Table of Contents

Last Updated and Effective On: July 16, 2025

1. Summary

Semcasting, Inc. ("Semcasting") has created this privacy statement (the "Privacy Policy") for the following Semcasting websites to communicate our information gathering and distribution practices, as well as to demonstrate our commitment to privacy. They may be referred to as Sites or Services throughout this Policy.

• https://www.semcasting.com
• https://www.idtoolbox.io
• https://www.audiencedesigner.com
• https://www.privacychoice.com

By using the Site and the Services, you are agreeing to the terms of our Privacy Policy. Although this Site contains links to other websites, please be aware that we are not responsible for the privacy practices of those or any other websites. If you follow a link to another website, you should carefully read their privacy policy.

This Privacy Policy covers the following topics:

• Personal information and our business model
• The personal information we collect and how we collect it
• Your consent to our collection of personal information
• How we use your personal information
• How we disclose personal information
• How we secure your personal information
• Retention of personal information
• How we may update our privacy policy
• Do not track
• Child privacy
• Your rights to your personal information
• Do Not Sell My Personal Information and opt-out options

2. Personal Information and Our Business Model

Semcasting provides audience targeting and attribution technology solutions that support our clients (our "Clients") and their agency of record. We facilitate advertising services using Demand Side Platforms and the execution of attribution studies on our Clients' behalf. Our role is to provide the matching, onboarding, optimization and proof of performance for those audiences identified for our Clients.

Our Services use a Client's first-party CRM customer or prospect data ("Client Data") to support advertising on desktops, mobile devices, connected TVs, video, or other forms of information delivery over the Internet. We receive Client Data using secured, encrypted methods in two ways: (i) our Clients supply us with Client Data directly, and (ii) we collect information on visitors to our Client's websites. Client Data includes names, addresses, emails, phone numbers, locations, Internet Protocol addresses, and website traffic logs, and in some instances may include medical information, some of which may be covered under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), such as name, physical address, email address, medical coverage, prescription drugs, physician and medical provider. We control a Client's Client Data only during and for the performance of our Services for such Client.

Semcasting also gathers data independently. Semcasting (i) compiles publicly available information on households and businesses to support our first-party matching process, and (ii) purchases data from third party distributors (collectively, "Semcasting Data"). Semcasting Data adheres to online and offline privacy recommendations, code-of-conduct and guidelines of the Interactive Advertising Bureau (the "IAB"), and the Association of National Advertisers ("ANA"). We follow The HITRUST CSF in our management of sensitive data and physical security as well as Trustwave for online data management.

Semcasting uses Client Data and Semcasting Data only for providing the Services.

3. The Personal Information We Collect and How We Collect It

We and our service providers and marketing partners collect the following personal information about you:

1. Semcasting collects Client Data from our Clients as described above to perform Services for our Clients.
2. Semcasting collects publicly-available bulk data from government agency filings, such as postal addresses, housing transactions, voter registration information and voter preferences. Although not personal information, Semcasting also collects publicly-available aggregated data, such as local and regional economic performance indicators and summarized healthcare information.
3. Semcasting purchases data from third party distributors to provide the Services. This data includes transaction data, mapping data, and mobile device data from trusted partners including Complementics, Digital Envoy, Digital Map Products, DMTI Spatial, Collective Data, People Data Labs, and Safegraph.
4. Visitors to the Site may wish to subscribe to the Semcasting newsletter or blog or may request further information about our marketing solutions and use of data via our contact form. Individuals requesting more information will be asked to provide their first and last name, email address, job title, phone number and company name.
5. Our Site offers publicly accessible blogs that allow user comment. Comments may be read, collected, and used by others who access the blogs.
6. Semcasting records information from all visitors to our Sites, such as website traffic logs, number of visits or clicks on a given page, pages viewed or links to our Site, and Internet Protocol ("IP") addresses.
7. Semcasting may collect personal information about you provided to us by third-party services, including identifiers, names, addresses, education, medical information, health insurance information, age, characteristics of protected classifications under California or federal law, geolocation data, device-related characteristics, voter-related characteristics, and business-related characteristics.
8. Semcasting uses cookies and web beacons to collect information about visitors to our Site and our Clients' websites. Cookies themselves do not contain any personally identifiable information but enable us to remember you each time you return to visit our Site or use our Services. Users can control the use of cookies at the individual browser level.
9. Our Site includes Social Media Features and Widgets. These features may collect your IP address and may set a cookie to enable the feature to function properly. Your interactions with these features are governed by the privacy statement of the company providing it.

