Last Updated April 19th, 2019

Surfside Solutions, Inc. ("SURF") is a mobile advertising technology company. SURF provides this privacy policy to inform you how our proprietary technology processes information for individuals in the U.S. obtained via digital advertisers, website owners, App owners, and other businesses. This policy also outlines SURF's privacy practices on our corporate website, http://www.surfside.io.

Surfside's Technology Privacy Practices As explained below SURF's technology collects information about the location of mobile devices over time, and processes it to determine geographic-location segments that will be used to help make the digital advertisements consumers' see more relevant. How do we collect information via our technology? We do not collect information directly from individuals. We collect information from our partners, which are usually mobile advertising networks, mobile websites, supply side platforms and mobile apps. These partners deliver advertising onto your mobile device. In addition, we may collect some information directly from our advertisers or from third parties if required and provided by our advertisers.

What types of information do we collect via our technology?

Through our partners we may collect various types of information. For example, from the ad requests your device makes, we may obtain the latitude and longitude (i.e., lat/long) coordinates from one of our mobile app partners. In addition, we may obtain your device type, the identifiers associated with your mobile device, your mobile browser type, operating system, and IP address. We may collect this information over time and across websites, mobile apps, and devices. If requested by our partners, we may combine the information from the geographic-location segments with information obtained directly from customers or with information obtained from third parties on our customers' behalf. We may also supplement the information we collect via our technology with audience information from third parties, and we may use personally identifiable information ("PII") from third parties such as address and last name to match the data sets, but we do not use any PII directly for ad delivery and targeting purposes, and we do not merge the PII with our Geo-location segments or store this PII in our DMP or DSP.

What is Precise Location Data ("PLD")?

We use collected information to target and display advertisements that may be of interest to you. We may provide the collected information to our third party partners and agents to improve targeting, make and create offers, provide reporting to advertisers and clients, and to improve our systems and products.

Choice Mechanisms

If you do not want the information used for the purpose of serving you targeted ads while you access the third-party applications of our mobile partners, we offer a number of choice mechanisms. Please note that none of our choice mechanisms will opt you out of being served advertising. You will continue to receive generic ads. Your opt-out choice will be applied only to the browser or device that has opted out. In Ad opt-out - You may opt-out by selecting the Ad Choices icon within an advertisement targeted by SURF and following the instructions listed within the opt-out page. Mobile Device Settings - If you'd like to adjust your setting regarding the use of precise location data by third parties such as SURF, you may do so via your device settings. SURF honors the mobile device settings for Android and Apple iOS devices. To exercise this opt-out please visit the privacy settings of your Android or iOS device and select "limit ad tracking" (Apple iOS) or " opt-out of interest based ads" (Android). Submit your Device ID – Alternatively, you may send an email to opt-out@Surfmobile.com including the IDFA or Advertiser ID of your device. Please allow up to seven days for your request to take effect. For devices where we see such a request has been made SURF will not longer use device information for the purposes of serving behavioral advertising. Please note that these choice mechanisms won't impact previously collected precise location information that has been de-identified. Also, by turning off location-based services, you will lose all the benefits of those location-based services on your phone.

Why do we use the information?

