Privacy Policy

1. Who we are

Qora Labs, Inc., 75 Hudson Street, New York, United States ("QORA", "we", "us") operates the website qoraplatform.com and the advertising platform at app.qoraplatform.com (together, the "Services"). For the personal data described in this policy, QORA is the data controller.

QORA is a business-to-business service. Our customers are companies that buy advertising traffic (advertisers) and companies that sell it (publishers). The personal data we process mostly belongs to the people who represent those companies, and to the end users whose browsers and devices receive advertisements delivered through the platform.

2. What we collect

2.1 Data you give us

• Account registration. Your role (advertiser or publisher), company or project name, your name, work email address, a password (stored only as a cryptographic hash), a contact handle such as Telegram, and a short description of what you buy or the traffic you have.
• Contact form. Name, email, company, role, messenger handle, topic, region and the message you write.
• Platform use. Campaigns, creatives, targeting settings, traffic sources, tracking URLs, payout and billing details that you enter while using the platform, and messages you exchange with our team.

2.2 Data collected automatically on the website

• Analytics (only if you accept cookies): pages viewed, clicks on calls to action, approximate location derived from IP address, device and browser type, through Google Analytics loaded via Google Tag Manager.
• Campaign attribution (only if you accept cookies): the utm_* parameters, referring site and landing page of your first visit, stored in your browser so that a later registration can be linked to the channel that brought you.
• Server logs. IP address, requested URL, timestamp and user agent, kept by our hosting provider for security and operations.

2.3 Data processed when advertisements are delivered

When the platform receives an ad request from a publisher or a supply partner and serves, tracks or routes an advertisement, it processes technical data about the end user's device and request: IP address, user agent, device type, operating system, approximate location derived from IP, the publisher property or app identifier, a click identifier, and, where a supply partner sends it, a device advertising identifier. Impressions, clicks and conversions reported by advertisers' trackers are recorded against that click identifier. QORA processes this data to deliver and measure advertising and to detect invalid traffic; it does not build profiles of end users for interest-based targeting.

3. Why we use it and on what basis

Where we rely on consent you can withdraw it at any time through Cookie settings; withdrawal does not affect processing that already took place.

4. Cookies and local storage

The website sets no analytics or advertising cookies until you choose Accept in the cookie panel. The complete list of what we store, when, and how to change your choice is on the Cookies and local storage page. The platform at app.qoraplatform.com uses a session cookie that is strictly necessary to keep you signed in.

5. Who we share data with

• Service providers acting on our instructions: our hosting providers; Google (Tag Manager and Analytics, only with your consent; Google Fonts for typefaces); Telegram, which delivers contact-form submissions to our team; email delivery providers for account notifications.
• Advertisers and publishers on the platform: publishers see aggregate delivery and earnings for their sources; advertisers see aggregate delivery and results per source. Neither side receives the other's account details through the platform except as needed to settle a direct deal both have agreed to.
• Supply and demand partners: when traffic is bought or sold through programmatic (OpenRTB) connections, the technical ad request data described in section 2.3 is exchanged with the partner on the other side of that connection.
• Authorities and advisers where the law requires it, to protect our rights, or in connection with a merger, acquisition or sale of assets, in which case this policy continues to apply to the transferred data.

We do not sell personal data and we do not share it for cross-context behavioural advertising.

6. International transfers

QORA is based in the United States and our service providers may process data in the United States and other countries. Where data about people in the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses and the UK Addendum. You can ask us for details of the safeguards used.

7. How long we keep data

• Account and platform data: for as long as your account is active, and afterwards for as long as needed to settle balances, resolve disputes and meet accounting and tax obligations.
• Contact form messages: until the enquiry is resolved and for a reasonable period afterwards.
• Ad delivery logs: in identifiable form only as long as needed for delivery, reconciliation and invalid-traffic review; thereafter aggregated or deleted.
• Analytics data: according to the retention setting of our Google Analytics property.
• Cookie choice and attribution: in your browser until you clear site data or change your choice.

8. Your rights

Depending on where you live you may have the right to access the personal data we hold about you, to correct or delete it, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent. People in the EEA and UK can also lodge a complaint with their supervisory authority. California residents have the rights set out in the CCPA/CPRA, including the right to know, delete and correct, and the right not to be discriminated against for exercising them; we do not sell or share personal information as those terms are defined there.

To exercise any of these rights, contact us as described in section 12. We will verify your identity before acting on a request and respond within the time the applicable law allows.

9. Security

We protect data with measures appropriate to its sensitivity: encryption in transit, hashed passwords, access limited to staff who need it, and logging of administrative actions. No system is perfectly secure; if we learn of a breach affecting your personal data we will notify you and the relevant authorities as the law requires.

10. Children

The Services are for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children; if you believe a child has provided us with data, contact us and we will delete it.

11. Changes to this policy

We may update this policy as the Services or the law change. The date at the top shows the current version. For material changes we will notify account holders by email or through the platform before the change takes effect.

12. Contact

Qora Labs, Inc., 75 Hudson Street, New York, United States.
Email: partners@qoraplatform.com · or use the contact form.

See also our Terms of Service and Cookies and local storage.