Semcasting provides Services to European customers based on completely de-identified data that is aggregated at a postal code level with no ability to re-identify a person, device, or household. Semcasting has no access to European consumer information other than government-sanctioned census level information which is aggregated at a postal code level.

4. Your Consent to Our Collection of Your Personal Information

By using our Services, providing us with your personal information or accessing our Site, you agree to this Privacy Policy and give your explicit, informed consent to the collection, use and processing of your personal information in accordance with this Privacy Policy. If you do not agree to this Privacy Policy, please do not visit, use, register to, or otherwise access our Site or Services.

You may withdraw your consent at any time, unless such withdrawal would frustrate our ability to comply with a legal obligation. Your withdrawal may restrict our ability to provide our Services or access to our Site.

Limited circumstances where consent is not required:

• When the collection, use or disclosure of personal information is permitted or required by law
• In an emergency that threatens an individual's life, health or personal security
• When the personal information is available from a public source
• When we require legal advice from a lawyer
• For the purposes of collecting debt
• To protect ourselves from fraud
• To investigate an anticipated breach of an agreement or contravention of law

5. How We Use Your Personal Information

We may use your personal information to fulfill the purposes identified in this Privacy Policy, and for purposes related thereto, and to provide the Services and access to our Site, including: within our organization, at your request or with your consent, to provide the Services to our Clients, and to companies that provide services to help us support business activities such as offering customer service or data processing.

Even though Semcasting Data is collected from publicly-available sources, opt-in mobile devices and purchased data from third-parties, Semcasting Data may include your personal information. Semcasting is compensated by our Clients for providing Clients with Semcasting Data, and this service may be considered a sale of personal information.

In certain situations, Semcasting may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may also disclose your personal information as required by law, such as to comply with a subpoena, bankruptcy proceedings, or similar legal process.

Medical Information

Client Data we receive from certain of our Clients may include medical information necessary for us to perform our Services. We only use such medical information to provide our Services specified by the Client that provides such Client Data. Some of your rights and our obligations under this Privacy Policy may not apply to medical information that is covered under HIPAA; if your medical information is protected under HIPAA, your rights with respect to that data will be governed by HIPAA.

6. How We Secure Your Personal Information

The Site has industry standard security measures in place to protect against the loss, misuse and alteration of the information under our control. These protections include compliance with IAB, the Network Advertising Initiative, the HITRUST CSF and Trustwave.

In specific industries such as healthcare, finance, or industries where any sensitive information is to be associated with a digital ID, Semcasting requires that our Clients utilize methodologies to assure that all personally identifiable information is anonymized, encrypted and protected as required by applicable law.

We use a proprietary matching process to maintain the anonymity of all users. We require each of our Clients to state in their respective privacy policy that users' digital information is being collected in compliance with DMA/ANA and IAB guidelines, and for our Clients to allow users to opt-out on their websites.

7. Retention of Your Personal Information

Semcasting retains personal data we process on behalf of our Clients for as long as required to provide Services to our Client. Semcasting will retain this personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

8. How We May Update Our Privacy Policy

Semcasting reserves the right, at any time, and without notice, to add to, change, modify, or update this Privacy Policy by posting a revised policy on this Site. Any revised Privacy Policy shall be effective immediately on posting. We encourage you to periodically review this page for the latest information on our privacy practices. Whether or not our practices change, we will review this Privacy Policy at least once every twelve months.