We store and use information to develop geographic-location segments to help make the digital ads more relevant, and for ad delivery, analytics, and reporting purposes. We may also use the information to enhance our advertising and analytics capabilities, and to offer analytics and data enhancement services to our customers for their marketing and advertising purposes. How do we safeguard your privacy? We do not collect any PII via our technology that allows us to identify an individual directly such as email address or telephone number. In addition, our technology uses de-identification techniques such as pseudonymous identifiers associated with your mobile device to help safeguard your privacy. If we combine information collected via our technology with information we receive from third parties, we do not use any PII, such as address or last name, directly for ad delivery and targeting purposes, although it may be obtained by us in connection with such uses. We store any PII we receive from third parties separately from our Geo-location segment information. Website Privacy Practices Our website is primarily designed to provide information to our clients, which are typically businesses. SURF collects information from our website, www.surfside.io, when you choose to provide it to us, including but not limited to: name, address, telephone number, or email address. For example, you may choose to send information about yourself in an email, or by completing a form on our website. We use this information only to contact you to respond to your inquiry. We may also collect information from visitors to this website, including your IP host address, pages viewed, browser type, Internet browsing and usage habits, Internet Service Provider, domain name, the time/date of your visit to this Website, the referring URL and your computer's operating system. We use this information to analyze traffic on our site and to improve our services. Controlling the Use of Your Information If you wish to not have your location information collected, you can turn off this capability in the settings of your mobile device. If you wish to not receive tailored advertising based on our services, you can opt-out by adjusting your advertising ID settings on your mobile device. We encourage you to read the help section of your mobile operating system to learn how to turn off the collection of location information or to opt-out from tailored advertising. You can also opt-out of our tailored advertising services by clicking the AdChoices icon in or next to the ads in which it appears or using your mobile device to go to our AdChoices mobile opt-out page. Please note that this does not opt you out of being served all advertising. You can also turn off location settings on your device at any time to disable our collection and use of the location data obtained from your device. You will continue to receive generic ads and may receive tailored ads from other companies. SURF adheres to the Self-Regulatory Principles for Online Behavioral Advertising and the Application of Self-Regulatory Principles to the Mobile Environment published by the Digital Advertising Alliance (DAA). We honor the DAA's opt out mechanism for data collection and use in connection with mobile applications. To learn more about the DAA and your choices, please visit www.aboutads.info/choices.

Disclosure of Information to Third Parties

We do not rent, sell, or share PII obtained via our technology or our website with non-affiliated third parties without user consent. We may, however, share PII obtained from other sources with trusted third-party partners. These third party partners are prohibited from using the information for purposes other than performing services as contracted for by and with SURF. We may license information collected from our technology or derived therefrom, including geographic-segment information and information about the types of locations consumers visit over time, in order to provide our services. When providing our services to our customers, we do not provide any PII or precise Geo-location data to them. We may disclose information about you to third parties when obligated to do so by law and in order to investigate, prevent, or take action regarding suspected, or actual prohibited activities, including to fraud and situations involving potential threats to the physical safety of any person. Finally, we may transfer information, including any PII, to a potential or actual successor entity in connection with a corporate merger, consolidation, sale of assets, bankruptcy, or other corporate change. If we are involved in a merger, acquisition, or sale of all or a portion of our assets, you will be notified via email and/or a prominent notice on our web site of any change in ownership or uses of the information we have collected about you, as well as any choices you may have regarding your PII. Information Security and Data Retention The security of your information is important to us. We have implemented security measures to help protect the information in our care, both during transmission and once it is received. No method of transmission over the Internet or method of storage is 100% secure; therefore, while the company strives to use commercially acceptable means to protect your information, it does not guarantee absolute security. Information Relating to Children This Website and our products and services are designed for those 18 years of age and older. We do not knowingly collect PII from anyone under the age of 13. If we are made aware that we have received PII from someone under 13, we will use reasonable efforts to promptly remove that information from our records.

California Residents

If you are a California resident, this section applies to you. For purposes of this section, “personal information” has the meaning given in the California Consumer Privacy Act of 2018 (“CCPA”), but does not include certain de-identified or aggregated information, information publicly available in government records, or certain information excluded from the CCPA’s scope. As a California resident, you are entitled to certain privacy rights further explained below. These rights are not absolute and are subject to exceptions. We may be required or permitted by law to decline your request. When requesting to exercise your right to access and deletion under the CCPA, only you, a person that you authorize to act on your behalf, or an entity registered with the California Secretary of State that you authorize to act on your behalf, may make such a verifiable request. The right to request a copy of the categories of personal information and specific personal information collected about you in the last 12 months.To do so, please navigate to your Account Settings page. The right to delete personal information collected from you, except as necessary to comply with legal obligations, detect, prevent and mitigate security incidents, bugs or fraudulent, malicious, deceptive or illegal activity, or as otherwise provided under applicable law. The right not to have your personal information sold to third parties, if applicable. Surfside does not sell your name, address, government identification, medical recommendation or identification, or other similar personal information. However, California law broadly defines what constitutes “personal information” such that cookie and technical information shared with targeted advertising vendors may constitute a “sale” of “personal information.” You may find more information about sales of information at https://surfside.io/optout.html The right not to be discriminated against for exercising your privacy rights described above. For privacy and security purposes, we are required to verify your request before we fulfill your request. Please authenticate into your account and follow the instructions provided to you after your submit your request via the Account Settings page. If you are a non-account holder or an authorized representative, we will require you to verify your identity or the validity of your representation before fulfilling your request for privacy and security purposes. To verify your identity or representation, we may ask for you to share data points as described in this Privacy Policy to be able to look up your data and ensure you are who you claim to be. You may also be required to provide us with a signed declaration under penalty of perjury. In addition, if you are an authorized representative, we may request: a copy of your valid government-issued identification or other proof of identity acceptable to us in our sole discretion; and, a power of attorney pursuant to California Probate Code sections 4000 – 4465 or as otherwise sufficient in our discretion to establish your authority as an authorized representative. You may contact us at privacy@surfside.io with any non-account holder or authorized representative requests, or if you have questions or concerns about our privacy practices or your rights.

