Privacy Policy

General
1. AMPLIFT TECHNOLOGIES LTD. (“Amplift”) IS AN ADVERTISING PLATFORM
THAT MONETIZE MOBILE APPLICATIONS AS WELL AS OTHER SERVICES
OR PRODUCTS WHICH WE MAY MAKE AVAILABLE FROM TIME TO TIME
(THE “SERVICES”).

2. In this Policy, “AMPLIFT” shall include also any of its affiliates (meaning
controlling entities, controlled entities and entities under common control).

3. AMPLIFT takes your privacy very seriously and is committed to protecting your
information in compliance with all applicable laws and regulations (collectively,
“Laws”).

4. This Policy has been created to inform you about how AMPLIFT collects and/or
receives, stores, uses and shares and/or discloses the information you provide or
that is being collected in connection with your use of any of the Services or your
visit to our website (the “Website”). By accessing or using any of the Services or
the Website, you are deemed to have accepted this Policy, including without
limitations, to the collection and/or receipt, disclosure, storage and use of your
information as outlined in this Policy. If you do not agree to any provision in this
Policy, please stop using the Services or the Website.

5. Amplift may amend this Policy from time to time without providing to you any
notice and you are encouraged to check this Policy frequently in order to make
sure you are familiar with the most updated version. You continued use of the
Services or the Website indicates your consent to the most updated version of
this Policy.

6. Please note that Amplift will not share and/or disclose any of your personal
information or other identifiable (by itself or together with additional information)
information protected under applicable privacy Laws (including without limitations
the GDPR and the CCPA/CPRA) (“PI”) with third parties for their direct marketing
purposes unless you affirmatively agree to such disclosure, typically by “opting
in”.

7. For the purposes of the GDPR, AMPLIFT might be a data controller (i.e., the
company that is responsible for, and controls the processing of your PI) for
certain uses of your PI and a data processor for other uses, as applicable.

8. We use third-party advertising companies to serve ads when you visit our Web
site. These companies may use aggregated information (not including your
name, address, email address or telephone number) about your visits to this and
other Web sites in order to provide advertisements about goods and services of
interest to you. If you would like more information about this practice and to know
your choices about not having this information used by these companies, please
see: http://www.networkadvertising.org/managing/opt_out.asp


How Amplift Collects Your Personal Information

1. AMPLIFT only collects PI to the extent it is necessary in order to fulfil one or
more of the Services’ or the Website’s functions and activities and/or to maintain
and improve the Services or the Website.

2. As an example only, Amplift may collect the following PI from you directly or from
third parties: (i) your name; (ii) your IP and other browsing data including your
device, browser, etc.; (iii) your e-mail and other contact details which you have
provided or which we have collected in accordance with this Policy; (iv) your
location data; (v) your gender; and (vi) your age and date of birth.

3. Amplift may also collect certain information about your activities on or through
various third-party applications or services, through your use of the Services or
the Website and/or from collecting and certain publicly available information.

4. Amplift may receive certain billing and payment information when you make
payments to or receive payments from AMPLIFT. AMPLIFT will not store your
financial information, however payment processors may share and/or disclose
non-financial information with AMPLIFT.

5. AMPLIFT may use various tracking technologies to collect certain
technical information, including without limitations: (i) the type of the device you
are using; (ii) the type of your operating system, version and platform type; (iii)
your mobile device’s identifiers and other related information; (iv) your browser
types, language, etc.; (v) referring/exit pages, URL, etc.; and (vi) pages viewed
and other types of browsing information. In collecting such information from your
devices (and in general under this Policy) Amplift will act in full compliance with
applicable Laws.

6. Amplift may collect the above information directly or through our third-party
suppliers, subject to the applicable engagement terms with such third-party
suppliers and subject to applicable Laws.


Transfer of Personal Information Internationally

1. When you use the Services or the Website, your PI may be transferred between
one county to another, including without limitations: (i) from the United States to
other countries or from other countries into the United States, and/or (ii) from the
EU to other countries or from other countries into the EU. Amplift may store PI
about you on servers located in the EU, in the United States and/or in other
countries and Amplift may change the location of our servers (or severs or
third-parties AMPLIFT is making use of, at its sole discretion) time to time.

