Who we are
Nasrev LLC (“Nasrev”, “we”, “us”) operates an independent real-time bidding advertising exchange. Our registered business address is 8 Holmes Ave, Apt 2, Jersey City, New Jersey, 07306, USA.
This notice explains what personal data we process, why, and what rights you have. It covers both visitors to nasrev.com and individuals whose data passes through our advertising exchange.
Our role
For visitors to our website and for our business contacts, Nasrev is a controller.
For personal data processed through the advertising exchange, Nasrev acts as an independent controller alongside publishers and buyers. Each participant is responsible for its own lawful basis. Where we act as a processor for a partner, our Data Processing Addendum applies.
What we collect
Website visitors
- Contact details you give us — name, email, company, phone, and anything in your message
- Technical data — IP address, browser and device type, referring page, pages viewed
- Cookie data, as described in our Cookie Policy
Through the advertising exchange
- Truncated or full IP address, depending on jurisdiction and consent
- Device and browser identifiers, including mobile advertising IDs (IDFA, GAID) where the user has not opted out
- Approximate geographic location derived from IP address — typically country, region or city
- The domain, application or connected TV app on which the ad opportunity arose, and the ad placement
- User agent, device type, operating system, screen and viewport data
- Consent and privacy signals, including IAB TCF strings, Global Privacy Platform strings and Global Privacy Control
- Interaction events — impressions, viewability, clicks and completions
We do not collect names, email addresses, postal addresses or payment card details through the exchange.
Why we process it
| Purpose | Basis |
|---|---|
| Running the auction | To transmit bid requests, receive bids and select a winning bid. Legitimate interests, or consent where required. |
| Frequency capping | To limit how often the same ad is shown to the same device. Consent where required. |
| Fraud and invalid traffic prevention | To detect bots, spoofing and invalid traffic. Legitimate interests. |
| Measurement and reporting | To report delivery, viewability and spend to partners. Legitimate interests. |
| Billing and reconciliation | To calculate and settle amounts owed. Contract and legal obligation. |
| Security | To protect our systems and investigate incidents. Legitimate interests. |
| Business communication | To respond to enquiries and manage partner relationships. Contract and legitimate interests. |
What we never do
- We do not sell, licence or share bidstream data with data brokers or any third party for their own purposes.
- We do not construct or sell audience segments derived from bidstream data.
- We do not process special category data — health, religion, sexual orientation, political opinions, trade union membership, biometric or genetic data — to target advertising.
- We do not knowingly process personal data of anyone under the age of 16, and we do not permit targeted advertising on properties directed at children.
- We do not attempt to re-identify individuals from pseudonymous identifiers.
Who we share with
- Demand partners — DSPs and buyers receive bid requests containing the data described above in order to bid.
- Supply partners and publishers — receive reporting about what was sold on their inventory.
- Verification providers — MRC-accredited fraud and viewability vendors.
- Service providers — cloud hosting, data storage and analytics providers, bound by contract.
- Authorities — where required by law or to establish or defend legal claims.
A current list of demand partners is available to publishers on request.
International transfers
We are a United States company and process data in the United States and in other regions where our infrastructure operates. Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on the European Commission’s Standard Contractual Clauses together with the UK International Data Transfer Addendum, and carry out transfer risk assessments where required.
Retention
| Data | Retention |
|---|---|
| Bid request and auction logs | Up to 13 months, then deleted or aggregated |
| Aggregated reporting data | Up to 24 months, contains no identifiers |
| Fraud and security logs | Up to 24 months |
| Business contact records | Duration of the relationship plus 6 years for legal and tax purposes |
| Website analytics | Up to 14 months |
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to data portability, and to withdraw consent at any time.
If you are in the United States, you may have the right to know what personal information we collect, to delete it, to correct it, to opt out of sale or sharing, and to limit the use of sensitive personal information. We do not sell personal information as that term is defined in the California Consumer Privacy Act.
To exercise any right, email [email protected]. We will respond within the period required by applicable law, normally within 30 days. Because the data we process through the exchange is pseudonymous, we may need additional information from you — such as the advertising identifier concerned — to locate it, and we may be unable to comply where we cannot identify the data as relating to you.
Opting out of advertising
You can opt out of interest-based advertising through the following industry tools:
- DAA WebChoices and the AppChoices app
- DAAC (Canada)
- EDAA Your Online Choices (Europe)
- Your device settings — Limit Ad Tracking on iOS, Opt out of Ads Personalisation on Android
- The Global Privacy Control signal, which we honour where transmitted
Security
We maintain administrative, technical and physical safeguards appropriate to the sensitivity of the data, including encryption in transit, access controls on a least-privilege basis, network segregation and logging. No system is perfectly secure, and we will notify affected parties and regulators of a breach where required by law.
Changes and contact
We may update this notice. Material changes will be announced on this page with a revised effective date, and partners will be given thirty (30) days’ notice where the change affects them.
Nasrev LLC, 8 Holmes Ave, Apt 2, Jersey City, New Jersey, 07306, USA. Email [email protected].
If you are in the European Economic Area or the United Kingdom and are unsatisfied with our response, you may lodge a complaint with your national supervisory authority.