Data Transfers

Your personal information may be stored and processed in any country where we have facilities or in which we engage service providers. Those countries may not have the same data protection laws as the country in which you initially provided that information. When we transfer information we collect about you to other countries, we will protect it as described in this Privacy Policy. You consent to the transfer of personal information to countries outside of your country of residence, including the United States. Changes to this Privacy Policy This privacy policy is subject to change. We will post any privacy policy change on this page and, if the changes are significant, we will provide a more prominent notice. We will also update the effective date of the policy.

Contact Information

For questions or concerns relating to SURF's privacy practices, please email privacy@surfside.io

These terms and conditions apply to Media Company's provision of the Services. These terms and conditions are incorporated into each Accepted Order and, together with the Accepted Order, constitute a binding contract between Client and Media Company ("Agreement").

1. Definitions. In these terms and conditions, the following terms shall have the following definitions:

A. "Accepted Order" means an Order signed by Client and Media Company.

B. "Agreement" has the meaning set forth in the preamble.

C. "Client" means the customer or client listed on an Accepted Order.

D. "Client Data" means data, media, content, information, or other materials that: (i) Client provides to Media Company in order for Media Company to perform the Services; or (ii) Media Company collects using the Collection Devices while performing the Services under this Agreement.

E. "Collection Devices" means data harvesting tools and methods used by Media Company which may include a pixel (or other script or code) installed on Client's website, an integrated mobile software development kit, an application programming interface, or other mutually agreed upon means.

F. "Deliverables" means the deliverables specified in an Order.

G. "Effective Date" means the date an Accepted Order is signed by Client and Media Company.

H. "Media Company" means Surfside Solutions Inc., a Delaware corporation.

I. "Order" means a written order, in the form made available by Media Company from time to time, from Client to Media Company for the provision of the Services.

J. "Party" means Client or Media Company.

K. "Parties" means Client and Media Company.

L. "Personally Identifiable Information" means any information used, or intended to be used to identify a particular individual, including, but not limited to, name, address, telephone number, email address, financial account number, and government-issued identifier.

M. "Services" means the data analytic services to be provided by Media Company pursuant to an Accepted Order. The Services generally consist of Media Company collecting Client Data and then interfacing, combining, or otherwise enhancing the Client Data with or using the Standard Data to create Deliverables.

N. "Standard Data" means data, media, content, information, or other materials that Media Company maintains as part of its service offerings and that Media Company otherwise collects outside of its engagement with Client.

2. Fees and Expenses/Payment Terms.

A. Client shall pay Media Company the fees set forth on the applicable Accepted Order. Client shall pay all properly invoiced amounts due to Media Company within 30 days after Client's receipt of an invoice from Media Company

B. Except for invoiced payments that the Client has successfully disputed, all late payments shall bear interest at the lesser of the rate of 12% per year or the highest rate permissible under applicable law. Client shall also reimburse Media Company for all reasonable costs incurred in collecting any late payments, including, without limitation, attorneys' fees. In addition to all other remedies available under this Agreement or at law (which Media Company does not waive by the exercise of any rights hereunder), Media Company shall be entitled to suspend the provision of any Services if the Client fails to pay any undisputed fees when due hereunder and such failure continues for 5 days following written notice thereof.

C. Client shall be responsible for all sales, use and excise taxes, and any other similar taxes, duties and charges of any kind imposed by any federal, state or local governmental entity on any amounts payable by Client hereunder; provided, that, in no event shall Client pay or be responsible for any taxes imposed on, or regarding, Media Company's income, revenues, gross receipts, personnel, or real or personal property or other assets.

