This Privacy Policy ("Policy") describes how Mediagistic, Inc. ("Mediagistic," "we," "us," or "our") collects, uses, discloses, retains, and safeguards information through your use of the Dealer Loyalty Marketplace (the "Portal"). The Portal is provided to dealers, contractors, and other authorized users who authenticate via single sign-on ("SSO") from Daikin North America LLC or related entities (the "Brands"). Please read this Policy carefully before using the Portal.
This Policy applies to information collected through the Portal only. It does not apply to information collected through other Mediagistic websites, products, or services, or to the Brands' own data practices. The Brands operate under their own separate privacy policies, and Mediagistic is not responsible for those practices.
IMPORTANT – BRAND SEPARATION NOTICE: MEDIAGISTIC, INC. IS THE SOLE DATA CONTROLLER FOR ALL PERSONAL DATA COLLECTED THROUGH THE PORTAL. THE BRANDS (DAIKIN NORTH AMERICA LLC, AMANA BRAND PRODUCTS LLC, GOODMAN MANUFACTURING COMPANY, L.P., AND THEIR RESPECTIVE AFFILIATES) ARE NOT DATA CONTROLLERS, DATA PROCESSORS, OR RESPONSIBLE PARTIES WITH RESPECT TO ANY PERSONAL DATA COLLECTED, USED, OR DISCLOSED THROUGH THE PORTAL. THE BRANDS' FACILITATION OF SSO ACCESS IS A TECHNICAL CONVENIENCE ONLY AND DOES NOT MAKE ANY BRAND A PARTY TO THIS POLICY, A PARTICIPANT IN MEDIAGISTIC'S DATA PRACTICES, OR IN ANY WAY RESPONSIBLE FOR HOW MEDIAGISTIC HANDLES YOUR INFORMATION. IF YOU HAVE PRIVACY CONCERNS RELATED TO YOUR USE OF THE PORTAL, YOU MUST DIRECT THEM TO MEDIAGISTIC AT THE CONTACT INFORMATION IN SECTION 15, NOT TO ANY BRAND.
BY USING THE PORTAL, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED HEREIN.
We collect and process the following categories of information in connection with the Portal:
You may provide your name, email address, business name, mailing address, phone number, user identifier, job title, role, and other profile data as part of your account. Because login is via SSO, certain identity attributes (such as your name, email address, and dealer identifier) are transmitted from the Brand's identity provider to Mediagistic solely for the purpose of authenticating your access to the Portal.
MEDIAGISTIC RECEIVES THIS SSO-TRANSMITTED IDENTITY DATA ACTING AS AN INDEPENDENT DATA CONTROLLER, NOT AS AN AGENT, PROCESSOR, OR SERVICE PROVIDER OF ANY BRAND. Once identity data is received by Mediagistic at the point of authentication, it is governed exclusively by this Privacy Policy. No Brand has ongoing access to, control over, or responsibility for how Mediagistic processes, stores, or uses your identity data or any other data collected through the Portal after authentication is complete. You are responsible for ensuring that any information you provide directly to Mediagistic through the Portal is accurate and current.
When you purchase products or services via the Portal, we receive order details including product or service purchased, order date, invoice value, payment plan selection, and billing address. Payment credentials are handled exclusively by Stripe or the applicable designated payment processor; Mediagistic does not store raw credit card numbers or full account numbers. The payment processor may provide transaction confirmation, status, refund data, and metadata to us for bookkeeping, billing, and service delivery purposes.
We automatically collect usage data including IP address, browser type and version, device type, operating system, pages visited within the Portal, referring URLs, time stamps, session durations, click paths, and similar telemetry data. We use cookies, local storage, web beacons, pixel tags, and similar tracking technologies to operate the Portal, remember your preferences, enhance your experience, and for analytics and performance optimization. See Section 5 for additional detail on cookies and tracking.
If you purchase advertising-related services (for example, Google Ads, Meta Ads, or similar paid media services), we may collect and process information necessary to set up, manage, optimize, and report on campaigns. This may include campaign identifiers, targeting parameters, budget data, performance metrics (impressions, clicks, conversions, cost-per-lead), and account-related information made available through advertising platforms and associated tools.
