Privacy Policy

Effective Date: October 21, 2025

Triton Digital respects your privacy and is committed to treating your personal information in a transparent manner.

In this Privacy Notice, we explain how we collect, use, disclose, retain, and protect the personal information that we process about you. We also provide you with information about the rights and choices you have with respect to your personal information, and how to exercise them. 

In this Privacy Notice, the use of the terms “Triton Digital”, “our”, “us” and “we” refers to Ando Media, LLC dba Triton Digital and/or, as applicable, Triton Digital Canada Inc., and Voxnest Inc., each of which is a subsidiary of iHeartMedia.

This Privacy Notice covers personal information we process about individuals with whom we have a business relationship, including when you interact with us via our websites, portals or other business offerings (collectively, the “Services”). This Privacy Notice applies, for example, when you visit or use our Services, interact with our advertisements, or otherwise access or use one of our Services. 

Additional disclosures apply if you live in California or outside of the United States.

If you are an employee, contractor, or job applicant, your personal information collected in those contexts will be subject to a separate privacy notice that we provide to you where and when appropriate. 

We collect the personal information described below to provide you with the Services. Please note that the personal information we collect varies depending on the nature of your interactions with us. 

• Identifiers such as name, online identifiers like user account names and unique identifiers that we associate with you. 
• Contact information such as your email, billing address, and phone number.
• Financial and payment information.
• Transaction and commercial information such as your purchase history. 
• Online and usage information such as your IP address, browser type and version, device characteristics, browsing data, data related to your interactions with our advertisements, Services usage information, and other information that we collect using cookies, pixels, SDKs, and other similar technologies. 
• Location data including your approximate location derived from your IP address or mobile device.
• Professional or employment-related information, including your profession, job title, employer name, or other information related to your employment.
• Inferences derived from other personal information that we have collected. 

Personal information does not include information that has been deidentified or aggregated so that you can no longer be identified, which we may use for any purpose.

Children’s Privacy

The Services that link to this Privacy Notice are intended for a general audience and are not geared toward children. We do not knowingly collect personal information from children under the age of 14. 

We may collect your personal information from the following sources:

Personal information you provide to us directly

You may give us personal information or provide it to us directly, including:

• Information you provide when you register for an account, purchase one of our Services, or when you otherwise contact us about our Services. 
• Records and copies of your correspondence.
• Your responses to surveys.
• Your searches on our Services.

Personal information collected automatically 

We may collect personal information automatically from a device that we have associated with you. For example, we may collect personal information automatically when you use our Services or view or interact with our advertisements. 

Personal Information we collect from our subsidiaries and affiliates 

We may collect your personal information from our subsidiaries and affiliates. 

Personal Information we receive from others

We may also receive information about you from commercially available sources such as public databases.

We may receive information from others that has been deidentified so that it is no longer personal information under applicable law. When we receive deidentified data from others, we commit to maintaining and using that data in deidentified form without attempting to reidentify it.

A cookie is a small data file that is stored by your browser on your device. We use cookies to deliver a better experience, for example, remembering your preferences and opt-outs.

Other examples of why we use cookies include:

• To learn about how you interact with our Services
• To detect and prevent fraud
• To conduct analytics activities
• To improve our Services
• To facilitate interest-based advertising

If you use your browser’s method of blocking or removing cookies, some, but not all, types of cookies may be deleted and/or blocked. If you delete or block cookies, some functionality on our Services may not work properly.

In addition to cookies, we may use other types of tracking technologies in connection with our Services.

Third-Party Analytics

We may use third-party analytics providers to help us analyze how you use or interact with our Services. 

Many of our websites use Google Analytics. Information about Google Analytics’ current opt-outs for web is available here.

We may integrate the analytics services we use with advertising services that are made available by our analytics providers.   For example, we integrate Google Analytics with the following Google advertising features:

• Google Analytics 4

We may use your personal information to:

• Communicate with you, including to respond to your questions, market to you, and provide customer service
• Provide you with the Services
• Operate our business
• Conduct marketing, personalization, and advertising
• Conduct research and analytics
• Design, develop, and improve our Service 
• Track the effectiveness of our advertising
• Improve how we do business 
• Fulfill our legal obligations
• For safety and security purposes
• For other internal business purposes 

We may also use your personal information to administer and manage our relationship with you and your employer (such as record keeping, payments, communicating with you, tracking outcomes, and verifying your eligibility and suitability). 

