Legal Information

Privacy Policy

Effective Date: March 2026

Information about Validity

Validity is a company that provides solutions for end-to-end marketing success, using our robust data network to help marketers drive better engagement and results through campaign optimization, increased productivity, lower costs, and faster growth.

Validity provides SaaS and on-prem applications to businesses via a business-to-business (B2B) model. Our customers range from large enterprises to smaller companies; Validity's products and services are sold to organizations around the world. Our products are not designed, intended, or sold for personal or non-commercial use.

Generally, our customers control the data they enter into our applications and decide how it should be used. We offer customizable services to provide options for you and your legal team to comply with certain regulations that may be applicable to your data and usage, including GDPR. Validity always recommends minimizing the data you collect or process by either anonymizing or removing any personal data, if possible. Please note, you are solely responsible for complying with all privacy laws and regulations which apply to your use of Validity's services.

Introduction

Validity, Inc., and its Affiliates ("Validity," "we," "our," "us") respect your privacy rights and value your trust. This Privacy Policy describes how we collect, receive, use, store, share, transfer, and process information about you that directly or indirectly identifies you ("Personal Data" or "Personal Information"), as well as your rights in determining what we do with the information that we collect or hold about you.

This Privacy Policy applies when Validity is the data controller of your Personal Data and describes if and how Validity processes your Personal Data for its own purposes.

This Privacy Policy applies in connection with the receipt and use of:

Validity's content, communications (including emails), and services ("Offerings")
Any of the websites operated by Validity (the "Sites")
Events and other services provided by us both online and offline that link to this Privacy Policy

This Privacy Policy does not cover how we process Personal Data on behalf of our customers as a data processor.

If you are a Validity job applicant, please refer to the Applicant Privacy Notice. If you are a current or former employee or contractor, please refer to internal policies or contact us at privacy@validity.com.

California Residents: Please refer to our California Privacy Notice for more details on California-specific privacy rights.

What We Collect, How We Collect It, and Our Purpose

Validity collects and uses Personal Data for a variety of purposes and in compliance with applicable laws. We collect information in the following ways:

Through the Sites

We collect information when you use Validity's sign up forms or Sites to submit a request for a free trial or demo, request information about a service, register for a webinar, sign up for an event, contact us, use online chatbot functionality, subscribe to our email newsletters, download content, or submit online support tickets.

Examples of data points	Legal basis and purpose for processing
Business contact information such as first and last name, email, telephone number, company name, job title, country; IP address; feedback provided; content of the submitted request/issue; time zone and country or city-level location based on your public IP address.	We rely on our legitimate interests or your consent to carry out business activities when we respond to your communications; process your requests; provide you with information about our products; support our marketing activities; fulfill contract requirements; manage, plan, and host events; and use your feedback to develop, enhance, and update our Services.

Online Meetings and Sales/Support Calls

We collect Personal Data (including audio and video content, if applicable) when you contact our sales or support teams or participate in online meetings. We may record such calls for staff training, quality assurance, and business administration purposes. We will always notify you before recording.

Examples of data points	Legal basis and purpose for processing
Business contact information such as first and last name, email, company name, job title, video, and audio content/image(s).	We rely on your consent (where required under applicable law) or our legitimate interests to enhance our sales/support processes; keep our CRM records up to date; generate automated call transcripts for analysis and audit; and train our sales and support teams.

Offline

We collect information from you offline, such as when you attend one of our events, share your business card with us, or sign up at Validity's event booths.

Examples of data points	Legal basis and purpose for processing
Business contact information such as first and last name, email, telephone number, company name, job title, country.	We rely on your consent (where required under applicable law) to follow up with you with information about our products and services; support our marketing activities (including information about future events and products).

Information from Other Sources

We may obtain information about you from public databases, joint marketing partners, social media platforms, and other third parties to validate, update, or supplement your business contact information.