You acknowledge that advertising platforms (including Google and Meta) may return audience signals, conversion data, and other behavioral data to Mediagistic as part of campaign management. Such data is used solely for campaign optimization and reporting on your behalf and is handled in accordance with the applicable platform's terms and data policies, which you are independently responsible for reviewing and accepting.
If you contact us via email, support ticket, live chat, phone, or other channels, we collect the information you provide. We may retain correspondence, support tickets, chat logs, call recordings, and email threads for internal reference, quality assurance, dispute resolution, and compliance purposes. Retention periods for communications data are described in Section 7.
We may derive or infer information about your business, preferences, or usage patterns from the data we collect, for purposes including service improvement, product development, and aggregate analytics. Such inferred data is not sold or used to target advertising at you outside of the services you have purchased.
We use information collected through the Portal for the following purposes:
Where applicable law requires a legal basis for processing personal data, we rely on the following:
We do not sell your personal information. We may share information under the following limited circumstances:
We may share data with third-party vendors, contractors, and agents who perform services on our behalf, including analytics providers, cloud hosting, payment processors, email delivery services, customer support tools, and advertising management platforms. These entities are contractually required to limit their use of data to the purposes we specify, to maintain appropriate confidentiality and security, and not to use your data for their own independent purposes.
Where you purchase advertising services, information necessary to run, manage, and report on campaigns may be shared with advertising platforms (such as Google LLC and Meta Platforms, Inc.), publishers, and related technology providers. Each platform operates under its own terms of service and privacy policy, which you acknowledge and accept as a condition of purchasing advertising services through the Portal.
The Brands' role in relation to the Portal is limited to providing SSO authentication credentials that allow eligible dealers to access the Portal. That role ends at the point of authentication.
Mediagistic does NOT share with any Brand: your Portal transaction history, order details, or invoices; campaign performance data, advertising metrics, or paid media information; billing information, payment method data, or installment records; Portal usage behavior, session data, or analytics; or any other personal data collected through the Portal after SSO authentication is complete.
The only circumstance in which Mediagistic may communicate information to a Brand is: (a) to confirm or verify a dealer's SSO eligibility status upon request from the Brand, which is limited to confirming whether an account is active or inactive; or (b) where you have provided separate, express written authorization for a specific data share; or (c) where required by a separate written data processing or program agreement between Mediagistic and the applicable Brand that is disclosed to you at the time of enrollment.
The Brands have no access to the Portal's administrative systems, no visibility into dealer purchase or campaign activity, and no ability to modify, delete, or access personal data held by Mediagistic through the Portal. Any privacy complaint, data access request, or data deletion request related to Portal activity must be directed to Mediagistic at the contact information in Section 15 and cannot be processed through any Brand.
We may disclose information when required by applicable law, court order, subpoena, governmental inquiry, or lawful request by public authorities. We may also disclose information when we reasonably believe disclosure is necessary to: prevent or respond to fraud or security threats; enforce our Terms of Use or other agreements; protect the rights, property, or safety of Mediagistic, our clients, or the public; or comply with legal process.
If Mediagistic or the Portal business is sold, merged, acquired, or otherwise transferred (in whole or in part), your information may be shared or assigned as part of that transaction. We will provide notice of any such change via email to the address associated with your account or by prominent notice within the Portal, and we will require the acquiring entity to honor this Policy or provide you with notice of any material changes.
We may share aggregated or de-identified usage, performance, or analytics data that does not identify you or your business for purposes including industry benchmarking, product development, and marketing. De-identified data will not be re-identified by Mediagistic.
We use cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) to collect and store information about your interactions with the Portal. Cookies may be session-based (deleted when you close your browser) or persistent (retained for a set period).
We use the following categories of cookies:
You may control or disable non-essential cookies via your browser settings or through any cookie preference center available within the Portal. Disabling certain cookies may limit your ability to use some Portal functionality. Where applicable law requires consent for non-essential cookies, we will obtain that consent before setting them.
We implement reasonable and appropriate administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include access controls, encryption of data in transit (TLS), secure hosting infrastructure, and employee data handling policies.
