(ARCHIVED) Privacy Policy

This Privacy Policy no longer applies - please see the most recent Privacy Policy.

Branch Discovery Privacy Policy
Last updated March 9th, 2020

Overview

Top

We value privacy and are committed to providing our services in a privacy-first way, including by practicing data minimization, limiting the information we disclose, and implementing measures to safeguard our data. At a high level, our Discovery Services allow our Customers to provide their Users with more relevant results in response to search queries. To provide these services, we collect certain technical data (e.g., IDFAs, IP address, and geolocation information) and search data (e.g., “best restaurant in San Francisco”) about Users. We use this information to provide and improve the Discovery Services, as well as to provide other Branch products and services, and generally to serve or communicate with our Customers. We may also de-identify or aggregate data we collect through the Discovery Services and use it for any purpose. We disclose information to our service providers and Customers and also to comply with laws, to protect ourselves and others, or as part of a business transaction. Users may opt out of certain data collection by following the instructions in the User Choices section below. Because we are a service provider to our Customers, they may use a different name to describe their use of Branch’s Discovery Services (for example, “Place Search”). Users should review the privacy policies of the mobile applications they use, which may give them additional options or rights regarding how our Customers use their data.

Introduction

Top

Branch Metrics, Inc. ("Branch", "us" or "we") offers a discovery service (the “Discovery Services”), available in the United States and India only, that enables developers of mobile applications and device features using the Discovery Services (our "Customers") to provide contextual results and intent-based links in their apps, which gives their end users ("Users") simplified access to completing an action (for example, to identify nearby restaurants). Branch recognizes and believes that data privacy is important to all Internet users, and therefore we design and operate our services in a privacy-first manner.

This Branch Discovery Privacy Policy (the “Discovery Privacy Policy”) explains what information Branch uses to provide the Discovery Services, and how it shares and protects data obtained by Branch through the Discovery Services.

Please note that this Discovery Privacy Policy only applies to the Discovery Services. Branch also offers a website and other services, some of which may be accessible by Users who, through their use of the Discovery Services, click on a Branch link or interact with an app or website of a Branch customer. For the privacy policy applicable to the Branch website and other Branch services, including services accessible by Users through the Discovery Services, please review the Branch privacy policy posted here. The Discovery Services, and the Branch services described in the Branch privacy policy, are collectively the “Branch Platform”.

What are the Discovery Services?

Branch provides technology so Customers can provide their Users with content results in response to queries. We do this in two main ways. First, Branch leverages data from Users through the Discovery Services and through other Branch services to enhance and tailor results in response to queries. Second, Branch provides Customers with mobile deep linking technology to return deep links to queries. “Deep linking” means providing links to a specific, generally searchable or indexed, piece of content in an app or on a website (e.g. “https://branch.io/security/”), rather than the app’s landing page or website’s home page (e.g., “https://branch.io”). Deep links thus enable Users to be directed to specific content within an app. Branch has no direct relationship with Users. When Customers install the Branch technology on their apps (via an application programming interface and/or software development kit), the technology enables Customers to respond to Users’ queries with contextual results and intent-based deep links, which in turn helps Users by giving them results and deep links to simplify access to completing an action (for example, to identify nearby restaurants, order food for delivery, travel to a location, or find a contact on their device).

What Information Does Branch Collect from the Discovery Services?

Top

Below, we explain what information we collect from Users through the Discovery Services. We process information in a way that is relevant for the purpose for which it was collected as described below.

In addition to the information summarized in the charts below, through the Discovery Services, we collect your queries and, when you have enabled geolocation tracking, your geolocation information. We require that each Customer commit to share with Branch only information that it has lawfully obtained and that it has the right to share information with Branch. We strongly discourage Customers from sharing sensitive User information with us, as such information is not necessary for the provision of the Discovery Services.

In the charts below, we summarize the information collected automatically by the Discovery Services.

Information Collected by the Discovery Services

Software development kits (“SDKs”) and application programming interfaces (“API”) include code that allows Customers to integrate and use the Discovery Services. The Branch Discovery Service SDKs and APIs collect the following information when Customers use the SDKs and APIs in their mobile apps, some of which is considered personal data under applicable law (in other words, information that itself may identify a unique individual or can be linked back to an individual) (“Personal Data”):

Information Collected Purpose
Advertising identifier (e.g., Google Ad ID or IDFA) Used for identification, matching, and serving personalized results and advertising.
IP Address Used for matching, and to understand general location to serve more relevant results and advertising.
Country Code Used to return the ISO country code equivalent for the SIM provider's country code, and to understand general location to serve more relevant results and advertising.
Geolocation information (e.g., latitude & longitude) If available, used to provide more accurate, location-relevant results and advertising. Please see the User Choices Section below for more information about opting out of geolocation tracking.
Query

Any query submitted by a User for purposes of responding to the User’s queries.

