Privacy Policy
Version: 1.1 · Effective: November 12, 2025 Operator: Nucleus AI Pte. Ltd. (trading as Praevis Exchange) Address: 1 George Street, Level 10, Singapore 049145 Data Protection Officer: Jonas Ras · [email protected] Supervisory Authority: Personal Data Protection Commission (PDPC), Singapore
Quick summary
- We collect device and browsing data for advertising purposes
- We share data with approved demand sources (DSPs) in the context of a single auction
- EU data stays in Frankfurt; US data in New York; UK data in London
- We retain data for 90 days maximum (billing records: longer, as required by law)
- You can opt out of personalised advertising at any time
- We comply with GDPR, CCPA, COPPA, PDPA (Singapore), PDPL (Saudi Arabia)
What data we collect
From end users (viewers seeing ads)
| Data | Purpose | Retention |
|---|---|---|
| IP address | Geo targeting, IVT detection | Used in-auction, then discarded |
| User agent | Device targeting | Used in-auction, not stored long-term |
| Device type, OS, make/model | Targeting | 90 days max |
| Advertising ID (IDFA/GAID) | Frequency capping, attribution | 90 days max |
| Country, region, city (from IP) | Geo targeting | 90 days max |
| Content category / genre | Contextual targeting | Used in-auction only |
We do not collect: names, email addresses, postal addresses, payment information from end users.
From supply sources and demand sources (business accounts)
| Data | Purpose |
|---|---|
| Company name, address | Account management, invoicing |
| Contact name and email | Account communications |
| Payment details | Billing |
| Technical integration data | Support, debugging |
How we use data
- Real-time bidding: Share device/geo/content signals with demand sources to enable bidding. Data is transmitted in bid requests and not retained by Praevis beyond 90 days.
- Fraud detection: Analyse IP and user agent patterns to detect invalid traffic.
- Analytics: Aggregate, anonymised reporting for supply sources and demand sources.
- Billing: Invoice generation and payment processing.
We do not sell personal data to third parties. We do not use data for purposes other than operating the exchange.
Data sharing
Data is shared with:
- Demand sources registered on the platform — in the context of individual auctions only, as per OpenRTB protocol
- Infrastructure providers (DigitalOcean) — data processors only, under DPA
- Payment processors — billing data only
Your rights
| Right | How to exercise |
|---|---|
| Access | Email [email protected] |
| Deletion | Email [email protected] |
| Opt out of personalised ads | dnt=1 in browser settings or app privacy settings |
| Data portability | Email [email protected] |
| Lodge a complaint | PDPC Singapore, or your local DPA (EU: relevant lead authority) |
Response time: 30 days for access/deletion requests.
Data retention
- Auction data: 90 days
- Aggregated analytics: 12 months
- Billing records: as required by applicable law (typically 7 years)
- Account data: duration of account + 90 days after closure
Contact
Data Protection Officer: [email protected] General privacy enquiries: [email protected] Postal: Nucleus AI Pte. Ltd., 1 George Street, Level 10, Singapore 049145