9. Do Not Track

We, Semcasting and our partners, affiliates, or service providers, use technologies such as cookies, beacons, tags, website traffic logs and scripts, to analyze trends, administer the Site, track users' movements around the Site, and to gather demographic information about our user base. We may receive or generate reports based on the use of these technologies on an individual and aggregated basis.

We use cookies to support online advertising retargeting. Users can control the use of cookies at the individual browser level. If you reject cookies, you may still use our Site, but your ability to use some features or areas of our Site may be limited.

In addition to rejecting all cookies, if you wish to not have this information used for the purpose of serving you interest-based ads, you may selectively opt-out by clicking: optout.aboutads.info or optout.networkadvertising.org (or if located in the European Union: youronlinechoices.eu).

We do not override any "do-not-track" signal from your web browser and will not collect or store your movements on our Sites if you use such a signal.

10. Child Privacy

If you are under the age of sixteen (16), please do not use or access the Site. It is not our intention to collect or use personal information from anyone under the age of sixteen, and we will not knowingly do so. If we are made aware that we have collected any personal information from minors and are asked to delete such information from our databases, we will promptly do so. Semcasting does not knowingly sell the personal information of minors under the age of 16.

11. Your Rights to Your Personal Information

Semcasting has no direct relationship with the individuals whose personal data it processes on behalf of its Clients. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate (or all their) data should direct their query both to Semcasting's Client (the data controller) and Semcasting (the processor). We are only able to remove or revise your information located in Client Data we control. Please contact our Clients directly to request the removal or revision of your information stored in their databases.

You have several rights associated with your personal information. You may contact us directly to exercise these rights and to request:

1. Access to your specific personal information we have collected
2. To know the categories of personal information we have collected about you in the preceding 12 months
3. To know the categories of sources from which your personal information was collected
4. To know the business or commercial purposes for collecting or selling your information
5. To know how we use your personal information
6. To know to whom it has been disclosed or sold in the preceding 12 months
7. That we correct your personal information
8. That we delete your personal information, subject to limited exceptions under applicable law

Requests should be made in writing, by email, or by telephone. We must be able to verify your identity before we are able to release your personal information to you or to delete your personal information. Your request will need to include your full legal name and current residential address for these verifications.

We will confirm requests within 10 days and will respond to requests to know or requests to delete within 45 days, or provide notice if we require longer (but will respond within 90 days). We will provide you with your personal information in a portable, readily useable format free of charge.

Previous calendar year request totals

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please also contact our U.S.-based third-party dispute resolution provider (free of charge) at feedback-form.truste.com/watchdog/request.

12. Do Not Sell My Personal Information and Opt-Out Options

You may direct us at any time not to sell your personal information or use it to perform our services. You may opt out of the sale of information by using the form at privacychoice.com to submit your request, or by calling our toll-free number (U.S. only) 888-401-0387. We will comply with any requests to opt out of the sale of personal information as soon as feasibly possible, but in any event, no later than 15 business days from the date Semcasting receives your request.

13. Communications Opt-Out Policies

Our Sites provide users the opportunity to opt-out of receiving communications from us at the point where we request information about the visitor. Our email communication materials also give users the option to remove their information from our database to not receive future communications by clicking the unsubscribe link. You can also send an email to unsubscribe@semcasting.com.

Newsletters and Blogs

If you wish to subscribe to our newsletter and/or our blogs, we will use your email address to send the newsletter to you. To unsubscribe, follow the unsubscribe instructions in the emails or contact us at unsubscribe@semcasting.com.

Direct Mail Solicitations

Semcasting is a member of the Direct Marketing Association/Association of National Advertisers. All DMA/ANA members are required to use DMA/ANA's Mail Preference Service (MPS) to comply with consumer requests not to receive direct mail advertising. To register, please contact the DMA/ANA Consumer Assistance website at thedma.org/accountability/dma-choice or by calling 212-768-7277.

14. Contact Information

To exercise your rights under this Privacy Policy or for any questions, please contact us: