Privacy Policy

Adbustr ("Adbustr", "we", "our") is the trading name of WYSAMM LLC, a limited liability company registered in the Republic of Armenia (TIN 08222398), with its registered office in Yerevan, Armenia. We operate our own programmatic advertising exchange — a supply-side platform with an internal auction. This Privacy Policy describes how we collect, use, disclose, and safeguard information in connection with our exchange operations.

1. Information we collect

In the ordinary operation of our exchange, we receive information from publishers, advertisers, demand-side platforms, and end-user devices.

• Device identifiers (IDFA, AAID, device-graph identifiers)
• IP addresses and approximate geographic location
• Browser and operating system metadata
• Contextual signals from OpenRTB 2.5 Site, App, Device, and User objects
• Bid request and bid response telemetry
• Impression, click, and notice events generated by our own tracking pixels and by OpenRTB win, billing, and loss notices (nurl / burl / lurl)

2. How we use information

• To operate, secure, and improve our exchange
• To enrich and route each ad request through our Resonance decisioning layer — geographic and device resolution, demand selection, and request validation
• To apply the ad-request validation checks set out in our Anti-Fraud Policy and to investigate invalid traffic reported to us by a partner
• To meet our contractual and regulatory obligations

3. Legal bases (GDPR)

• Article 6(1)(b) — performance of contract with our DSP and publisher partners
• Article 6(1)(f) — legitimate interest in operating a fraud-resistant programmatic exchange

4. Recipients

We share information with integrated DSP partners in the course of the auction, and with our infrastructure subprocessors. By category, these are: cloud and network hosting providers operating our exchange servers in the European Union and in the United States; and website hosting, email delivery, and privacy-preserving web analytics providers (Vercel, Cloudflare, Resend, Plausible). A current, named subprocessor list is available on request from privacy@adbustr.com. Where a publisher or demand partner instructs us to do so, we transmit impression-level events to that partner's own measurement or verification provider. We do not sell personal data.

5. Data subject rights

EU/EEA/UK residents have rights under GDPR Articles 15–22. California residents have equivalent rights under the CCPA. Exercise rights by contacting privacy@adbustr.com.

6. Data retention

Raw bid and event logs are retained for no longer than 13 months. Aggregated and anonymized analytics, which are no longer attributable to a device or user, are retained for the periods required by applicable accounting and statutory obligations.

7. International transfers

Exchange data is processed on dedicated infrastructure operated by Adbustr inside an isolated private network. That infrastructure is located in both the European Union (Amsterdam) and the United States (Oregon) — ad serving is not confined to the EU/EEA. WYSAMM LLC is itself established in the Republic of Armenia, which is not covered by an EU adequacy decision. Transfers of personal data outside the EU/EEA — by us, by a subprocessor, or by an integrated partner — are governed by Standard Contractual Clauses.

8. Contact

Privacy inquiries: privacy@adbustr.com. Data Protection Officer: dpo@adbustr.com.