valid opt-out mechanism in accordance with CPRA regulations and industry standards. When we detect a GPC signal associated with your browser or device, we will treat it as a request to opt out of the sale or sharing of your personal information.

Upon receipt of a valid opt-out request, Audience Mix will:

Cease the sale or sharing of your personal data with third parties for purposes of targeted advertising;
Disable any data sharing used to support cross-context behavioral advertising practices;
Maintain a record of your opt-out preference in accordance with applicable recordkeeping obligations.

You may exercise your opt-out rights at any time and without discrimination. If you use multiple devices or browsers, you will need to opt out separately for each one, unless and until the GPC signal is enabled consistently across all platforms.

9. Cookies and Tracking Technologies

Audience Mix does not collect cookies, device identifiers, or other tracking data directly from visitors to this website. We do not deploy pixels, analytics tools, or other client-side technologies to gather personal information.

Instead, we license pseudonymized data—including cookie-derived identifiers—from authorized third-party data suppliers, who represent and warrant that all such data was collected in compliance with applicable laws, including notice and consent obligations.

We use this licensed data to build audience segments for programmatic advertising and analytics purposes. For more information about how our partners collect data, please refer to their individual privacy policies.

10. Data Retention

Audience Mix retains pseudonymized personal information only for as long as is necessary to fulfill the specific business purposes for which the data was licensed and processed, or as required by applicable law or contractual obligation.

Unless a longer retention period is mandated, the default data retention timeline is up to 13 months from the date of receipt or last activity. Following the expiration of this period, data is subject to one of the following outcomes:

Aggregation and Anonymization: Data may be transformed into aggregated, non-identifiable formats that are no longer subject to privacy regulations.
Secure Deletion: Data that is no longer necessary and not retained for legal or contractual reasons is permanently and securely deleted.

Audience Mix does not retain direct identifiers or sensitive personal information. All data processed is maintained in a pseudonymized format, and we apply administrative, technical, and contractual controls to ensure that data retention and destruction practices comply with our legal obligations and industry standards.

We periodically review data storage practices and retention schedules to ensure that no personal information is kept beyond what is reasonably necessary for legitimate operational purposes.

11. GDPR / UK Data Subject Rights

Audience Mix does not actively market or direct its services to residents of the European Union (EU) or the United Kingdom (UK). However, in the event that personal data subject to the General Data Protection Regulation (GDPR) or the UK GDPR is processed through third-party sources, the following rights may apply to affected individuals:

Right of Access, Correction, and Deletion: You have the right to request access to your personal data, request that inaccuracies be corrected, or that your data be deleted under certain circumstances.
Right to Object: You may object to certain forms of processing, including profiling or the use of your data for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint: You may file a complaint with your national data protection supervisory authority if you believe your rights have been infringed.

To exercise any of these rights, please contact us by email at privacy@audiencemix.net with "GDPR Request" in the subject line.

Where applicable, Audience Mix relies on legitimate interest as the legal basis for processing data acquired through third-party sources, in accordance with Article 6(1)(f) of the GDPR. We take appropriate measures to safeguard cross-border data transfers, including the use of:

Standard Contractual Clauses (SCCs) approved by the European Commission;
The UK International Data Transfer Addendum where applicable;
Data Privacy Framework (DPF) participation where eligible.

These safeguards are designed to ensure that any personal information subject to EU or UK data protection laws is afforded an adequate level of protection in compliance with regulatory standards.

12. Accessibility

Audience Mix is committed to ensuring that this Privacy Policy is accessible to all individuals, including those with disabilities. If you require this policy in an alternative format—such as large print, braille, audio, or a language other than English—please contact us using the information below:

Email: privacy@audiencemix.net

We will make reasonable efforts to accommodate your request in a timely and effective manner, consistent with applicable accessibility standards and legal requirements.

13. Contact Us

For questions, privacy requests, or complaints, please contact:
Audience Mix, LLC
2232 Dell Range Blvd, Suite 245
Cheyenne, WY 82009
Email: privacy@audiencemix.net

14. Updates to This Policy

Audience Mix may revise or update this Privacy Policy periodically to reflect changes in legal requirements, industry standards, our data practices, or service offerings. The "Last Updated" date at the top of this document indicates when the most recent changes were made.

If we make any material or substantive changes to the policy—such as changes in the types of personal data we process, how we use or share it, or your rights—we will notify users by posting a prominent notice on our website or by other appropriate means before the changes take effect.

Your continued use of our website, services, or data after any such updates constitutes your acknowledgment and acceptance of the revised Privacy Policy. We encourage you to review this Policy regularly to stay informed about our data handling practices.

Requests from 2024:

Requests to delete personal information: 0

Requests to know or access what personal information was collected: 0

Requests to know what personal information was selling or sharing and to whom: 0

Requests to opt out of sale or sharing of personal information: 0

Requests to limit the use and disclosure of sensitive personal information: 0