Legal

Privacy Policy

Effective date: September 7, 2026  ·  Benefit Programmatic Media Ltd.

1. Scope of this policy

This Privacy Policy explains how Benefit Programmatic Media Ltd. (“Benefit Media”, “we”, “us” or “our”) collects, uses, shares and protects information in connection with:

• The Website — benefit.media and its sub-pages, including the contact form; and
• The Advertising Services — the programmatic advertising technology and services we provide to publishers, app developers, connected-TV (CTV) platforms, advertisers and demand partners, through which advertisements are requested, bought, sold, delivered and measured across websites, mobile apps and CTV/OTT applications operated by our partners (“Partner Properties”).

We are a business-to-business company. Our customers are publishers and advertising partners. We do not have a direct relationship with the end users of Partner Properties, and we do not sell products or services to consumers. When you use a Partner Property, the privacy policy of that property's operator also applies and governs how they collect and share your information with us.

By using the Website you acknowledge the practices described in this policy. This policy does not apply to information we process as a service provider or processor on behalf of our business customers under a separate written agreement, except where that agreement says otherwise.

2. Who we are

The entity responsible for the processing described in this policy (the “data controller”) is:

For privacy inquiries, including requests to exercise your rights, please write to [email protected] with the subject line “Privacy Request”.

3. Information collected on the Website

3.1 Information you provide

When you submit our contact form or otherwise write to us, we collect the information you choose to provide, typically your name, email address, phone number, company name and the content of your message. We use this information to respond to you, to follow up on your inquiry and, if you become a partner, to onboard and manage our business relationship.

3.2 Information collected automatically

Like most websites, our servers and hosting and security providers (including Cloudflare) automatically record technical information when you visit, such as your IP address, browser type and version, operating system, device type, language, referring URL, the pages you view, the date and time of your visit and error logs. We use this information to operate, secure and improve the Website and to understand how it is used.

3.3 Analytics and tags

The Website uses Google Tag Manager, which may load analytics services such as Google Analytics. These services use cookies and similar technologies to collect information about your use of the Website (for example pages viewed, time on page, approximate location derived from your IP address and device/browser characteristics) and to produce aggregated statistics for us. Google's handling of this data is described in the Google Privacy Policy. You can opt out of Google Analytics using the Google Analytics opt-out browser add-on. See Section 7 for how to manage cookies.

3.4 Fonts and embedded content

Pages may load fonts, scripts and embedded content (such as social media buttons or videos) from third-party servers. When they load, your browser sends your IP address and standard request data to the third party. These third parties process that data under their own privacy policies.

4. Information processed by the Advertising Services

When an advertisement opportunity arises on a Partner Property, the publisher (or its ad server or supply partner) sends us an ad request. We process the data in that request in real time to select, deliver, measure and pay for advertising. We do not receive names, email addresses, postal addresses, phone numbers or other directly identifying contact details through the Advertising Services, and we do not attempt to identify end users by name.

Depending on the Partner Property and the user's device and privacy settings, an ad request may include:

We honor the consent and opt-out signals we receive. Where a signal indicates that a user has not consented to, or has opted out of, personalized advertising or the sale or sharing of personal information, we restrict processing accordingly and pass the signal on to our demand partners.

5. How we use information

We use the information described above to:

• Operate the Advertising Services: receive ad requests, run auctions, select and deliver ads, and cap the frequency with which an ad is shown;
• Measure and report on advertising campaigns and inventory performance, and reconcile and bill our partners;
• Detect and prevent invalid traffic, fraud, malware, spoofing and other abuse, and enforce our partners' and our own policies and brand-safety requirements;
• Ensure the Advertising Services are secure, reliable and performant, and troubleshoot problems;
• Support optimization of advertising delivery, including, where permitted by the applicable consent signals, interest-based or personalized advertising conducted by our demand partners;
• Operate, secure, analyze and improve the Website, and respond to your inquiries;
• Comply with legal obligations, industry self-regulatory frameworks and lawful requests from authorities; and
• Establish, exercise or defend legal claims.

6. Legal bases (EEA / UK)

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:

• Consent, obtained by the publisher of the Partner Property through its consent management platform and transmitted to us via the TCF string or an equivalent signal, for storing or accessing identifiers on the user's device and for personalized advertising;
• Legitimate interests, for delivering and measuring non-personalized advertising, frequency capping, fraud prevention, security, billing and reporting, operating and improving the Website, and responding to inquiries, where those interests are not overridden by your rights and interests;
• Performance of a contract, when we process information about our business partners' personnel to onboard and serve those partners; and
• Legal obligation, where processing is required by law.