3. Data Collection and Ownership Rights.

A. Client maintains ownership of all Client Data. Client hereby grants Media Company a non-exclusive, worldwide, perpetual, royalty free, fully paid up, license to use Client Data: (i) to perform the Services and create the Deliverables; and (ii) for Client's internal business purposes. Client further authorizes Media Company to access Client's website(s) and use Collection Devices to perform the Services. Client shall not reverse engineer, decompile, disassemble, or interfere with the Collection Devices.

B. Media Company maintains ownership of all Standard Data and Deliverables. Effective upon payment of the applicable fees to Media Company, Media Company grants to Client a non-sublicensable, non-transferable license to use the Deliverables for Client's internal marketing and advertising purposes. Client shall not share the Deliverables with any third party or use the Deliverables except as specified herein. All Collection Devices are the exclusive property of Media Company.

4. Confidential Information. All non-public, confidential or proprietary information of a Party ("Disclosing Party"), including, but not limited to, trade secrets, technology, information pertaining to business operations and strategies, and information pertaining to customers, pricing, advertising, data, promotion and marketing (collectively, "Confidential Information"), disclosed or otherwise made available by such Disclosing Party to the other party ("Recipient") in connection with the provision of the Services and this Agreement, whether orally or in written, electronic or other form or media, and whether or not marked, designated or otherwise identified as "confidential," is confidential, and shall not be disclosed by Recipient without the prior written consent of Discloser. The confidentiality provisions set forth herein shall survive termination or expiration of this Agreement for a period of 5 years. Confidential Information does not include information that the Recipient can demonstrate by documentary evidence: (i) is or becomes generally available to the public other than through Recipient's breach of this Agreement; (ii) is communicated to Recipient by a third party that had no confidentiality obligations concerning such information; (iii) was known to Recipient at the time of disclosure; or (iv) was independently developed by Recipient without reference to Discloser's Confidential Information. Each Party shall be entitled, in addition to any other remedies available to it, to injunctive relief for any violation of this Section.

5. Representations and Warranties.

A. Media Company represents and warrants to Client, as of the Effective Date, the following:

(i) It shall perform the Services using personnel of required skill, experience, and qualifications and in a professional and workmanlike manner in accordance with generally accepted industry standards for similar services.

(ii) The Services and Deliverables will be in conformity in all material respects with all requirements or specifications stated in the applicable Order.


B. Media Company's sole and exclusive liability and Client's sole and exclusive remedy for breach of the warranties contained in Section 5.A shall be as follows:

(i) Media Company shall use commercially reasonable efforts to cure any such breach; provided that if Media Company cannot cure such breach within a reasonable time after Client's notice of such breach, Client may at its option, terminate this Agreement by serving written notice to Media Company of termination in accordance with this Agreement.

(ii) In the event the Agreement is terminated pursuant to Section 5.B(i) above, Media Company shall within 30 days after the effective date of termination, refund to Client any fees paid by Client as of the date of termination for Services, less a deduction equal to the fees for receipt or use of the Deliverables or Services up to and including the date of a termination on a pro-rated basis.

(iii) The foregoing remedy shall not be available unless Client provides written notice of such breach within 30 days after delivery of such Service or Deliverable to Client.

C. Client represents and warrants to Media Company, as of the Effective Date, the following:

(i) Client has the requisite power and authority to execute the applicable Order and to enter into the transactions contemplated in this Agreement, including without limitation, granting the licenses set forth in Section 3.A

(ii) Client has good and marketable title to, or a valid license to use and transfer, all Client Data. Client has complied with all applicable laws and regulations in collecting (or allowing Media Company to collect), transferring, and using such Client Data. Where required, Client has given proper notices and received all proper consents in collecting (or allowing Media Company to collect) the Client Data.

(iii) Client shall not utilize the Services or Deliverables for any purpose other than that for which it was provided to Client by Media Company, unless Client obtains Media Company's prior written consent. Client shall not disclose or otherwise provide the Deliverables to any third party, unless Client obtains Media Company's prior written consent.

(iv) Client shall not merge the Deliverables with any Personally Identifiable Information otherwise in Client's control or possession. Client shall maintain and store the Deliverables separate and apart from the location of any Personally Identifiable Information and shall ensure access to the Deliverables is subject to commercially reasonable security measures.

