Distribute Data to Xandr Invest

Data for Interest Based (or Behavioral) Advertising (IBA or OBA)

OBA data must have been collected in a manner in which users were provided industry standard notice and access to choice for both the collection and processing of users’ personal data via the data marketplace for interest-based advertising, as required by applicable laws. This includes, but is not limited to, obtaining user consent (opt-out or opt-in, as required by applicable laws) for the processing of personal data for “sales”, “sharing”, “targeted advertising”, and sensitive personal data processing, as such terms are defined by applicable laws. To the extent that a data provider does not have proper consent for such processing activities, the provider must either not make such user’s personal data available in the data marketplace), or alternatively, request that Microsoft Ad Tech Platform delete such personal data to the extent it has been previously submitted to the marketplace.

Sensitive information

Sensitive personal data may not be used to profile or target ads to end users 1) in violation of applicable laws, regulations, or this policy, or 2) without consent where required by applicable law or regulation. Further, we prohibit the following types of sensitive personal data, whether known or inferred, from being used for any profiling or ad targeting purposes globally across the Microsoft Ad Tech Platform: precise location data that reveals Sensitive Personal Data or relates to end users in Washington state; racial or ethnic origin; religious beliefs; known past, present or future mental or physical health status (including but not limited to protected health information under the U.S. Health Insurance Portability and Accountability Act Tand Washington state consumer health data); sex life; sexual orientation; transgender or nonbinary identification; political opinions; citizenship or immigration status; genetic data; processing of biometric data for the purposes of uniquely identifying an individual; government identifiers; government officials or members of the military; trade union membership; status as a victim of a crime; and/or Personal Data collected from a known child.

Personally Identifiable Information (PII)

We prohibit the processing or transmission of personally identifiable information (PII) on the Microsoft Ad Tech Platform.  Data providers are prohibited from uploading PII to the Microsoft Ad Tech Platform or otherwise causing the Microsoft Ad Tech Platform to process PII.  All PII must be encrypted via one-way hash prior to upload to the Microsoft Ad Tech Platform. Further, clients must not associate with any Microsoft Ad Tech Platform resource, e.g. ID, pixel, or domain, any data that, by itself, directly identifies an individual, such as name, address, phone number, email address, or government identifier.

Data may not contain Personally Identifiable Information (PII), which is information used to directly identify a person, such as name, email address, phone number, postal address, Social Security Number or other government-issued identifiers, or account numbers such as those used for insurance plans or financial accounts.

Children

Clients may not, on or in connection with Microsoft Ad Tech Services, use personal data, including in segments, that relates to or attempts to profile or target advertising to children under the age of 18. Additionally, we do not allow Buyers to use behavioral targeting based on prior visits to child-directed inventory or to collect or use unique identifiers in association with ads served on child-directed inventory. 

Augmenting Datasets

Data providers may not use Bid Stream Data to build or augment a data provider’s own data sets, including any interest segments, user profiles, or retargeting segments.

Storing data in a format that is linkable to a person or device

Any Bid Stream Data stored by data providers must be hashed or aggregated such that it is not reasonably linkable to any individual person or unique device. Storing Bid Stream Data that is linked to an individual or unique device is prohibited.

Disclosing data to unaffiliated third-parties

Data providers may not disclose Bid Stream Data to any unaffiliated third parties, except as expressly allowed by Microsoft Ad Tech Services.

Country Restrictions

The Microsoft Ad Tech Platform isn’t permitted for use by data providers who are in countries or territories that are subject to comprehensive sanctions by OFAC, including the Crimea, Donetsk People’s Republic, and Luhansk People’s Republic regions of Ukraine, Cuba, Iran, North Korea and Syria (such countries or territories, the “Embargoed Regions”) or are otherwise subject to sanctions by OFAC. If a data provider is based in a location that has recently become subject to comprehensive OFAC sanctions or is otherwise subject to sanctions by OFAC, such data provider’s account may be immediately suspended and its data will no longer be available through the marketplace. We will notify you by e-mail if we suspend your account, but no grace periods or exceptions are possible.

Even if a data provider is not based in an Embargoed Region or not otherwise subject to OFAC sanctions, it is forbidden to use the Microsoft Ad Tech Services or Platform on behalf of partners or clients based in any of the Embargoed Regions or who are otherwise subject to OFAC sanctions.

Account Access within Embargoed Regions

Even if a data provider is not based in an Embargoed Region or not otherwise subject to OFAC sanctions, it is forbidden to use the Microsoft Ad Tech Services or Platform on behalf of partners or clients based in any of the Embargoed Regions or who are otherwise subject to OFAC sanctions.