Effective Date: April 10, 2025
Balloon Labs LLC
Website: https://www.balloonlabs.ai
Contact: privacy@balloonlabs.ai
1. Introduction
At Balloon Labs LLC (“Balloon Labs,” “we,” “us,” or “our”), your privacy is important to us.
Balloon Labs operates through two affiliated entities:
- Balloon Labs LLC, 1007 N Orange St. 4th Floor Suite #1607, DE, United States, 19801
- Balloon Labs LLP, 60 Paya Lebar Road, #08-06, Paya Lebar Square, Singapore, 409051
Balloon Labs LLC owns a majority interest in Balloon Labs LLP. Both companies operate internationally, including with entities in the European Economic Area (EEA), primarily as data processors for digital advertising and analytics services.
2. Information We Collect
We may collect the following types of personal data:
- Identifiers: name, email address, IP address, device identifiers (e.g., advertising ID).
- Usage Data: browser type, operating system, pages visited, and time spent on our services.
- Cookies and Tracking Technologies: to improve user experience and analyze site usage.
- Other Information: any data you voluntarily provide via forms or communications.
3. How We Use Your Data
We use your data for the following purposes:
- To provide and improve our products and services.
- To personalize your experience.
- For analytics and research.
- To respond to inquiries and provide support.
- To comply with legal obligations.
3A. Data Processing in Programmatic Advertising
Balloon Labs often acts as a data processor or service provider on behalf of publishers, resellers, or partners in the digital advertising ecosystem. This includes cases where we process personal data — such as advertising identifiers, IP addresses, or engagement signals — for the delivery and optimization of programmatic advertising.
We operate on a pass-through basis and do not store, enrich, or analyze this data beyond what is strictly necessary to perform the services as instructed by our partners.
In this role:
- We follow the instructions of the data controller (e.g., publisher or reseller).
- We do not retain or use the data for any independent purpose.
- We implement technical and organizational safeguards to ensure secure processing in line with applicable data protection laws.
4. Legal Basis for Processing (GDPR)
We rely on one or more of the following legal bases:
- Your consent
- Contractual necessity
- Legal obligation
- Legitimate interests, provided they do not override your rights
5. Sharing Your Data
We may share your data with:
- Service providers: who help us operate and improve our services.
- Analytics and advertising partners: with appropriate data safeguards.
- Legal authorities: when required to comply with legal obligations or enforce rights.
We never sell your personal data.
6. International Data Transfers
Where applicable, we may transfer personal data outside your jurisdiction. We use the following safeguards:
- Standard Contractual Clauses (SCCs)
- Adequacy Decisions
- Other approved mechanisms (e.g., Binding Corporate Rules)
Details are governed by our Transfer Impact Assessment (TIA) Policy.
7. Data Retention
We retain personal data only as long as necessary for the purposes described or to comply with legal obligations. When no longer needed, we securely delete or anonymize the data.
8. Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal data.
General Rights (e.g., under GDPR):
- Access: You can request access to the data we hold about you.
- Correction: You can ask us to correct inaccurate or incomplete data.
- Deletion: You may request that we delete your personal data.
- Objection: You can object to certain types of processing, including direct marketing.
- Restriction: You can request that we limit processing under certain conditions.
- Portability: You can request your data in a structured, machine-readable format.
- Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, contact us at privacy@balloonlabs.ai.
Additional Rights for California Residents (CCPA/CPRA):
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: Request disclosure of the categories and specific pieces of personal data we have collected about you.
- Right to Delete: Request that we delete personal information collected from you, subject to certain exceptions.
- Right to Correct: Request correction of inaccurate personal data.
- Right to Opt-Out: You have the right to opt-out of the sale or sharing of your personal data (Note: We do not sell your personal data).
- Right to Limit Use of Sensitive Personal Information: If applicable, you may request that we limit the use of sensitive personal information.
- Non-Discrimination: You have the right not to be discriminated against for exercising your privacy rights.
To make a request under CCPA/CPRA, you can contact us via email at privacy@balloonlabs.ai with the subject line “California Privacy Request.”
9. Cookies
We use cookies to:
- Remember your preferences
- Understand site usage
- Enhance user experience
You can manage cookie preferences via your browser or our cookie banner.
10. Data Security
We implement technical and organizational safeguards including:
- Encryption and secure transmission
- Access controls and user authentication
- Regular security assessments and monitoring
11. Children’s Privacy
Our services are not intended for individuals under the age of 13 (or equivalent minimum age in your jurisdiction). We do not knowingly collect data from children without verifiable parental consent.
12. Third-Party Links
Our website may link to external websites. We are not responsible for the privacy practices of third-party sites.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Effective Date” and notify users as appropriate.
14. EU Representative (Article 27 GDPR)
For users located in the European Economic Area (EEA), Balloon Labs has appointed the following representative in the EU in accordance with Article 27 of the GDPR:
Craig Brocklesby
📧 craig@balloonlabs.ai
Data subjects in the EEA may contact our representative for inquiries related to data protection and the processing of personal data under EU law.
15. Contact Us
For questions, requests, or concerns about this Privacy Policy, please contact:
📧 privacy@balloonlabs.ai