2. When AMPLIFT transfers your PI from one country to another country, it will take
commercially reasonable steps to ensure that your PI is treated in the most
secured and lawful way and in the manner and in accordance with the principles
that are described in this Policy as well as industry standards.

3. Please note that Laws vary from one jurisdiction to another, and so the privacy
and data protection Laws applicable to the places where your PI is to be
transferred to or to be stored, used or processed in, may be different from similar
Laws in the place where you are resident or in which your PI is currently located.

4. If you are a resident in a jurisdiction, where transfer of your PI to another
jurisdiction requires your consent, then you hereby provide AMPLIFT with your
express and unambiguous consent to such transfer in order for us to be able to
provide you with the Services and the Website.

5. Last, certain aspect of privacy and data protection Laws might be subject to
interpretation, including with respect to the sufficient protection which should be
applied when transferring your PI from the EU to other countries. The exact
manner in which AMPLIFT should apply security measures such as various
standard contractual clauses, available protection shields, as well as other legal
and contractual protection is being done to our best understanding of the existing
legal framework on these issues.

Cookies

1. A cookie is a small data file that is stored on your computer or on your mobile
device. The Services may send cookies to a computer or a mobile device when
you access the Information contained in a cookie may be linked to PI for
purposes such as improving the quality of the Services or the Website, creating
or improving recommendations to interests, and making the Services or the
Website easier to use for you.

2. Third party advertisers on the Services or the Website may also use, place or
read cookies or other technologies as described below on your browser, and
those practices are subject to their own policies. You may disable the cookies at
any time by changing your web browser’s options to stop accepting cookies, to
prompt you before accepting cookies from the websites you visit or limit the type
of cookies you allow, however any such changes and actions might affect your
ability to use certain aspects and features of the Services or the Website.

3. AMPLIFT and its third party service providers and/or partners may also employ
other similar technologies including, without limitations: (i) web beacons, allowing
us to know if a certain page was visited or whether a specific e-mail was opened;
or (ii) pixels, allowing us or our advertising or other partners to advertise more
efficiently by excluding you from certain promotional messages, identifying the
source of a new installation or delivering ads to you on other websites.


How AMPLIFT Uses and Shares and/or Discloses Your Personal Information

1. AMPLIFT may collect and/or receive and store your PI for the following reasons:
(i) enable our Services or the Website; (ii) improve, optimize and personalize the
Services or the Website; (iii) provide technical support; (iv) protect your safety
and your legal rights; (v) enforce this Policy; (vi) prevent fraud or illegal activities;
(vii) manage and deliver contextual and behavioral advertising; (viii) notify you of
new products or services or any updates; or (ix) comply with legal obligations and
resolve disputes.

2. For fulfilling the above purposes AMPLIFT may share your information with third
parties such as services provider and suppliers, subject to making sure that such
third parties are in full compliance with their legal obligations with respect to the
protection of your information.


Advertising by a Third-Party

1. AMPLIFT does not actively share and/or disclose PI with third-party advertisers
for their direct marketing purposes unless you have provided your consent.

2. When advertisers place ads in the Services or the Website, they may collect or
Amplift may share certain performance data, aggregated and/or de-identified
information about you. AMPLIFT may use your email and other contact details
you provided with for approaching you with direct marketing offers, including new
products or services by AMPLIFT or its business partners. You may opt out of
such marketing services by replying accordingly to messages or by contacting us
at: support@theAmplift.io

3. The information collected as set forth above may be used in order to measure
the effectiveness of ads, offer targeted advertising and/or perform web analytics.


How We Share Your Information – Additional Cases

1. AMPLIFT may share your information: (i) in response to lawful requests by
governmental authorities, including to meet national security or law enforcement
requirements, or legal process; (ii) to satisfy any Laws; (iii) where we believe that
the Services or the Website is being used in committing a crime or other illegal
act or omission , including to report such illegal activity and/or to share
information with other companies and organizations for the purposes of fraud
protection, credit risk reduction, and other security precautions; (iv) when
AMPLIFT believes that there is an emergency that poses a threat to your health
or safety and/or of any other person; and (v) to protect the rights or property of
AMPLIFT, yours or and other third party, including to enforce this Policy.