However, no data transmission over the internet or electronic storage method is absolutely secure. We cannot guarantee the absolute security of information you transmit to or through the Portal. You are responsible for maintaining the security of your SSO credentials and account access.
In the event of a data breach that triggers notification obligations under applicable law, we will notify affected individuals and relevant authorities within the timeframes required by applicable law, and in any event no later than seventy-two (72) hours after becoming aware of a breach involving your personal data, where required by applicable regulation. Breach notifications will be sent to the email address associated with your Portal account. Security-related inquiries or reports of suspected breaches should be directed to: legal@mediagistic.com.
We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, comply with legal and contractual obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:
Following expiration of the applicable retention period, we will securely delete or anonymize personal data. We may retain de-identified or aggregated data for longer periods for analytics and benchmarking purposes.
Depending on your jurisdiction, you may have rights regarding your personal data. These rights vary by applicable law and may include:
To exercise any of these rights, please contact us using the information in Section 15. We will respond within the timeframe required by applicable law (generally thirty (30) days, with a possible extension of an additional sixty (60) days for complex requests). We may verify your identity before acting on a request.
If you are a California resident, additional rights may apply under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). While the Portal is primarily a business-to-business service, to the extent personal information of California residents is collected, the following disclosures apply:
Categories of Personal Information Collected: We collect identifiers (name, email, IP address), commercial information (transaction records), internet or other electronic activity (usage data), and professional or employment-related information (company name, role). We do not collect sensitive personal information as defined by the CPRA for Portal purposes.
Purposes for Collection: As described in Section 2 of this Policy.
DO NOT SELL OR SHARE: Mediagistic does not sell personal information as defined by the CCPA/CPRA. We do not share personal information with third parties for cross-context behavioral advertising purposes, except as described in Section 4b in connection with advertising services you have affirmatively purchased.
California residents may submit privacy requests by contacting us at legal@mediagistic.com or the mailing address in Section 15. We will not discriminate against you for exercising your CCPA/CPRA rights.
If you are a resident of Colorado, Connecticut, Virginia, Texas, or another U.S. state with an applicable comprehensive privacy law, you may have rights similar to those described in Section 8 and Section 9. The Portal is a business-to-business service; however, to the extent personal data of residents of those states is processed, we will honor applicable rights requests submitted to legal@mediagistic.com. We will respond within the timeframe specified by your state's applicable law.
The Portal is operated in the United States. If you are located outside the United States, your information will be transferred to, stored, and processed in the United States by us and our service providers. The data protection laws of the United States may differ from those in your country of residence. By using the Portal, you consent to the transfer of your information to the United States.
Where required by applicable law, we will implement appropriate safeguards for international transfers, such as standard contractual clauses or other mechanisms recognized under applicable data protection law. Contact us at legal@mediagistic.com for information about applicable transfer mechanisms.
The Portal is a business-to-business service intended solely for use by adults operating in a professional or commercial capacity. The Portal is not intended for and does not knowingly collect personal information from children under the age of 13 (or the applicable age of digital consent in your jurisdiction). If we become aware that we have inadvertently collected personal information from a child, we will take prompt steps to delete such information. If you believe we have collected information from a child, please contact us immediately at legal@mediagistic.com.
The Portal may contain links to third-party websites, platforms, or services that are not operated by Mediagistic. We are not responsible for the privacy practices, content, security, or terms of those third-party services. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Portal before providing any personal information.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Portal features. We will post the revised version within the Portal and update the "Last Updated" date at the top of this Policy. If we make material changes that adversely affect your rights or significantly alter how we use your personal information, we will provide at least fourteen (14) days' advance notice via email to the address associated with your Portal account or by prominent notice within the Portal. Your continued use of the Portal after the effective date of a revised Policy constitutes your acceptance of the changes. If you do not agree to the changes, your sole remedy is to cease using the Portal.
If you have any questions, comments, or requests regarding this Privacy Policy or our data practices, or to exercise a privacy right, please contact us at:
Mediagistic, Inc.We aim to respond to all privacy inquiries within thirty (30) days of receipt. For security-related concerns or to report a suspected data breach, please use the email address above and include "Security Report" in the subject line.