Examples of data points	Legal basis and purpose for processing
Business contact information such as first and last name, email, telephone number, company name, job title, industry, country.	We rely on our legitimate interests or your consent to deliver interest-based content to you; identify potential customer opportunities and understand our market; and keep our customer business contact records accurate and up-to-date.

Through Your Browser or Device

When you visit our Sites, we may collect information related to your interaction with the Sites, including general location information from your device's IP address.

Examples of data points	Legal basis and purpose for processing
MAC address, IP address, internet browser type and version, computer type (Windows or Macintosh), time of visit, pages visited, and country or city-level location based on your public IP address.	We rely on our legitimate interests to improve the content of our Services; administer our Services, including by monitoring and analyzing traffic and usage patterns; and prevent fraud, illegal activity, or security vulnerabilities.

Through Your Use of the Services

We may track Services usage data, such as what features you use, your actions and the date and time within those Services, and how you interact with our emails.

Examples of data points	Legal basis and purpose for processing
MAC address, IP address, country or city-level location, browser type and version, computer type, time of visit, pages visited, click-activity, date/time stamps, and movements across the Sites.	We rely on our legitimate interests to perform internal analytics and improve content; administer our Services; prevent fraud, illegal activity, or security vulnerabilities; and enforce our policies and terms of use.

Through Cookies and Tracking Technologies

When you visit our Sites, we use cookies and similar technology to store and retrieve information on your browser. See the section below on cookies for more details.

Examples of data points	Legal basis and purpose for processing
MAC address, IP address, browser type and version, computer type, time of visit, pages visited, country or city-level location, language preference, and interactions with our advertising and social media content.	We rely on consent (as applicable) and our legitimate interests to improve content; administer our Services; serve you with tailored information about Services; facilitate your ongoing access to and use of the Sites; prevent fraud and illegal activity; and gather demographic information for business planning and marketing strategy.

De-identified Data

Validity may create, collect, maintain, and use de-identified data to analyze and improve our products and Services. Validity will not attempt to re-identify you if your personal data has been de-identified and aggregated.

Disclosure of Personal Data

Subsidiaries and Affiliates

We may disclose Personal Data to Affiliates where necessary to fulfill a request you have submitted or for customer support, marketing, technical operations, event registration, and account management purposes.

Service Providers

We contract with Service Providers to perform tasks on our behalf and may share your Personal Data with some of them to provide our products or Services to you. Examples include data analysis, marketing assistance, billing, credit card processing, customer service, and hosting our Services. All Service Providers are required to maintain the privacy, confidentiality, and security of your Personal Data.

Business Partners

With your prior consent, we may share contact information with referral partners, business partners, or other third-party sponsors of sweepstakes, contests, and similar promotions.

Business Transfers

In the event Validity buys or sells assets or businesses, user information may be one of the business assets that is transferred.

Protection of Validity and Others

We may release Personal Data as necessary to law enforcement, tax, fraud prevention, credit risk agencies, and other companies and organizations.

No Sale of Personal Data

We do not "sell" your Personal Data, as defined in CA AB 375 and NV SB 220, for consideration.

How We Secure Personal Data

We have implemented appropriate organizational, technical, and administrative measures to protect Personal Data within our organization. While we take reasonable steps to secure your Personal Data, no security procedures can be 100 percent secure. If you believe your interaction with us is no longer secure, please notify us at security@validity.com.

How We Use Cookies and Other Tracking Technologies

We and our Service Providers may collect and store your usage information using cookies, web beacons, pixel tags, embedded scripts, and other tracking technologies. We use these to serve you with more tailored information, facilitate access to the Sites, analyze usage trends, and gather demographic information.

Types of Cookies

Strictly Necessary Cookies: Required for the website to function. Cannot be switched off. Do not store personally identifiable information.
Performance Cookies: Allow us to count visits and traffic sources to measure and improve Site performance. All information collected is aggregated.
Functional Cookies: Enable enhanced functionality and personalization. If disabled, some services may not function properly.
Targeting Cookies: Set by our advertising partners to build a profile of your interests and show relevant advertisements on other sites.