(v) Client shall notify Media Company within three (3) business days of Client's discovery of any unauthorized access to the Deliverables and provide Media Company with any additional information concerning any unauthorized access as Media Company may reasonably require.

(vi) Client has clearly and conspicuously posted on Client's website a notice containing the following information:

(a) That Client, or third parties, including Media Company, may collect data on Client's website from users that is used for retargeted advertising, interest-based advertising, and other similar or related purposes;

(b) A description of the types of data, including Personally Identifiable Information, that is collected from users;

(c) A description of how data is collected (e.g. by using the Collection Devices);

(d) An explanation of the purposes for which user data is collected by, or will be transferred to, third parties, that includes disclosure of the linking of two or more devices likely used by the same user, if applicable;

(e) A conspicuous link to an opt-out mechanism that allows a user to opt-out of data collection for retargeted advertising or interest-based advertising purposes.

(vii) Client will comply with all applicable laws that relate to individual third party privacy and publicity rights and will be solely responsible for the operation of all websites and applications owned or operated by Client.

6. Indemnification. Client shall defend, indemnify and hold harmless Media Company and Media Company's subsidiaries, affiliates, successors, and assigns and their respective owners, managers, directors, officers, employees, and agents, from and against any and all loss, damage, liability, claim, deficiency, action, judgment, interest, award, penalty, fine, cost or expense, including reasonable attorney and professional fees and costs, and the cost of enforcing any right to indemnification hereunder arising out of or related to: (i) Client's breach of the representations and warranties contained in Section 5.C; or (ii) Client's violation of applicable law.

7. Term and Termination.

A. The term of this Agreement commences on the Effective Date and continues until the Services are completed, or until this Agreement is earlier terminated as provided herein.

B. Either Party may terminate this Agreement by providing 30 days written notice to the other Party.

C. Upon termination of this Agreement for any reason, Client shall pay Media Company for all fees incurred prior to the effective date of termination.




9. Waiver. No waiver by either Party of any of the provisions of this Agreement is effective unless explicitly set forth in writing and signed by such Party. No failure to exercise, or delay in exercising, any rights, remedy, power, or privilege arising from this Agreement operates or may be construed as a waiver thereof. No single or partial exercise of any right, remedy, power, or privilege hereunder precludes any other or further exercise thereof or the exercise of any other right, remedy, power, or privilege.

10. Subcontractors. Client acknowledges that Media Company may use subcontractors to perform all or a portion of the Services, provided that such subcontractors shall be bound by confidentiality provisions substantially similar to those contained herein.

11. Relationship of the Parties. The relationship between the Parties is that of independent contractors. Nothing contained in this Agreement shall be construed as creating any agency, partnership, joint venture, or other form of joint enterprise, employment, or fiduciary relationship between the parties, and neither party shall have authority to contract for or bind the other party in any manner whatsoever.

12. Governing Law. All matters arising out of or relating to this Agreement are governed by and construed in accordance with the internal laws of the State of New York without giving effect to any choice or conflict of law provision or rule (whether of the State of New York or any other jurisdiction) that would cause the application of the laws of any jurisdiction other than those of the State of New York. Any litigation arising out of this Agreement shall be litigated exclusively in the state or federal courts located in the State of New York.

13. Cumulative Remedies. The rights and remedies under this Agreement are cumulative and are in addition to and not in substitution for any other rights and remedies available at law or in equity or otherwise.

14. Notices. All notices, requests, consents, claims, demands, waivers and other communications hereunder shall be in writing.

15. Severability. If any term or provision of this Agreement is invalid, illegal, or unenforceable in any jurisdiction, such invalidity, illegality, or unenforceability shall not affect any other term or provision of this Agreement or invalidate or render unenforceable such term or provision in any other jurisdiction.

16. Survival. Provisions of this Agreement, which by their nature should apply beyond their terms, will remain in force after any termination or expiration of this Agreement including, but not limited to, this Section 16 and the following provisions: Section 3, Section 4, Section 5, Section 6, Section 8, Section 11, and Section 12.

17. Entire Agreement/Amendment and Modification. This Agreement, together with any applicable Orders, constitutes the sole and entire agreement of the Parties, and supersedes all prior or contemporaneous understandings, agreements, negotiations, representations and warranties, and communications, both written and oral. This Agreement may only be amended or modified in a writing that specifically states that it amends this Agreement and is signed by an authorized representative of each Party.