7. Cookies and similar technologies

On the Website, we and our analytics providers use cookies and similar technologies (such as local storage and pixels) that are strictly necessary for the site to function and to remember your preferences, and analytics cookies to understand how the Website is used. You can control cookies through your browser settings, including blocking or deleting them; doing so may affect some Website features. Where required by law, we will ask for your consent before setting non-essential cookies.

In the Advertising Services, we rely primarily on the device advertising identifiers and consent signals described in Section 4 rather than on our own cookies. In web environments, our demand partners may set or read cookies through the advertisements they serve, subject to the publisher's consent tools and the partner's own privacy policy.

8. How we share information

We share information with the following categories of recipients, only as needed for the purposes described above:

• Demand partners — demand-side platforms, ad exchanges, ad networks, agencies and advertisers that bid on and buy advertising opportunities. They receive the ad-request data described in Section 4 so they can decide whether and how much to bid and can deliver and measure their ads. Each demand partner is an independent controller of the data it receives and processes it under its own privacy policy.
• Publishers and supply partners — the operators of Partner Properties and their ad servers, supply-side platforms and ad-serving intermediaries, who receive reporting and delivery data about the ads served on their properties.
• Service providers — cloud hosting, content delivery, security, data analytics, invalid-traffic detection, brand-safety, measurement and verification, communications and professional-services vendors that process data on our behalf under contractual confidentiality and data-protection obligations.
• Corporate transactions — a buyer, successor or investor in connection with any actual or proposed merger, acquisition, financing, reorganization or sale of all or part of our business or assets.
• Legal and safety — courts, regulators, law-enforcement and other authorities, and other parties where we believe disclosure is required by law or is reasonably necessary to protect the rights, property or safety of Benefit Media, our partners, users or the public, or to enforce our agreements.

We do not sell personal information for money. However, under some US state privacy laws, sharing device identifiers and related data with demand partners for advertising purposes may be considered a “sale” or “sharing” of personal information, or “targeted advertising”. Section 12 explains how to opt out.

9. International transfers

We are based in Israel and process data in Israel, the European Union and the United States, and our partners and service providers may be located in other countries. Israel is recognized by the European Commission as providing an adequate level of data protection. Where we transfer personal data originating in the EEA, the UK or Switzerland to a country that has not been found adequate, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum) or other lawful transfer mechanisms.

10. Data retention

We retain information only for as long as necessary for the purposes described in this policy, and then delete or anonymize it. In general:

• Log-level ad-request, bid and impression data containing device identifiers or IP addresses is retained for a limited period, currently no longer than 90 days, unless a longer period is needed to investigate fraud or a dispute;
• Aggregated and de-identified reporting data, which cannot reasonably be linked to an individual or device, may be retained for as long as needed for business analytics and billing;
• Contact-form submissions and business correspondence are retained for as long as needed to handle your inquiry and manage our relationship, and thereafter as required by law or our record-keeping practices; and
• Data may be retained longer where required by law, to resolve disputes or to enforce our agreements.

11. Security

We maintain administrative, technical and physical safeguards designed to protect information against unauthorized access, loss, misuse, alteration and destruction, including encryption in transit, access controls, logging and monitoring, and vendor due diligence. No system can be guaranteed to be completely secure, and we cannot promise that unauthorized access will never occur. If you believe your interaction with us is no longer secure, please contact us immediately.

12. Your choices and opt-outs

12.1 Opting out of personalized advertising on your devices

Because we do not have a direct relationship with you, the most effective way to limit the use of your device's advertising identifier is through your device or platform settings, which apply across all apps and ad-tech companies, including us:

• iOS / Apple TV: Settings → Privacy & Security → Tracking (turn off “Allow Apps to Request to Track”) and Apple Advertising → Personalized Ads.
• Android / Google TV: Settings → Google → Ads → “Delete advertising ID” or “Opt out of Ads Personalization”.
• Roku: Settings → Privacy → Advertising → “Limit ad tracking”.
• Amazon Fire TV: Settings → Preferences → Privacy Settings → “Interest-based Ads”.
• Samsung TV: Settings → General / All Settings → Terms & Privacy → Privacy Choices (or Smart Hub → Terms & Policy → Interest-Based Advertising).
• LG TV: Settings → General → System → Additional Settings → Advertisement → “Limit AD Tracking”.
• Vizio: System → Reset & Admin → Viewing Data / Advertising settings.

