Privacy Policy

Last updated: 2025-09-15

1. Scope

This Privacy Policy describes how Instal (“we”, “us”) collects, uses, discloses, and safeguards personal data in connection with our performance marketing Services, including websites, tracking links, call tracking, and related tools.

2. Data We Process

  • Account & identity data (name, email, company, address, tax and payment information).
  • Event & device data collected via tracking (IP, user agent, device IDs, referrer, pages, timestamps, cookies and similar tech).
  • Call data records via Ringba or similar (caller ID, timestamps, duration, disposition, recordings where permitted by law).
  • Content and metadata you provide (creative, offers, tickets, chat).

3. Purpose & Legal Basis

We process data to operate and secure the network (attribution, fraud prevention, billing, compliance), fulfill contracts, and pursue legitimate interests. Where required, we rely on consent (e.g., cookies/recordings in certain regions).

4. Cookies & Tracking

We use first/third‑party cookies and similar technologies for attribution and analytics via platforms like Everflow. You can manage preferences via your browser settings and any consent tools presented in your region.

5. Sharing & Processors

We share data with service providers under contract, including Everflow (attribution), Ringba (call tracking), OpenAI (AI‑assisted analysis), cloud hosting, anti‑fraud, security, and payment vendors. We disclose data as required by law or to protect our rights.

6. International Transfers

We operate globally; personal data may be transferred internationally with appropriate safeguards (e.g., SCCs where applicable).

7. Retention

We retain data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

8. Security

We implement layered technical and organizational security controls, including access controls, encryption in transit, monitoring, and fraud detection.

9. Your Rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data. Submit requests via the Contact page; we will verify your identity before fulfilling requests.

10. Publisher & Advertiser Responsibilities

You are responsible for obtaining any consents required for your campaigns and complying with applicable marketing, privacy, and telemarketing rules (including TCPA, GDPR, CCPA/CPRA, CASL, and local laws). You must not submit unlawful or sensitive data without authorization.

11. Children

Our Services are not directed to children under 16 and we do not knowingly collect data from them.

12. Changes

We may update this Policy from time to time. Material changes will be posted on this page and, where required, presented via notices/consent prompts.

13. Contact

To exercise your rights or ask questions, please contact us through the Contact page.