To manage your cookie preferences, click "Do not share my personal info" or the icon at the bottom left corner of the Site.

Other Technologies

Log Files and Local Storage: We gather certain information automatically in log files, including IP addresses, browser type, ISP, referring/exit pages, operating system, date/time stamp, and clickstream data.

Clear Gifs, Pixels, and Web Beacons: We may use clear gifs in our HTML-based emails to determine which emails have been opened by recipients.

Do Not Track: We do not currently honor Do Not Track browser settings or signals.

Data Retention

We retain Personal Data where we have an ongoing legitimate business need to do so. When we have no ongoing legitimate business need to process your Personal Data, we will either delete or de-identify it. To cancel your account or request we no longer use your information, contact us at support@validity.com.

Artificial Intelligence

Our Service Providers may use large language models and other forms of artificial intelligence in their work with Validity, in accordance with applicable laws. These Service Providers and their processing of Personal Data are subject to the requirements of this Privacy Policy and to due diligence performed by Validity's security and privacy teams.

Privacy Notice Regarding Children

Validity does not knowingly collect information from children under the age of 16. If you are under the age of 16, please do not use the Services. If we become aware that we have collected information from a child under the age of 16, we will make commercially reasonable efforts to delete such information.

Sensitive Information

We ask that you not send us or disclose any sensitive Personal Data (e.g., social security numbers, information related to racial or ethnic origin, sexual orientation, political opinions, religion, health, biometrics, genetic characteristics, criminal background, or trade union membership).

International Transfers

Your Personal Data may be stored and processed in any country where we have offices or facilities or in which we engage Service Providers. Validity will take steps to ensure your Personal Data is subject to appropriate safeguards, including the Data Privacy Framework (DPF) and European Commission standard contractual clauses.

Data Privacy Framework

Validity complies with the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF as set forth by the U.S. Department of Commerce. To learn more, visit dataprivacyframework.gov.

EU, UK, and Swiss individuals with complaints regarding our handling of personal data should contact us at privacy@validity.com or:

Privacy Department
Validity, Inc.
100 Summer Street, Suite 2900
Boston, MA 02110

Unresolved complaints may be referred to JAMS at no cost to you. The Federal Trade Commission has jurisdiction over Validity's compliance with the DPF.

Your Privacy Rights

Depending on your location and jurisdiction, you may have the right to:

Know what Personal Data we hold and process about you and to access it
Correct any inaccurate Personal Data we may have about you
Erase your Personal Data
Cease or restrict the processing of your Personal Data
Receive your Personal Data in a structured, commonly used, and machine-readable format
Withdraw your consent
Object to the processing of your Personal Data
Opt-out of targeted advertising, profiling, the sale or sharing of Personal Data
Receive non-discriminatory treatment for the exercise of privacy rights
Lodge a complaint with the appropriate data protection authority

How to Exercise Privacy Rights

You may exercise applicable privacy rights by submitting one of the following forms:

To opt out of the sharing of your Personal Data for targeted advertising, please disable Targeting Cookies in our Privacy Preferences Center. You may also implement the Global Privacy Control (GPC).

Opt-Out of Marketing Communications

You can opt-out of receiving marketing communications from Validity by unsubscribing through the Unsubscribe or Opt-out link in an email. Please note that if you opt-out of marketing emails, we may still send you administrative and transactional messages.

Privacy Policy Updates

We update the Privacy Policy from time to time, so please review it regularly. If we materially change our Privacy Policy, we will notify you by posting a notice on validity.com. Your continued use of the Services will be deemed your agreement that your information may be used in accordance with the new Privacy Policy.

Contacting Validity

Validity, Inc.
Attn: Privacy Department
100 Summer Street, Suite 2900
Boston, MA 02110
(800) 961-8205 (US toll-free)
privacy@validity.com

Validity International Limited
First Floor, Blue Fin Building
110 Southwark Street
London SE1 0SU UK
privacy@validity.com