Privacy Policy

Last Updated: April 30, 2024

RainBarrel’s Privacy Policy explains how we collect, use and share data. This Privacy Policy applies globally to all services, applications and websites offered by RainBarrel Inc. and our affiliates.

Who We Are

RainBarrel Inc. is a technology company that uses device identifiers and location data to build advertising audiences. We use probabilistic models to aggregate devices based on how they interact with the physical world. RainBarrel’s audiences are shared with a variety of digital ad serving platforms and DSPs for purchase and activation by our customers. Our clients use our services for advertising, marketing and marketing analytics. RainBarrel protects individual privacy by implementing minimum audience sizes. These minimum audience sizes ensure that the audiences are only useful for advertising and marketing purposes.

What We Collect

In order to provide our services to clients we collect data from third-party providers. We only collect data that is necessary to build digital advertising audiences. Data is primarily collected through SDKs and mobile applications.

The information we collect includes:

  • Mobile Advertising IDs (MAIDs), specifically: iOS IDFA, Google Android Advertising ID
  • IP addresses
  • Timestamp
  • Device type
  • Mobile operating system

We also purchase aggregated demographic data from trusted third-party providers which includes summaries at postal code level of:

  • Gender
  • Income
  • Age
  • Marital Status
  • Education Attainment
  • Other Census Parameters

And sometimes includes:

  • Hashed emails that are not stored in human-readable form, therefore, creating anonymity

How We Use the Information We Collect

RainBarrel aggregates the information we collect from our data providers into audiences based on location and provides access to these audiences to our customers.

We share these audiences with advertising platforms by uploading labelled groups of Mobile Advertising IDS (MAIDS) or hashed email addresses to the advertising platforms or DSP’s. The audiences are always of a minimum size great enough to preserve anonymity and limit the utility to only advertising and marketing use cases. The lists of MAIDS or hashed email addresses are never shared directly to customers, and can be withdrawn from the platforms by RainBarrel if required.

RainBarrel's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Customers use the audiences by selecting the audience label in the advertising platform or DSP and purchasing media targeted at the selected audience(s) by the advertising platform or DSP. The customer does not gain direct access to the MAIDS or hashed email addresses.

RainBarrel may also use the information internally to develop new products, execute quality checks and tests on existing products, improve products, and generally to operate, maintain, and improve our services. We may also use and share the information for legal, auditing, accounting, and regulatory purposes, such as (i) to comply with requests from law enforcement, governmental, or regulatory agencies, (ii) to protect or enforce our rights or the rights of others, (iii) to investigate potential violations of our terms of use, or (iv) to investigate other potential wrong-doing.

We Do Not Collect

  • Names
  • Usernames
  • Passwords
  • Clear-text Email Addresses
  • Clear-text Phone Numbers
  • Physical Addresses
  • Cookies

Countries Data is Collected From

RainBarrel currently collects third-party data from the following countries. We do not process data from the European Union at this time.

Canada

United States

Data Protection

RainBarrel does not share any raw data with our clients. All data has been aggregated for the purpose of digital advertising. We store our data with Snowflake and Amazon Web Services to utilize industry leading security features.

User Consent

RainBarrel only uses data for our services that has been consented to by the user. Consent is collected through mobile applications and operating systems. Consent provided to these applications and operating systems can be withdrawn anytime through your devices' privacy settings.

Users have consented to the collection of the information we use, but users can opt out of the use of their data by RainBarrel and our clients at any time. To opt out directly with RainBarrel you can submit your MAID here to remove your device from our database and audiences. You can also submit your email address here to opt out of our hashed email database and audiences. Please note it may take up to 1 week for your request to take effect.

Data Minimization

RainBarrel only collects and stores data required to perform our services. RainBarrel does not collect clear-text personal identifiable information like name, email address or phone number for advertising purposes. RainBarrel only retains data for as long as it is required for its services. Data is only kept for a maximum period of 18 months.

RainBarrel Website Data

In addition to data collected for the services we provide, we may also collect data provided by a visitor to rbarrel.com or from a visitor when they visit rbarrel.com. We do not use this information in our audience products, it is collected for customer service purposes.

  • Names
  • Email
  • Company Email
  • Position
  • Country
  • Phone Number
  • Profile Picture
  • Other information directly submitted in user forms such as interest in RainBarrel products or the nature of inquiries to RainBarrel

In addition, when you visit our website, RainBarrel or third-party platforms we work with may automatically collect other information from your desktop computer, laptop, mobile phone, tablet, or other consumer electronic device that you use to access the website. This information may include pseudonymized information, such as a unique browser identifier, technical information about your device (such as the device type, operating system, settings and system configurations, IP address, other unique device identifiers, and mobile network information) and your activity on our website, as well as data about the webpages you access, traffic to and from these websites, the dates and times associated with transactions, and web log data. We refer to this as “Site Data.”

We use this Site Data for our commercial purposes, such as marketing, analytics, research, and improving our websites and services. This Site Data may be correlated with more personal information such as name or email address submitted by the user.

Our Use of Cookies: RainBarrel (or other companies we work with) may collect or associate Site Data using “cookies.” Cookies are small data files that have unique identifiers and reside, among other places, on your Devices, in emails we send to you, and on the web pages of the RainBarrel website. Among other things, cookies help us improve and personalize your use of the RainBarrel website. We may permit certain third parties to place cookies through the RainBarrel website to provide us with better insights into the use of the RainBarrel website and user demographics, to provide relevant advertising to you. These third parties may collect information about your online activities over time and across different websites when you use the RainBarrel website. For example, we utilize Google Analytics to analyze usage patterns for the RainBarrel website. Google Analytics generates a cookie to capture information about your use of the RainBarrel website that Google uses to compile reports on website activity for us and to provide other related services. Google may use a portion of your IP address to identify its cookie and for its commercial purposes.