Managing Your Information

1. Please note that, under applicable data protection Laws, you have the following
rights, which you can exercise in accordance with the instructions below:

• access your personal data and receive a copy thereof;

• amend your personal data, i.e. request to amend inaccurate personal data;

• delete your personal data, provided that one of relevant grounds for such actions
apply (and that no exclusions under applicable Laws exist – for example Amplift
may have the right not to agree to a request to delete information if applicable
Laws obligate us to retain information for AML/KYC purposes);

• restrict the processing of your personal data, provided that one of relevant
grounds for such actions apply (and that there are no exclusions under
applicable Laws);

• complain to a supervising authority; and

• withdraw your consent in accordance with and subject to applicable Laws.

You may request to exercise your rights in relation to your personal data by contacting
us at: support@amplift.ai


How AMPLIFT Protects Your Personal Information

1. AMPLIFT has made reasonable technical and organizational measures designed
to secure your information from accidental loss and from unauthorized access.
While we take reasonable precautions against possible security breaches of our
Services or the Website, no website or Internet transmission is completely
secure, and AMPLIFT cannot guarantee that unauthorized access, hacking, data
loss, or other breaches will never occur.


How Long AMPLIFT Retains Your Personal Information

1. How long AMPLIFT retains your PI depends on why such PI was collected and
how such PI is being used. AMPLIFT will not retain your PI for longer than is
necessary for its business purposes or for legal requirements.

2. AMPLIFT is determining the retention period by assessing the time required to
fulfill its business purposes, and mainly to provide its various products and
services, maintaining relevant transaction and other business records, improving
and monitoring the performance and the quality of its services and any other
requirements under applicable laws and regulations, as they may be from time to
time.

3. For instance, AMPLIFT may retain all or part of your PI for a few years after you
have decided to stop using the Services or the Website (including in case you
have requested to have deleted your information) if this is necessary to meet its
legal obligations or to exercise legal rights (including without limitations any
AML/KYC obligations).


Prohibited Content


Publishers are prohibited from using AMPLIFT’s services if their properties include or
promote any of the following content categories:
• Content related to gambling or online casinos where real currency can be cashed out
(IAB9-7 (Card Games));
• Websites and other content that are still under construction (IAB25-6 (Under
Construction));
• Illegal drugs or drug paraphernalia (IAB26-1 (Illegal Content));
• Spyware, malware, viruses, illegal hacking, or other materials intended to damage or
disable software or hardware (IAB26-3 (Spyware/Malware));
• Content that offers traffic generation or promotes fraudulent traffic (IAB26-1 (Illegal
Content));
• Content that advocates the superiority of a specific race, ethnic group, nationality,
religion, gender, sexual orientation, language, veteran status, or any other legally
protected status (IAB23 (Religion & Spirituality), IAB25-5 (Hate Content));
• Adult, sexual, or obscene content (IAB25-3 (Pornography));
• Discriminatory, offensive, profane, or hate speech (IAB25-4 (Profane Content),
IAB25-5 (Hate Content));
• Graphic or explicit violence (IAB25-2 (Extreme Graphic/Explicit Violence));
• Weapons, weapon accessories, or ammunition (IAB26-1 (Illegal Content));
• P2P file sharing, torrenting, or other content that violates or infringes upon third-party
intellectual property rights (IAB26-2 (Warez), IAB26-4 (Copyright Infringement));
• Counterfeit goods (IAB26-4 (Copyright Infringement));
• Illegal products, activities, or services (IAB26-1 (Illegal Content));
• Unmoderated user-generated content, including video chat and live streaming
(IAB25-1 (Unmoderated UGC));
• Substance abuse (IAB7-42 (Substance Abuse));
• Abuse support (IAB7-28 (Incest/Abuse Support));
• Alcohol-related content (IAB8-5 (Cocktails/Beer), IAB8-18 (Wine));
• Lotteries (IAB3-7 (Government));
• Content related to hunting and shooting (IAB17-18 (Hunting/Shooting));
• Pharmaceutical or health products and services, including prescription medications
(IAB7-5 (Alternative Medicine));
• Non-Valuable Content, including sites with little to no value other than ads, outdated
news or blogs, or those with no evidence of user engagement, designed solely for ad
monetization;
• Virtual private networks (VPNs), proxy servers, or similar services;
• Uncategorized content (IAB24 (Uncategorized));
• Content that disparages AMPLIFT or its partners, or contains links to such content.