Queries may include information that identifies an individual (for example, if a User searches for a friend “John Smith” or for news about a particular celebrity) as well as information that does not identify anyone (for example, “pizza nearby” or “phone cases”).

Queries may be Internet-based or device-based (for example, to search for a contact or an app on a User’s phone). For Internet-based queries, we collect the information described in this table. For device-based queries, our SDK will collect and store information locally on a User’s device (for example, a User’s contacts or the apps stored on a User’s device), but Branch does not receive this data.

Device Model Used for identification and matching.
Device Manufacturer Used for identification and matching.
Operating System Used for identification and matching.
Operating System Version Used for identification and matching.
Mobile Network Status (Carrier) Used for identification and matching.
Device Locale (country, language) Used for identification and matching, and to understand general location to serve more relevant results and advertising.
Screen Resolution Used for identification and matching.
Screen Size Used for identification and matching.
Engagement Data Information relating to a user’s interactions with results and/or advertisements, such as clicks and/or impressions.

Customer Data

Customers may provide information to us to help better direct advertising to their desired audiences delivered through the Discovery Services (“Customer Data”). Branch processes Customer Data as a service provider on behalf of its Customers for the Discovery Services, and will not use such data for other purposes.

How Does Branch Use Information Collected by the Discovery Services, and What Information Does Branch Use to Provide the Discovery Services?

Top

Data Branch collects through the Discovery Services is processed:

  • to provide, maintain, optimize, research, and improve the Discovery Services, including to develop the results for User queries and improve the relevance and/or usefulness of the results.
  • to better understand how and from where Users come to click on certain deep links and what types of links are popular.
  • to serve advertisements in connection with Users’ queries.
  • to fulfill Customers’ and prospective Customers’ requests for the Discovery Services including processing data at the Customer’s direction and transferring User data to them. Branch does not control how Customers use information Branch shares with Customers, and Users should read Customers’ privacy policies to understand how they use information they receive from Branch.
  • to combine data from various sources, including data from various Customers or third parties.
  • to use for internal and Customer business purposes, including to support both the Discovery Services and other Branch products and services, develop new products and services, market products or services, support the products and services of our Customers, and as permitted or required by applicable law.
  • to create reports based on aggregated information, which is information that cannot be linked back to any individual person or Customer, and share these reports with the public.

We may aggregate and/or de-identify the data we collect. After data has been aggregated and/or de-identified, Branch does not use it to personally identify an individual. We may use de-identified and/or aggregated data for any purpose, including without limitation for research and marketing purposes, and may also share such data with any third parties, including business partners, Customers, and/or others.

Where permitted by law and our agreements with customers, and with your consent (to the extent required by law), Branch may also use data collected through other Branch services to enhance and tailor results of User queries. Please see the Branch privacy policy to understand our privacy practices with respect to those Branch services.

Our Customers’ Use of Information

Top

Our Customers use the information collected via the Discovery Services for the purposes set forth in their respective privacy policies, including to improve their Users’ app experiences, customize their apps and in-app content results to Users, and better understand their app marketing programs and how Users use their apps.

We require that our Customers utilize the Discovery Services responsibly and in accordance with certain terms and conditions. Branch is not responsible for the data practices of any of our Customers through the Discovery Services or otherwise. Each Customer’s practices are subject to each Customer’s individual privacy policy. Users should review the privacy policy of each Customer to understand how that Customer treats User information collected through the Discovery Services.

User Choices

Top

Users have the following choices regarding Branch’s collection of their data through the Discovery Services.

Mobile Device Identifier: To exercise the mobile device privacy settings controls, please visit the privacy settings of your Android or iOS device and select “opt-out of interest based ads” (Android) or “limit ad tracking” (Apple iOS). Branch will only be able to collect information as permitted by these settings.

Geolocation information: If you have agreed to permit a Customer’s app to collect your location, you can change your location tracking settings in your device settings by following the instructions here (Android) or here (Apple iOS).

Application Deletion: You may be able to delete the Customer app through which you use the Discovery Services, where available.

Do Not Track

Top

The Discovery Services are designed for mobile applications and therefore do not respond to web browser “do not track” signals.

How Does Branch Share Information?

