Privacy
Policy

We collect several categories of information to provide and improve the Services:

1.1 Information You Provide

• Account Information: Company name, contact name, email address, phone number, business address, and password credentials when you register for an account.
• Campaign and Creative Information: Campaign briefs, line items, creative assets, and targeting parameters you configure in the platform.
• Audience Information: First-party audience segments and related identifiers you upload or direct us to activate, which you confirm you are entitled to use.
• Billing Information: Subscription plan and seat count, billing contact, and invoicing details associated with your account.
• Communications: Content of messages, support tickets, and feedback you submit to us.

1.2 Information Collected Automatically

• Usage Data: IP addresses, browser type, device information, pages visited, time spent on pages, and referring URLs.
• Campaign Events: Delivery and reporting events such as impressions, clicks, and view-through activity recorded across the campaigns you run.
• Cookies and Tracking: We use essential cookies for authentication and session management. Analytics cookies collect aggregated usage data.

1.3 Information from Third Parties

• Vendors that help us operate and secure the platform, such as cloud hosting, email delivery, and analytics providers.
• Partners and services you choose to authorize or link to your account.
• Publicly available sources used to keep business contact details accurate.

We use the collected information for the following purposes:

• To provide, maintain, and improve the Services.
• To run, serve, and measure the campaigns you configure, and to report on their performance.
• To activate first-party audiences on your instruction, with consent carried through from collection.
• To communicate with you about your account, updates, and support inquiries.
• To detect, prevent, and investigate fraud, platform abuse, and invalid activity.
• To comply with legal obligations and enforce our agreements.
• To analyze usage patterns and improve platform performance and user experience.
• To send relevant product communications (with your consent where required by law).

Under the PDPO, we collect and use personal data for the purposes described above and for purposes directly related to them. We do not use personal data for a new purpose without your prescribed consent, unless permitted or required by law.

We do not sell your personal data. We may share information in the following circumstances:

• Service Providers: With trusted vendors who help us operate the platform (cloud hosting, email delivery, analytics, and support tooling), under contracts that limit their use of the data.
• Partners You Authorize: With parties you direct us to share data with as part of running your campaigns.
• Legal and Regulatory: With authorities or as required by applicable law, court order, or governmental regulation.
• Business Transfers: In a merger, acquisition, or sale of all or a portion of our assets.
• With Your Consent: With your explicit direction or consent.

We maintain technical and organizational measures designed to protect your information:

• Encryption of data in transit using TLS and of stored data, with access controls at every layer.
• Hashing of audience identifiers before activation, so raw identifiers are not used in targeting.
• Multi-factor authentication and role-based access controls across the platform.
• Penetration testing on a scheduled cadence, with findings tracked to resolution.
• Employee training on data protection and privacy practices.

• The duration of your account and use of the Services.
• Legal obligations that require us to keep certain records.
• Pending or anticipated litigation or regulatory inquiries.

Under the PDPO you have the right to request access to and correction of the personal data we hold about you. Depending on your jurisdiction and the circumstances, you may also have the following rights:

• Data access request: Request a copy of the personal data we keep about you.
• Correction: Request correction of inaccurate or incomplete information.
• Direct marketing: Object to the use of your personal data for direct marketing at any time.
• Deletion: Request deletion of your personal data, subject to legal retention obligations.
• Portability: Request transfer of your data in a structured, machine-readable format, where applicable.
• Limiting processing: Ask us to limit processing under certain circumstances, where applicable.

We will not use your personal data for direct marketing unless you have given us your consent, or indicated no objection, in accordance with Part 6A and Part 6B of the PDPO. You can opt out at any time by contacting us at privacy@cebaroba.com. We will respond to rights requests within the timeframe required by applicable law.

If you are in Hong Kong, you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD). Where other data protection laws apply — for example the EU GDPR, or US state privacy laws such as the CCPA/CPRA — we handle rights requests in accordance with those laws.

Consent choices are carried through from collection to activation, so the preferences people express follow their data as it moves across the platform. We use essential cookies for authentication and session management, and analytics cookies for aggregated measurement. In Hong Kong there is no dedicated cookie statute; we follow the PCPD's guidance on online tracking and seek consent where required. You can control cookies through your browser settings, and the Advertising Policy describes the standards we apply to the campaigns that run on the platform.

As a global advertising platform, your information may be transferred to and processed in countries other than Hong Kong. Section 33 of the PDPO (which would restrict cross-border transfer of personal data) is not in force; nonetheless, we apply contractual and due-diligence safeguards designed to protect personal data transferred outside Hong Kong, and we use Standard Contractual Clauses where applicable.

• Terms of Service — the agreement that governs your use of the platform.
• Refund Policy — subscription billing, cancellations, and refunds.
• Advertising Policy — the content standards every campaign must meet.