The Publisher’s properties must be directly owned, operated, or controlled by the
Publisher. Any exceptions to this rule require review and approval by AMPLIFT.
Properties that exist solely to generate ad impressions are strictly prohibited.


Restricted Content
The Publisher’s properties may be allowed, at AMPLIFT’s sole discretion, to feature or
promote certain restricted content categories, as long as the Publisher has adequate
controls in place to ensure that such content complies with all relevant laws, rules, and
regulations in the country and jurisdiction where the content is delivered:

• Financial services, including topics such as Beginning Investing, Credit/Debt & Loans,
Financial Planning, Hedge Funds, Insurance, Investing, Mutual Funds, Options,
Retirement Planning, and Stocks.

• Political campaigning.

• Incentivized clicks, videos, or downloads.

Publishers may permit rewarded video advertising, provided that the rewards given to
users for viewing the ads meet the following conditions: (a) the ad is clearly marked as a
rewarded ad by the Publisher, (b) the rewards are specific to the app where the video
ad is displayed, and (c) the rewards are virtual, meaning they hold no monetary value.
The Publisher will bear full responsibility and liability for these rewards.


CCPA Obligations Applying to your Personal Information

1. This part of this Policy contains provisions required by the California Consumer
Privacy Act of 2018 (the “CCPA”) and the California Privacy Rights Act of 2020
(the “CPRA”) and applies only to “PI” that is subject to the CCPA and the CPRA
and only to California residents. In this Policy, any reference to the “CCPA” shall
mean such Act as amended by the CPRA and/or by any other regulations or
other legislative actions from time to time.

2. For the purpose of the CCPA and the CPRA, “PI” does not include: (i) publicly
available information from government records; (ii) de-identified and/or
aggregated information; or (iii) information specifically excluded from the scope of
the CCPA/CPRA, such as health information or medical information or PI covered
by certain sector specific privacy laws and regulations.


Collection, Disclosure or Sale of PI

1. In the last 12 months, AMPLIFT collected the categories of PI about California
residents as described in this Policy including in this CCPA Privacy Notice.
AMPLIFT’s use of such PI may qualify as a “Sale” under the CCPA, since the
data we provide to third parties, including to our clients/users and partners might
help us to generate valuable consideration. Even if our own use of PI does not
constitute a “Sale” under the CCPA, our clients/users and partners may use our
technology to buy or sell PI as defined by the CCPA. If you wish to opt out of the
use of your PI for interest-based advertising purposes, please contact us
at:support@amplift.ai


Categories of PI AMPLIFT Collects

1. Personal and online identifiers (such as name, emails, unique online identifiers
like cookies, mobile advertising IDs, etc.). Please note that AMPLIFT will not,
however, sell any personal identifiers such as names and emails and they will be
used only for AMPLIFT’s internal purposes as described in greater depth in other
parts of this Policy.

2. Internet or other electronic network activity information (such as browsing history,
interactions with a website or advertisement).

3. Geolocation information.

4. Inferences drawn from the above information about your predicted characteristics
and preferences.

5. Other information linked to the PI above.


Such PI was Used as follows

1. Categories of Sources: AMPLIFT collects this PI from the following categories of
sources: visitors of our Website, business partners and automated means

2. Why We Collect, Use, and Share such PI: AMPLIFT uses the PI collected for its
commercial and business purposes, as described in this Policy. These
commercial and business purposes include, without limitation: (i) Providing the
Services or the Website, (ii) Other business purposes as identified in the CCPA,
which include: advertising or marketing services, legal compliance, detecting and
protecting against security incidents, fraud and other illegal activity and analytics,
internal research for technological improvement, internal operations, activities to
maintain and improve the Services or the Website and other certain one-time
uses.