In web browsers, you can also use the industry opt-out tools provided by the Digital Advertising Alliance, the Network Advertising Initiative and, in Europe, Your Online Choices. Opting out does not mean you will stop seeing ads; it means the ads you see will be less relevant to you.

12.2 Global Privacy Control and consent signals

We treat a Global Privacy Control (GPC) signal, an IAB GPP / US privacy opt-out string, or a TCF string indicating that consent has not been given, as a request to opt out of the sale or sharing of personal information and of targeted advertising, to the extent the signal is transmitted to us by the Partner Property.

12.3 Website cookies and analytics

See Section 7 and the Google Analytics opt-out add-on referenced in Section 3.3.

13. Your privacy rights

Depending on where you live, you may have some or all of the following rights regarding personal information we hold about you, subject to legal exceptions:

• to be informed about, and to access, the personal information we process about you;
• to correct inaccurate or incomplete personal information;
• to request deletion of your personal information;
• to restrict or object to processing, including processing based on legitimate interests and for direct marketing;
• to receive your personal information in a portable format;
• to opt out of the sale or sharing of personal information, targeted advertising and certain profiling;
• to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
• not to be discriminated against for exercising your rights; and
• to lodge a complaint with a supervisory authority.

13.1 Israel

Under the Israeli Protection of Privacy Law, 5741-1981, and the regulations under it, you have the right to review information about you held in our databases and to request that inaccurate, incomplete or outdated information be corrected or deleted. Requests can be made using the contact details in Section 17.

13.2 European Economic Area, United Kingdom and Switzerland

You may exercise the rights above by contacting us. You also have the right to complain to the data-protection authority in your country of residence, place of work or place of the alleged infringement. Because we typically cannot identify you from the data we hold, we may ask you for the advertising identifier of your device to locate data relating to you, or we may inform you that we are unable to identify you.

13.3 California and other US states

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana or another US state with a comprehensive privacy law, you may have the rights to know, access, correct, delete and port your personal information, to opt out of “sales”, “sharing” and targeted advertising, to limit the use of sensitive personal information, and to appeal a decision on your request. Under the California Consumer Privacy Act, the categories of personal information we have collected in the preceding 12 months are identifiers (device advertising IDs and IP addresses), internet or network activity (ad activity data), coarse geolocation and inferences drawn for advertising purposes, from the sources and for the purposes described above. We disclose these categories to demand partners and service providers as described in Section 8. We do not knowingly sell or share the personal information of consumers under 16 years of age. To opt out of sales, sharing and targeted advertising, use the device controls and signals described in Section 12 or contact us. You may designate an authorized agent to make a request on your behalf.

13.4 How to make a request

Email [email protected] with the subject line “Privacy Request”, tell us where you live and which right you wish to exercise, and, where relevant, provide the advertising identifier of the device concerned so that we can locate any data relating to it. We will verify your request and respond within the time required by applicable law. We will not charge you for making a request unless it is manifestly unfounded or excessive.

14. Children

The Website and the Advertising Services are not directed at children. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA and UK, or the applicable age of digital consent where higher), and we require our publisher partners to identify child-directed inventory and to comply with the US Children's Online Privacy Protection Act (COPPA), the GDPR and other laws protecting children. Where an ad request is flagged as child-directed, we process it without personal identifiers for contextual advertising only. If you believe a child has provided us with personal information, please contact us and we will delete it.

15. Third-party websites and services

The Website may link to third-party websites, and the advertisements delivered through the Advertising Services link to advertisers' websites and apps. We are not responsible for the privacy practices of those third parties, and this policy does not apply to them. We encourage you to read the privacy policy of every website or app you visit.

16. Changes to this policy

We may update this policy from time to time to reflect changes in our practices, technology or legal requirements. When we do, we will revise the effective date at the top of this page and, for material changes, provide additional notice on the Website. Your continued use of the Website after a change takes effect indicates that you accept the updated policy.

17. Contact us

If you have questions, concerns or requests relating to this policy or our privacy practices, please contact us: