Privacy Policy

This Privacy Policy (the "Policy") describes how mediaROI processes the personal data of Users (as defined in the Terms of Use, hereinafter referred to as "User", "you" or "your") and is intended to provide the information required under applicable regulations, in particular Regulation (EU) 2016/679 of 27 April 2016 (the "GDPR").

This Policy describes how we collect your personal data, the purposes for which mediaROI processes it, your rights and how to exercise them, as well as information about the cookies and tags used on the Site.

This Policy supplements the Legal Notice & Terms of Use of the website accessible at https://www.mediaroi.io (hereinafter the "Site").

We invite you to read this Policy carefully and regularly. If this Policy is modified, you will be informed via the Site and/or by email.

1. Definitions

Terms used in this Privacy Policy refer either to the definition given in the Terms of Use, or to the definition provided by the GDPR (such as "personal data", "data controller", "processor", "data breach", "processing").

2. Data Controller

mediaROI — a simplified joint-stock company (SAS), registered with the Paris Trade and Companies Register under number 982 440 349, with its registered office at 14 avenue de l'Opéra, 75001 Paris.
Contact: phone: +33 6 40 99 45 00 — email: contact@mediaroi.io (hereinafter referred to as "mediaROI", "we", "us" or "our").

3. How We Collect Data

We may collect your personal data when you create an account on our Site, request a demo, contact us by email, post, or phone, or enter into a contract with mediaROI.

In the course of using our services, we also collect business data necessary to provide our media analytics and reporting service. This data may be transmitted by various means:

• via API connectors to advertising and media platforms (such as Google Ads, Meta Ads, and other media networks);
• via file uploads (campaign data, media reports, etc.);
• via any other data transfer mechanism you initiate from your account.

This business data is processed exclusively for the purposes of the subscribed service and remains under your control.

Google connectors: mediaROI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

If we need information due to a legal, regulatory or contractual obligation, or simply to process your request, we will indicate this to you. If you do not provide mandatory information, we may be unable to process your request.

Optional form fields are left to your discretion.

4. Purposes and Legal Bases for Processing

We process your data solely for the following purposes and on the following legal bases:

• on the basis of contract performance: management of User accounts, including online account creation and tracking of account activity, as well as the use of the services;
• on the basis of mediaROI's legitimate interest in promoting the Site and its services: managing demo requests; maintenance and support; managing the client relationship; sending communications or promotions to Users; tracking the User journey and experience on the Site; improving the quality of the Site, its content and our communications.
• On the basis of consent: sending communications to prospects.
• On the basis of a legal obligation: responding to requests to exercise rights under this Policy.

In particular, business data imported in the course of using the services (campaign data, media statistics, data from API connectors or file imports) is processed exclusively to provide the subscribed service. It is never used for targeted advertising, resale, building commercial databases, or training artificial intelligence models.

5. Data Retention

Your personal data is retained for as long as necessary for the purpose for which it is processed.

• User account management: your data is kept in active storage for the duration agreed in the contract between the Client and mediaROI, then for five years for evidential purposes. All User accounts are automatically deactivated at the end of the contract.
• Communications: 3 years from the last contact with the User or prospect.
• Site audience measurement: your personal data is retained for a maximum of 25 months and anonymized at the end of that period.
• Rights requests: your data will be retained for as long as necessary to process your request, and if applicable for the applicable statutory limitation period.
• Business data (campaigns, media reports): retained for the duration of the contract, then deleted or anonymized within 90 days following termination, unless otherwise required by law or at the Client's express request.

6. Data Recipients

Your data will only be shared for purposes strictly related to those described above: internally, with persons responsible for processing your requests and other operations; with technical service providers responsible for hosting, maintenance and support; and with the relevant Client where applicable.

Business data (campaign data, media statistics, data imported from any advertising platform or file) is not sold or shared with third parties for advertising, targeting, or any purpose unrelated to the provision of the service. It is not used to build commercial databases or train artificial intelligence models. We do not transfer or disclose data to third parties except as necessary to provide the service you have requested.

In the event of an acquisition of mediaROI and/or the Site, or any other operation transferring mediaROI's business to another entity, the User is informed that their data may be transferred to the acquirer or new entity.