3. Recipients of California PI: To the extent our use of PI constitutes a “Sale” under
the CCPA, we “sell” PI to our partners. AMPLIFT discloses the categories of PI
designated above to the following categories of third parties, for the above
commercial and business purposes: Services providers (as defined by the
CCPA), government entities (upon request and to the extent we are obligated to
do so), Services providers such as fraud protection vendors and data analytics
companies.

4. AMPLIFT does not sell, transfer, trade, or otherwise give any right in to any third
party for its own business or personal use any PI unless it has secured your
Accordingly, there has been no sale of your PI by AMPLIFT to any third party for
its own business or personal use in the past twelve (12) month period.


Your Rights Regarding PI

1. If you are a California resident, you may exercise the following rights, subject to
certain exceptions as they shall be from time to time in accordance with and
subject to applicable Laws:


(i) the right to know categories and specific PI AMPLIFT collects, use, disclose, and sell
about you over the past twelve (12) months, categories of sources from which AMPLIFT
collects your PI, its purposes for collecting or selling your PI, the categories of your PI
that AMPLIFT has either sold or disclosed for a business purpose, and the categories of
third parties with which AMPLIFT has share PI,
(ii) the right to request that AMPLIFT delete the PI it has collected from you or maintain
about you – subject to certain exceptions,

Once AMPLIFT receives and confirms a verifiable consumer request (as more fully
explained below), Amplift will delete (and direct any relevant service providers to delete)
the relevant PI from our records, unless any of the exceptions provided under law
applies.


AMPLIFT may deny any deletion request made by you if retaining the information is
necessary for AMPLIFT or for any of its service providers to:

• Comply with the provisions of the California Electronic Communications Privacy
Act (Cal. Penal Code § 1546 seq.).

• Complete the transaction other purpose for which AMPLIFT has collected the
relevant PI, provide a product or a service that was requested by the relevant
consumer, take actions which are reasonably anticipated within the context of
AMPLIFT’s ongoing business relationship with the consumer, or otherwise
perform its contract with the consumer.

• Detect and solve security incidents, protect its business (including its software)
against any malicious, deceptive, fraud, or other illegal activity, or exercise its
rights vis-à-vis those who are responsible for the same.

• For maintenance purposes including repairing errors and malfunctions which
impair existing functionality.

• Exercise the right for free speech or ensure the rights of its customers to do so or
to exercise any another rights provided for by applicable law.

• Enable internal uses reasonably aligned with the consumer’s expectations based
on AMPLIFT’s relationship with the consumer, or

• Comply with any of its legal obligations (g. KYC duties).


(iii) the right to correct inaccurate PI. California consumers have the right to request that
any business that maintains any inaccurate PI about them correct that inaccurate PI,
considering the nature of the PI maintained by such business and the purposes of the
processing or other use of the applicable PI. A business must also use commercially
reasonable efforts to correct any inaccurate PI as directed by the consumer in a
verifiable consumer request,


(iv) the right for portability. California consumers are entitled to obtain a copy of their PI
which the requesting consumer has previously provided to a business, in a portable
and, if technically feasible, readily usable format which allows the consumer to transfer
the such PI to another business without hinderance.