Top

In addition to the ways described above, Branch may also share information with others under the following circumstances:

  • With third-party vendors, consultants and other service providers who work for us and need access to information we collect to do that work. These third parties are prohibited from using the information for purposes other than performing services for us or to comply with applicable legal requirements.
  • With our Customers and their agents, as described in this Discovery Privacy Policy.
  • With customers of other Branch services, including their vendors or agents, if requested by the customer, for attribution purposes.
  • With other third parties, to help provide responses to queries, and advertisers, to suggest content that may interest you.
  • To comply with laws or to respond to lawful requests and legal process including to meet national security or law enforcement requirements, and in order to investigate, prevent, or take action regarding suspected, or actual, prohibited activities, including but not limited to fraud and situations involving potential threats to the physical safety of any person.
  • To protect the rights and property of Branch, our agents, Customers, Users, and others including to enforce our agreements, policies, and any applicable terms and conditions.
  • In connection with or during negotiation of any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

How We Secure the Information We Collect

Top

Securing the information provided by our Customers and collected through the Discovery Services is important to us. Branch has implemented industry-standard technical, administrative, and physical safeguards to help protect the information on our servers against unauthorized access, alteration, disclosure or destruction. You are responsible for maintaining the security of your devices and online accounts, such as not sharing passwords to your devices.

Links to Other Services

Top

The Discovery Services link to other websites and apps. These other domains are not controlled by Branch, and we do not endorse or make any representations about third-party websites, apps, or social media platforms. We encourage you to read the privacy policies of each and every website and application that you interact with. We do not endorse, screen, or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Visiting these other websites or applications is at your own risk.

International Data Transfers

Top

All information collected via the Discovery Services is stored on servers located in the United States or India.

Our Policy Regarding Children

Top

The Discovery Services are not directed to children. We require that Customers agree to not knowingly send to us data relating to any children under 13 (or, in certain jurisdictions, under 16). If you believe that we might have any information from or about a child under 13 (and in certain jurisdictions under 16) in violation of this policy, please contact us at discoveryprivacy@branch.io, so that Branch can promptly investigate and delete any inappropriately obtained information.

California Consumer Privacy Act

Top

The California Consumer Privacy Act of 2018 (“CCPA”) provides certain rights to residents of California. This section of our Privacy Policy applies if you are a natural person who is a resident of California (“California Consumer”) and uses the Discovery Services. This notice supplements the information in our Privacy Policy. Certain terms used below have the meanings given to them in the CCPA.

The following sets forth the categories of personal information we collect through the Discovery Services for which we control the purposes of use and purposes for which we may use that information:

Categories of Personal Information We Collect About You by the Discovery Services

Categories of information collected Purposes of use (see chart below for additional information). Sources of personal information
Device Information and Device Identifiers, e.g., IP address, device locale, carrier, operating system, mobile platform, device model, and advertising identifiers associated with certain devices.
  • Provide the Discovery Services
  • Tell you about products and services offered by Branch and Branch’s selected partners
  • Personalize your experience
  • Improve our offerings
  • Secure the Branch Platform and prevent fraud
  • Defend our legal rights and comply with the law
  • From you, either directly or through the use of the Discovery Services, or third parties
  • From our Customers
  • Connection and Usage Data, e.g., User entered queries and browsing activity on mobile devices
  • Provide the Discovery Services
  • Tell you about products and services offered by Branch and Branch’s selected partners
  • Personalize your experience
  • Improve our offerings
  • Secure the Branch Platform and prevent fraud
  • Defend our legal rights and comply with the law
  • From you, either directly or through the use of the Discovery Services
  • From our Customers
  • Geolocation, e.g., country code, latitude longitude information from mobile devices
  • Provide the Discovery Services
  • Tell you about products and services offered by Branch and Branch’s selected partners
  • Personalize your experience
  • Improve our offerings
  • Secure the Branch Platform and prevent fraud
  • Defend our legal rights and comply with the law
  • From you, either directly or through the use of the Discovery Services
  • From our Customers

  • The following chart provides additional information about the business or commercial purposes for collecting and using your information. Additional information concerning the business and commercial purposes is set forth in the “How Does Branch Use the Information Collected through the Discovery Services, and What Information Does Branch Use to Provide the Discovery Services?” section of our Privacy Policy. We may use the categories of personal information identified in this California Privacy Notice about our California Consumers for our operational purposes where the use of such personal information is reasonably necessary and proportionate to achieve the operational purpose for which the personal information was collected or processed or for another operational purpose that is compatible with the context in which the personal information was collected.

    Purposes of Use
    Provide the Services, for example:
  • to fulfill Customers’ and prospective Customers’ requests for the Discovery Services including processing data at the Customer’s direction.
  • to combine data from various sources, including data from various Customers or third parties.
  • to serve advertisements in connection with Users’ queries.
  • to use for internal and Customer business purposes, including to support the Branch Platform, develop new products and services, market products or services, and support the products and services of our Customers.
  • to better understand how and from where Users come to click on certain deep links and what types of links are popular.
  • To understand and resolve technical issues with the Branch Platform.
  • Personalize your experience, for example:
  • Serving advertisements in connection with Users’ queries.
  • Creating profiles associated with your device, including adding and combining information we obtain from third parties, which may be used for analytics, marketing, and advertising.
  • Secure the Branch Platform and Prevent Fraud, for example:
  • Monitoring, preventing, and detecting fraud, such as through verifying your identity
  • Combatting spam or other malware or security risks
  • Monitoring, enforcing, and improving the security of our Services
  • Defend our legal rights and comply with the law
  • Complying with any applicable procedures, laws, and regulations where it is necessary for our legitimate interests or the legitimate interests of others
  • Establishing, exercising, or defending our legal rights where it is necessary for our legitimate interests or the legitimate interests of others (e.g., to enforce compliance with our Terms and Conditions, Privacy Policy, or to protect our Services, Users, or others)
  • How We Share and Disclose Your Information


    We share the information collected from and about you as discussed above for various business purposes. The chart below explains the categories of information that we may share with third parties and the categories of those parties.