7. Incident Notification

Despite all efforts, no method of transmission over the Internet and no method of electronic storage is completely secure. We cannot therefore guarantee absolute security. Our incident notification procedures comply with our legal obligations at both national and European level. We are committed to informing our Clients (and their users) of all matters relating to User account security.

8. Security

To ensure the security and confidentiality of your data, mediaROI uses networks protected by standard security measures. mediaROI takes all reasonable measures to protect your data from loss, misuse, unauthorized access, disclosure, alteration or destruction.

In particular, mediaROI implements appropriate technical and organizational measures, including:

• Encryption of data in transit via TLS/HTTPS;
• Encryption of sensitive data at rest;
• Strict access controls limiting data access to authorized personnel only;
• Regular and secure backup procedures;
• Infrastructure hosted on secure servers compliant with industry standards.

Our security procedures are regularly reviewed and updated.

9. Your Rights

In accordance with applicable personal data protection regulations (GDPR and French Law No. 78-17 of 6 January 1978), you have the following rights over your data:

• Right of access
• Right to rectification
• Right to erasure
• Right to withdraw consent
• Right to data portability
• Right to restriction of processing
• Right to object
• Right to define instructions regarding the use of your data after your death

You also have the right at any time, without justification, to object to the processing of your data for commercial prospecting purposes, including profiling for such purposes.

To exercise these rights, please contact us at: contact@mediaroi.io

To opt out of promotional emails, you may click the unsubscribe link at the bottom of any promotional email, or send a request to: contact@mediaroi.io

You also have the right to lodge a complaint with the CNIL (online or by post: 3 Place Fontenoy — TSA 80715 — 75334 Paris Cedex 07, France).

10. Cookies and Internet Tags

Unless you choose to disable cookies, you accept that the Site may use them. You may disable cookies at any time, free of charge, using the options described below, although this may reduce or prevent access to some or all of the services offered by the Site.

10.1 Cookies

A "cookie" is a small information file sent to the User's browser and stored on the User's device (e.g. computer, smartphone) (hereinafter "Cookies"). This file contains information such as the User's domain name, Internet service provider, operating system, and the date and time of access. Cookies cannot damage the User's device.

The Site may process information about the User's visit, such as pages visited and searches performed. This information enables mediaROI to improve the Site's content and the User's browsing experience.

Since Cookies facilitate browsing and the provision of services offered by the Site, the User may configure their browser to accept or reject Cookies, either systematically or by issuer. The User may also configure their browser to prompt acceptance or rejection each time a Cookie is about to be stored. mediaROI informs the User that in this case, some browser features may not be available.

If the User refuses Cookies or deletes those already stored, their browsing experience and access to certain services may be limited. This may also occur when mediaROI or one of its providers cannot recognize the browser type, language and display settings, or the country from which the device appears to be connecting.

mediaROI accepts no liability for any consequences related to degraded Site or service functionality resulting from (i) the User's refusal of Cookies or (ii) mediaROI's inability to store or access the Cookies necessary for their operation due to the User's choice. Cookie management varies by browser and is described in the browser's help menu.

The User may express and modify their Cookie preferences at any time. mediaROI may also use external service providers to help collect and process the information described in this section.

By clicking on social media icons for Twitter, Facebook, LinkedIn and Google Plus on the Site, and if the User has accepted cookies, those platforms may also place cookies on the User's devices (computer, tablet, mobile phone).

These cookies are only placed on your devices with your consent. The User may withdraw consent at any time by clicking Cookie Settings.

10.2 Internet Tags

The Site may occasionally use internet tags (also known as "action tags", single-pixel GIFs, transparent GIFs, invisible GIFs or one-to-one GIFs) deployed through a web analytics partner that may be located (and therefore store the corresponding information, including the User's IP address) in a foreign country.

These tags are placed both in online advertisements leading to the Site and on various pages of the Site.

This technology enables mediaROI to evaluate User responses to the Site and the effectiveness of its actions (e.g., the number of times a page is opened and the information consulted), as well as how the User uses the Site.

The external provider may collect information about Users of the Site and other websites through these tags, compile reports on Site activity for mediaROI, and provide other services relating to the use of the Site and the internet.

Last updated: 03/2026