Privacy Policy:
California Consumer Privacy Act

Effective Date: January 1, 2026

This Supplemental California Consumer Privacy Act (CCPA) Privacy Notice supplements our Privacy Policy and applies only to our processing of personal information that is subject to the CCPA.

NOTICE AT COLLECTION

At or before the time of collection, California residents have a right to receive notice of our privacy practices. California residents can find this information below.

Personal Information Collected. See the section of this Supplemental CCPA Privacy Notice titled “Overview of Personal Information Collected, Disclosed, Sold, and/or Shared” for a list of personal information that may be collected. If we have previously collected personal information in the past 12 months, we may collect that personal information from you.
Uses of Personal Information. See the section of this Supplemental CCPA Privacy Notice titled “Uses of Personal Information” for a list of the purposes for which we use personal information.
Is Personal Information “Sold” or “Shared” for “Cross-Context Behavioral Advertising”? “Yes. See the section of this Supplemental CCPA Privacy Notice titled “Overview of Personal Information Collected, Disclosed, Sold, and/or Shared” for more details. If we have previously “sold” personal information or “shared” personal information for “cross-context behavioral advertising” in the past 12 months, we may “sell” or “share” that personal information if collected from you. See the section of this Supplemental CCPA Privacy Notice titled “Right to Opt Out of ‘Sales’ of Personal Information and/or ‘Sharing’ for ‘Cross-Context Behavioral Advertising’” for instructions on how to opt out of these activities.”
How Long Is Personal Information Retained? To determine the appropriate retention period for personal information, we may consider applicable legal requirements; the amount, nature, and sensitivity of the personal information; certain risk factors; the purposes for which we process your personal information; and whether we can achieve those purposes through other means
Additional Information. For more information on our privacy practices, please review this Supplemental CCPA Privacy Notice and our Privacy Policy. Importantly, the section of our Privacy Policy titled “Your Choices and Privacy Rights” includes important details about how you can exercise some of the rights that you have under the CCPA.

CATEGORIES OF SOURCES FROM WHICH PERSONAL INFORMATION IS COLLECTED

We collect personal information that you provide to us, personal information we collect automatically when you use the Services, and personal information from third-party sources.

OVERVIEW OF PERSONAL INFORMATION COLLECTED, DISCLOSED, SOLD, AND/OR SHARED

The CCPA provides California residents with the right to know what categories of personal information SPAN has collected about them, whether SPAN disclosed that personal information for a business purpose (e.g., to a service provider), whether SPAN “sold” that personal information, and whether SPAN “shared” that personal information for “cross-context behavioral advertising” in the preceding 12 months. California residents can find this information below:


Category of Personal Information Collected by SPAN	Category of Third Parties to Whom Personal Information Is Disclosed for a Business Purpose	Category of Third Parties Whom Personal Information Is Sold and/or Shared
Identifiers	- Service Providers	- Advertising Partners - Analytics Providers
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	- Service Providers	- N/A
Commercial information	- Service Providers - Authorized Resellers, Installers and Distributors	- N/A
Internet or other electronic network activity	- Service Providers	- Advertising Partners - Analytics Providers
Geolocation data	- Service Providers	- Advertising Partners - Analytics Providers
Professional or employment-related information	- Service Providers (in connection with job applications)	- N/A
Inferences drawn from other personal information to create a profile about a consumer	- Service Providers - Authorized Resellers, Installers and Distributors	- Advertising Partners
Personal information that reveals a consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account	- Service Providers	- N/A

USES OF PERSONAL INFORMATION

We may use and disclose the personal information that we collect for the following business and commercial purposes:

Providing the Services, as further described in our Privacy Policy;
Processing to improve the Services and develop new products and services, as further described in our Privacy Policy;
Processing to operate our business, as further described in our Privacy Policy;
Processing for marketing purposes, as further described in our Privacy Policy;
Processing with your consent or direction, as further described in our Privacy Policy;
Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards;
Helping to ensure security and integrity to the extent the use of personal information is reasonably necessary and proportionate for these purposes;
Debugging to identify and repair errors that impair existing intended functionality;
Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your current interaction with SPAN;
Maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar Services;
Providing advertising and marketing services;
Undertaking internal research for technological development and demonstration; and
Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by SPAN, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by SPAN.

RIGHT TO OPT OUT OF “SALES” OF PERSONAL INFORMATION AND/OR “SHARING” FOR “CROSS-CONTEXT BEHAVIORAL ADVERTISING”

We “sell” your personal information or “share” your personal information for “cross-contextual behavioral advertising” to provide you with “cross-context behavioral advertising” about SPAN’s products and services.

You can opt out of the “sale” of personal information and the “sharing” of personal information for “cross-context behavioral advertising” by visiting our cookie permissions banner on the website to view and update your settings, or you can visit the SPAN websites with the GPC signal enabled in your browser. Note that your opt-out choice will be linked to your browser; if you visit from a new device or browser, or clear your browser’s cookies, you may need to renew your choice.

DISCLOSURE REGARDING OPT-OUT PREFERENCE SIGNALS

California residents may opt out of “sales” of personal information and “sharing” of personal information for “cross-context behavioral advertising” that are carried out on www.span.io by broadcasting the opt-out preference signal known as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). To download and use a browser supporting the GPC signal, visit the Global Privacy Control website. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use to visit www.span.io.

DISCLOSURE REGARDING INDIVIDUALS UNDER THE AGE OF 16

SPAN does not have actual knowledge of any “sale” of personal information of minors under 16 years of age. SPAN does not have actual knowledge of any “sharing” of personal information of minors under 16 years of age for “cross-context behavioral advertising.”

DISCLOSURE REGARDING SENSITIVE PERSONAL INFORMATION

SPAN uses and discloses sensitive personal information only for the purposes set forth in Section 7027(m) of the CCPA regulations.

NONDISCRIMINATION

California residents have the right not to receive discriminatory treatment by us for the exercise of their rights conferred by the CCPA.