    Third Parties with which we share information and why Categories of information shared
    Our Affiliates. We may share information we collect within our family of companies to deliver products and services to you, and enhance our products, services, and your customer experience. All categories of information we collect may be shared with our affiliates
    Service Providers that perform services on our behalf: including billing and payment processing, sales, marketing, advertising, data analysis and insight, research, technical support and customer service, data storage, security, fraud prevention, and legal services. All categories of information we collect may be shared with our service providers
    Third Parties for Legal Purposes. By using the Discovery Services, you acknowledge and agree that we may access, retain, and disclose the information we collect and maintain about you if required to do so by law or in a good faith belief that such access, retention or disclosure is reasonably necessary to: (a) comply with legal process or a regulatory investigation (e.g., a subpoena or court order); (b) enforce our Terms and Conditions, this Privacy Policy, or other contracts with you, including investigation of potential violations thereof; (c) respond to claims that any content violates the rights of third parties; and/or (d) protect our rights, property or personal safety, or that of our agents and affiliates, our users and/or the public. This includes exchanging information with other companies and organizations for information security, fraud protection, spam/malware prevention, and similar purposes. All categories of information we collect may be shared as necessary
    Third Parties in a Business Transaction. We may disclose information in connection with an actual or contemplated corporate transaction, including for example a merger, investment, acquisition, reorganization, consolidation, bankruptcy, liquidation, or sale of some or all of our assets. All categories of information we collect may be shared

    The CCPA sets forth certain obligations for businesses that “sell” personal information. Based on the definition of “sell” under the CCPA and under current regulatory guidance, we do not believe we engage in such activity and have not engaged in such activity in the past twelve months. Instead, any information we share is limited to as set forth in the “How does Branch Share Information?” section of this Privacy Policy.

    California Rights and Choices


    Without being discriminated against for exercising these rights, California Consumers have the right to request that we disclose what personal information we collect about you and to delete that information, subject to certain restrictions. You also have the right to designate an agent to exercise these rights on your behalf. This section describes how to exercise those rights and our process for handling those requests. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

    Right to request access to your personal information
    California Consumers have the right to request that we disclose what categories of your personal information that we collect, use, or sell. You may also request the specific pieces of personal information that we have collected from you and can associate with you. However, we may withhold some personal information where the risk to you or our business is too great to disclose the information.

    Right to request deletion of your personal information
    You may also request that we delete any personal information that we collected from you. However, we may retain personal information necessary (a) to protect our business, systems, and users from fraudulent activity, (b) to address technical issues that impair existing functionality, (c) for us, or others, to exercise their free speech or other rights, (d) to comply with law enforcement requests pursuant to lawful process, (e) for our own internal purposes reasonably related to your relationship with us, or to comply with legal obligations. Additionally, we need certain types of information so that we can provide our Services to you. If you ask us to delete it, you may no longer be able to access or use our Services.

    How to exercise your access and deletion rights
    Subject to restrictions under applicable law, California Consumers may exercise their California privacy rights by submitting your request to us, or by contacting us at discoveryprivacy@branch.io.

    Because Branch cannot associate the personal information collected via the Discovery Services with a particular individual or household, it is not reasonably possible for Branch to verify the identity of any particular consumer. To comply with CCPA’s security requirements, we therefore can only respond to requests for the categories of personal information we collect, but we cannot provide you with specific pieces of information collected about you or delete your personal information.

    Right to nondiscrimination
    We will not deny, charge different prices for, or provide a different level of quality of goods or services if you choose to exercise these rights.

    Submitting CCPA Requests

    If you are a California Consumer, contact us at discoveryprivacy@branch.io. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

    Contact Us, Questions, Changes to This Discovery Privacy Policy

    Top

    We may change this Discovery Privacy Policy at any time in our sole discretion. We will post all changes to this Policy on this page and will indicate at the top of the page the modified Policy’s effective date. If you have any questions or suggestions regarding this Policy, please contact us at:

    Branch Metrics, Inc.
    1400 Seaport Blvd
    Building B, 2nd Floor
    Redwood City, CA 94063
    or by email at discoveryprivacy@branch.io