(v) the right to limit the use and disclosure of sensitive PI. California consumers have
the right to limit AMPLIFT’s use and/or disclosure of any sensitive PI to the minimum
which is necessary in order to provide them with requested services or products.
California consumers should be provided with a link titled “Limit the Use of Sensitive
Personal Information” which link should lead to a landing page enabling them to select
to limit the use of any sensitive PI as described above. Sensitive PI includes any of the
following information: (i) social security number, driver license number, passport
number, etc.; (ii) bank account details, credit card or debit card number; (iii) user
account login information including passwords; (iv) contact details such as a personal
email, personal address or phone number when the recipient (the consumer) is not the
business accessing the information; (v) accurate geolocation; (vi) race, religious belief
or union membership; (vii) health related information; (viii) genetic data; or (ix)
information related to consumers’ sex life or orientation. Please note however that under
the CCPA/CPRA, publicly available information will not be considered as sensitive PI,
(vi) the right to opt out of any “sale” of your PI. A business must provide a “Do Not Sell
My Personal Information” link in a reasonable location on such business’ website and
such link should lead to a landing page enabling consumers to opt out of the selling or
sharing of their PI. California consumers may also opt-out of cross-behavioral
advertising and profiling based on decisions which can produce a legal or other
significant effect about them, and


(vii) the right not to be discriminated against for exercising any of your rights under the
CCPA. A business is not entitled to discriminate against any consumers who have
exercised any of their rights under the CCPA/CPRA. Anything to the contrary above
notwithstanding, a business is entitled to charge fees or provide a different quality of
services if the difference is reasonably related to the relative value of the applicable
customers’ data and, in addition, a business may offer its customers financial incentives
for the right to collect or sell any PI, based on prior opt in.


2. To exercise any of the above rights or for any questions you may have, please
contact us at: support@amplift.ai


Minors under 18

1. We do not sell the PI of consumers that we know to be under 18 years of age.
AMPLIFT is taking complying with applicable Laws regarding minors very
seriously, including without limitations, the United States’ Children’s Online
Privacy Protection Act.

2. If you are a parent or guardian and you have discovered that your minor has
submitted PI to us, AMPLIFT will make reasonable efforts to delete the
information from its database at your request. To request the deletion of your
minor’s information, please send an email to: support@amplift.ai


Making a CCPA/CPRA Consumer Rights Request.

1. A consumer who wishes to exercise any of its CCPA/CPRA rights above, can do
so in one of the following ways: (i) Clicking on this link to submit a form; or (ii) by
calling us at +972-544451052.

2. Upon AMPLIFT receiving a verifiable request from a consumer, Amplift will
confirm the receipt of the request within ten (10) days and provide the consumer
with information about how AMPLIFT handles the request, and by when the
consumer should expect to receive a response from us. Please note however
that a verifiable consumer request to receive information about your PI or to
access your PI under the CCPA/CPRA can be made not more than two (2) times
within any twelve (12) month period.

3. A verifiable request submitted to AMPLIFT by a consumer must include sufficient
information in order to allow AMPLIFT to reasonably verify that the submitting
consumer is actually the person about whom AMPLIFT collected the relevant PI
or an authorized representative of such person and, in addition, to describe the
consumer’s request with sufficient details in order to enable AMPLIFT to properly
evaluate the request and respond to it.

4. AMPLIFT may (but is not obligated) to request reasonable proof that anyone
approaching AMPLIFT with a request and seeking to act on the behalf of a
consumer is authorized by the consumer to do the same. It is permissible for a
consumer to make a verifiable consumer request on behalf of its minor children.

5. AMPLIFT will make reasonable efforts to respond to any verifiable consumer
request within forty-five (45) days of the date of receipt of the If AMPLIFT shall
require additional time to respond to the request, Amplift will inform you about of
the reason and additional period need (but in any event not more than 90 days
more) in writing.

6. Any response AMPLIFT provides only covers the twelve (12) month period
preceding the date on which the verifiable consumer request was actually
received by AMPLIFT.

7. AMPLIFT may (but is not obligated to) charge a fee to process or to respond to
any verifiable consumer request if such request is excessive, repetitive,
unfounded or for other justifiable reasons.


Changing AMPLIFT’s Policy
1. AMPLIFT may decide to change this Policy from time to time at its sole
discretion. If AMPLIFT decides to make material changes to this Policy, it will
inform you by placing a notice on its website or by sending a notice to the e-mail
address it has on file prior to the applicable change becoming effective – to the
extent practical to do so. Otherwise, AMPLIFT may post an updated version of
this Policy without any additional or prior notice.

2. For any questions about this Policy, please contact us at: support@amplift.ai