Our Use of Web Beacons: Web beacons are electronic images that may be used on the RainBarrel website or in emails we send to you. We use web beacons to deliver cookies, count visits, understand usage and effectiveness of offers, and tell whether you open an email and act upon it.

By accessing or using the RainBarrel website, you consent to the placement of cookies on your browsers and devices and the use of web beacons as described in this Privacy Policy. You may block, delete, or disable cookies or web beacons to the extent permitted by your browsers, applications, and Devices. However, if you do so, the performance of certain features of the RainBarrel website may be limited or not work at all.

Children's Privacy

Our services are not intended to collect Information from children under the age of 16. If you believe we have collected Information from a person under the age of 16, please contact us at info@rbarrel.com.

Change of Control

If we undergo a sale, merger, transfer, exchange or other disposition (whether of assets, stock or otherwise) of all or a portion of our business, information we have collected or otherwise acquired may be one of the assets transferred. In the event of a change of control of the organization, any information we collect may be shared in preparation for such a change of control (for example in due diligence evaluation).

Changes to the Privacy Policy

Changes to this Privacy Policy will be made from time to time to better reflect the practices of RainBarrel and our partners. When these changes would have a material impact on you, we will post a notice of the change on rbarrel.com and give a minimum of 28 days notice prior to the change being effective. For smaller changes that are administrative, or do not have a material impact on you, we will update the Privacy Policy on rbarrel.com with the latest publication date prominently displayed. We recommend you check frequently to see the most up-to-date Privacy Policy, or subscribe to an update email list by contacting us at the email above.

RainBarrel's Security and Privacy Portal

For individual privacy assessments and certifications, accessed can be found through Whistic.

California Privacy (CCPA/CPRA) Notice

Your personal data may be incorporated into the audience products sold to our customers and activated on digital advertising platforms.

If you are a California resident, you have the following rights under the CCP/CPRA:

  • The right to request that we disclose the categories and specific pieces of personal information we have collected about you in the past 12 months, as well as the categories of sources from which the information was collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom we have shared the information.
  • The right to request that we delete any personal information we have collected about you. Please note that we may not be able to comply with your request if retaining the information is necessary for us to: (i) complete a transaction for you; (ii) provide a good or service requested by you; (iii) detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or (iv) comply with a legal obligation.
  • The right to opt-out of the use of your personal information. You may exercise this right by clicking on the "Do Not Sell My Personal Information" link on our homepage.
  • The right to not be discriminated against for exercising any of the rights listed above. This means that we will not deny you goods or services or charge you a different price or rate for goods or services because you exercised your CCPA/CPRA rights.

Virginia Consumer Data Protection Act (CDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act or (CTDPA) Notice

We have implemented reasonable technical, physical, and administrative safeguards to protect personal data from unauthorized access, use, or disclosure.We will only collect, use, and disclose personal data for a legitimate business purpose or as required by law.

If you are a resident of Virginia, Colorado or Connecticut, you have the following rights under CDPA, CPA or CTDPA:

  • Residents have the right to opt-out of the processing of their personal data for targeted advertising, the sale of personal data, or profiling.
  • Individuals have the right to access their personal data held by businesses, and to request corrections if the information is inaccurate.
  • Individuals have the right to receive their personal data in a structured, commonly used, and machine-readable format for the purpose of transferring it to another business.
  • Residents can request the deletion of their personal data, subject to certain exceptions.
  • Individuals have the right to know what categories of personal data are being collected and for what purposes.
  • For sensitive data, businesses are required to obtain affirmative consent (opt-in) from individuals before processing.
  • Businesses are prohibited from discriminating against individuals who exercise their rights listed above.

Quebec Law 25 Notice

If you are a resident of Quebec, Canada, you have the following rights under Quebec Law 25:

  • Quebec residents have the right to request access to their personal information held by organizations. This includes the right to know what information is being collected, used, and disclosed.
  • Individuals have the right to request corrections to their personal information if they believe it is inaccurate, incomplete, or out of date.
  • Individuals have the right to withdraw their consent for the collection, use, and disclosure of their personal information. However, this may impact the organization's ability to provide certain goods or services.
  • Individuals have the right to know why their personal information is being collected, and how it will be used.
  • Individuals have the right to know who has access to their personal information within an organization.
  • Quebec residents have the right to file a complaint with the Commission d'accès à l'information du Québec if they believe their privacy rights under Law 25 have been violated.
  • Individuals have the right to opt-out of receiving marketing communications from organizations.
  • In certain circumstances, individuals may have the right to request the deletion of their personal information.
  • Organizations are required to inform individuals if their personal information has been subject to a data breach that poses a risk to their rights and freedoms.
  • Organizations are prohibited from discriminating against individuals who exercise their rights under Law 25.


To exercise any of these rights as a California, Virginia, Colorado, Connecticut or Quebec resident, please contact us using the contact information provided below. Please note that we may need to verify your identity before fulfilling your request. We will respond to your request within 45 days.

Contact

If you have any question or concerns regarding this Privacy Policy please contact

RainBarrel Inc.

211 Yonge St., Suite 400, Toronto, ON M5B 1M4