Privacy Policy

Last updated: July 2, 2026

The short version: we never track the visitors of publisher websites. Our ads are matched to page content, not to people. We collect only the account data publishers give us to run the network and pay them.

This Privacy Policy explains how Advertstation LLC ("AdNexusIO", "we", "us") collects, uses, and protects personal data when you use the AdNexusIO website (adnexusio.com), the publisher portal (publishers.adnexusio.com), the AdNexusIO ad widget, and related services (together, the "Service").

1. Who this policy covers

Publishers — site owners who apply for and hold an AdNexusIO account.
Site visitors — people who view pages on publisher websites where the AdNexusIO widget is installed.
Website visitors — people who browse adnexusio.com or the publisher portal.

2. Data we collect from publishers

When you apply for and use a publisher account, we collect:

Data	Why we collect it
Name and email address	To create and manage your account and contact you about your application, earnings, and policy matters.
Password (stored only as a bcrypt hash)	To secure your account. We can never see your actual password.
Website URL, content niche, traffic estimate, application notes	To review your application and match relevant offers to your site.
Country	For payout processing and legal compliance.
IP address and browser user-agent at signup/login	For account security, fraud prevention, and rate limiting.
Earnings, clicks, conversions, and payout records	To calculate, display, and pay your revenue share, and to meet accounting obligations.

3. Data about site visitors — what we deliberately do not collect

The AdNexusIO widget is contextual by design. When it loads on a publisher page:

We do not set cookies or use any similar tracking technology in visitors' browsers.
We do not fingerprint devices, build visitor profiles, or track anyone across websites.
The widget sends us the page context (such as the page title and headings) so our matcher can choose a relevant offer. This describes the page, not the person.
When a visitor clicks an ad, we record the click server-side with a random click ID, the offer, the publisher site, a timestamp, and standard web-server log data (IP address and user-agent) used transiently for fraud detection and to prevent click abuse. We do not use this data to identify or profile visitors, and it is not linked to any advertising profile.

4. Data from visitors to our own websites

adnexusio.com and publishers.adnexusio.com do not use analytics or advertising cookies. The publisher portal stores an authentication token in your browser's local storage after you log in — this is strictly necessary to keep you signed in. See our Cookie Policy for details. Our web servers keep standard access logs (IP address, user-agent, requested URL) for security and troubleshooting.

5. Legal bases (GDPR)

Where the EU/UK General Data Protection Regulation applies, we rely on:

Contract (Art. 6(1)(b)) — to operate your publisher account, track your earnings, and pay you.
Legitimate interests (Art. 6(1)(f)) — for network security, fraud and invalid-traffic prevention, and service improvement.
Legal obligation (Art. 6(1)(c)) — for accounting, tax, and compliance records.
Consent (Art. 6(1)(a)) — only where we ask for it explicitly; we do not rely on consent for any hidden processing.

6. Where data is stored

Our servers are hosted in the European Union (Frankfurt, Germany). If we ever transfer personal data outside the EU/EEA, we will use recognized safeguards such as the European Commission's Standard Contractual Clauses.

7. How long we keep data

Account data — for the life of your account, then deleted or anonymized within 90 days of account closure, except where law requires longer retention.
Earnings and payout records — kept as required for accounting and tax purposes.
Click and conversion records — kept in identifiable-log form only as long as needed for fraud review and reconciliation, then retained as aggregate statistics.
Server access logs — rotated automatically on a short cycle.

8. Sharing

We do not sell personal data. We share data only with:

Infrastructure providers that host the Service (e.g., our EU cloud hosting provider), bound by data-processing terms.
Affiliate program partners — when a visitor clicks an offer, the destination merchant or network receives the click through their own tracking link, governed by their own privacy policy. We pass a random click reference, never a visitor identity.
Payment providers — the details needed to send your payouts.
Authorities — where the law genuinely requires it.

9. Your rights

Depending on your location, you may have the right to access, correct, export, restrict, object to, or delete your personal data, and to lodge a complaint with a supervisory authority. To exercise any of these rights, email support@adnexusio.com from your account email. We respond within 30 days.

10. Security

We protect data with TLS encryption in transit, bcrypt password hashing, hashed session tokens, server-side click tracking, access controls, and least-privilege infrastructure. No system is perfectly secure; if a breach affects your personal data, we will notify you and the relevant authorities as required by law.

11. Children

The Service is for business use and is not directed at children under 16. We do not knowingly collect personal data from children.

12. Changes

If we change this policy, we will update the date above and, for material changes, notify publishers by email or via the portal before the changes take effect.

13. Contact

Advertstation LLC — operator of AdNexusIO
Email: support@adnexusio.com