Nimbus’s services are used differently by different clients. The information we collect and process will differ from client to client.

Although the information we collect will vary from client to client, in connection with Nimbus’s Services and Website, Nimbus has collected the below categories of information (“Personal Information”) from the below categories of sources in the past twelve months:

• Personal identifiers or traits, from Website users or our clients, such as gender, age, or other personal traits. Personal identifiers such as name and email will only be provided by users of our Website, and not by our clients.
• Public IP addresses, from Nimbus’s clients, our marketing partners, and users of this Website. A Public IP address is a unique number associated with each device that connects to the internet. When there are multiple devices that connect to the internet through a single computer network, the network displays a single Public IP address for all of the devices. In that situation, we collect the single Public IP address and do not collect the IP addresses for the individual devices.
• User Agent information, (i.e., information about a consumer’s web browser, software, device, and operating system) from our clients, marketing partners, and users of this Website.
• Mobile Advertising ids, from our clients and from users of this Website. Mobile Advertising ids are identifying numbers assigned to a consumer’s mobile device by the device’s operating system.
• Unique user identifiers, from our clients. A user identifier is a unique string of numbers that may be assigned to a consumer when the consumer visits a website.
• Data about consumers’ behaviors on our clients’ websites, which we collect from our clients. Such data may include information about whether a consumer performed certain actions on the website – for example, whether a consumer clicked certain links or visited certain pages.
• Geolocation data, which can be derived the the Public IP address data we collect, as described above

Nimbus has collected each of the above categories of information in order to provide Services to its clients.

Nimbus collects information from users of this Website (https://www.adsbynimbus.com) as part of providing its Services, as well to improve Website functionality.

Nimbus shares this information with its clients and service providers who assist Nimbus in delivering and improving Nimbus’s services.

In addition, Nimbus reserves the right to share your Personal Information with law enforcement agencies, public authorities or other organizations if legally required to do so, or if we have a good faith belief that such use is reasonably necessary and in our legitimate interests to:

• Comply with a legal obligation, process or request;
• Enforce our terms and conditions and other agreements, including investigation of any potential violation thereof;
• Detect, prevent or otherwise address security, fraud or technical issues; or
• Protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law (i.e., exchanging information with other companies and organizations for the purposes of fraud protection).

Nimbus does not sell consumers’ personal information and has not sold such personal information in the preceding 12 months.

California residents may submit a Right to Know Request by completing the Right to Know Request Form by Emailing Nimbus at privacy@timehop.com.

If you are a California resident, you may submit two types of Right to Know Requests: (1) A Request for the specific pieces of information that Nimbus has collected about you in the past twelve months; or (2) a Request for the categories of personal information that Nimbus has collected about you in the past twelve months. When you submit a Right to Know Request, we will ask you to provide certain pieces of information in order to verify your identity. If you submit a Request for the specific pieces of information that Nimbus has collected about you, we will also require you to submit a signed declaration under the penalty of perjury stating that you are the consumer whose personal information is the subject of the request.

If Nimbus is able to verify your identity, we will respond to your Right to Know Request by: (a) providing the requested information; or (b) explaining why the Act does not require us to provide the requested information. If Nimbus is unable to verify your identity, Nimbus will respond by explaining why it cannot verify your identity.

We will confirm receipt of your Right to Know Request within 10 days and will respond to your Request within 45 days. If a response requires additional time, we will notify you of the basis for the delay and may extend our response period up to an additional 45 days. If the Act requires us to provide the information requested, we will provide the information free of charge and in a readily useable portable format. We have no obligation to provide personal information to you more than twice in a 12-month period. If a Request or series of Requests are manifestly unfounded or excessive, we may charge a reasonable fee for processing the Request(s), or may refuse to process the Request(s).

If Nimbus receives a Right to Know Request regarding information that it processes on behalf of its clients, Nimbus will also recommend that the California resident submit a Right to Know Request directly with the client, and will provide contact information for the client where feasible.

California residents may submit a Right to Delete Request by completing the Right to Delete Request Form by Emailing privacy@timehop.com.

When you submit a Right to Delete Request, we will ask you to provide certain pieces of information in order to verify your identity. If Nimbus is able to verify your identity, we will respond to your Request by (a) deleting your personal information and, if applicable, directing any of our service providers to delete your personal information; or (b) explaining why the Act does not require us to delete your personal information. Nimbus may choose to delete personal information by de-identifying, aggregating, or completely erasing the information. We will specify the manner in which we delete your personal information.

If a California resident submits a request to delete personal information to one of our clients and the client instructs Nimbus to delete the California resident’s personal information, we will delete the information as required by the CCPA. If Nimbus receives a Right to Delete Request regarding information that it processes on behalf of its Advertising Clients, Nimbus will also recommend that the California resident submit a Right to Know Request directly with the client, and will provide contact information for the client where feasible.

If a Request or series of Requests are manifestly unfounded or excessive, we may charge a reasonable fee for processing the Request(s), or may refuse to process the Request(s).

California residents may submit Right to Know and Right to Delete Requests through an authorized agent. Unless the agent provides Nimbus with a power of attorney executed by the California resident, Nimbus may require the California resident to verify their identity with Nimbus and/or to provide Nimbus with written confirmation of the agent’s authority to make the request.