We may disclose your personal information as follows:

• Subsidiaries and Affiliates: We may disclose personal information to our subsidiaries and affiliates, including other iHeart companies that may use your personal information as described in this Privacy Notice.
• Vendors and Service Providers: We may disclose personal information to vendors and service providers we hire to help us run our business, including those companies that host, protect, or operate our Services; analyze data; provide customer service, send emails for us; process payments; conduct surveys; fulfill orders; or provide marketing, analytics, and advertising services. 
• Business Partners and Other Third Parties. We may disclose or make available personal information to our partners, advertisers, advertising networks, and analytics companies or other parties in connection with our and their marketing, promotional, and other offers, as well as product information. These parties may use your personal information for their own advertising, analytics, planning, market research, or other business purposes. 
• Legal Requirements and Government Authorities. We may disclose personal information to other parties to comply with a legal obligation; when we believe in good faith that the law requires it; at the request of governmental authorities conducting an investigation; to verify or enforce our Terms of Use or other applicable policies; to respond to an emergency; or otherwise to protect the rights, property, safety, or security of other parties, visitors to our Services, or the public. 
• Security and Safety Disclosures. Where permitted by applicable law, we may disclose your personal information to other persons and entities for the purpose of protecting the rights, safety, security, and property of us and others. We may also disclose this information to protect and enforce our rights.
• Corporate Transaction. We may disclose personal information, as part of any actual or contemplated merger, sale, transfer of assets, acquisition, bankruptcy, or similar event, including related to due diligence conducted prior to such event, where permitted by law.

When you use the Services, we, our service providers, and advertising partners may place cookies and similar tracking technologies on your computer or device in order to collect information about your online web-browsing activities over time and across different websites and online services or mobile applications, in order to serve you ads or other content personalized to your interests. This form of advertising is referred to as Interest Based Advertising (“IBA”). In order to personalize these ads or content, we or our advertising partners or service providers may connect your personal information to data you provided to us or to browser/usage/device information and location information collected about you. 

You can opt out of being tracked online for IBA purposes by going to https://optout.aboutads.info or https://optout.networkadvertising.org, or by disabling advertising cookies by clicking the “Your Privacy Choices” link in the footer of this webpage. Another way to opt out of IBA is by clicking on the Advertising Options Icon featured on certain ads on third-party websites. When clicked it (1) describes the collection and uses of data gathered at the relevant party website and (2) provides a way for you to opt out of data collection and use by the other parties listed for the purposes of IBA. 

Choices you make are device-specific and browser-specific. If you use different browsers on your computer, or multiple computers and devices, you will need to opt out of IBA from each browser on each of the computers and devices that you use. Please note that even if you opt out of IBA, you may still receive advertisements from us; they just won't be customized based on your web-browsing activities on third-party websites. Please also note that if you opt-out of IBA, we may still track your visits to the Services for our own analytics, operations and security purposes. 

The Services may contain links to other websites for your convenience and information. We do not control these third-party websites or their privacy practices, which may differ from those set out in this Privacy Notice. We encourage you to review the privacy policy of any company or website before you provide your personal information. 

We have policies and procedures governing the processing of personal information throughout its lifecycle, including the following.

• Having consent for the processing of personal information where required, the form of which varies depending on the circumstances.
• Limiting the collection of personal information to that which is necessary for specific purposes.
• Formally designating a Chief Privacy Officer, as well as defining responsibility for privacy practices throughout the organization at all levels, including executive and management levels.
• Limiting access to personal information to employees who require access to fulfill their roles and responsibilities.
• Implementing contractual safeguards with service providers who process personal information on behalf of Triton Digital. 
• Responding to privacy rights requests, and privacy-related complaints and inquiries.

Safeguarding your personal information is important to us. While no systems, applications, or websites are 100% secure, we take reasonable and appropriate steps to help protect personal information from unauthorized access, use, disclosure, alteration, and destruction.

To help us better protect your personal information, we request that you use a strong password and never disclose your password to anyone or use the same password with other sites or accounts. 

We offer you the ability to manage what types of communications you receive from us. We have created mechanisms to provide you with the following options:

Updating your account information

If you have an account with us, you can log in and update or modify information from within your account.

Managing your marketing and other communication preferences

If you don’t want to receive promotional communications from us, such as offers or other marketing communications, you can unsubscribe by following the removal instructions in the communication that you receive (such as clicking the “UNSUBSCRIBE” or similar link within the email). 

Please note that if you opt out of receiving promotional communications, we may still send you non-promotional communications, such as those about your account or our ongoing business relations. 

This Privacy Notice is subject to change at our discretion. We will indicate changes to the Privacy Notice by updating the effective date at the beginning of the notice. Your continued use of our Services after any update to this Privacy Notice will constitute your acceptance of our changes. 

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, enforce our agreements, and for other legitimate and lawful business purposes. Because these needs can vary for different categories of personal information in the context of different Services, actual retention periods can vary significantly based on criteria such as whether your personal information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the information; whether your personal information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which we collected the information; whether the personal information is reasonably required to protect or defend our rights or property; or whether we are otherwise required or permitted to keep your personal information by applicable laws or regulations. Where personal information is used for more than one purpose, we may retain it until the purpose with the latest period expires. 

If you have any questions or concerns about this Privacy Notice or your experiences with the Service, please contact us at: 

Triton Digital Canada Inc.

Attn: Privacy 

1440 Ste. Catherine St, West, Suite 1200

Montreal, Quebec 

H3G 1R8

Canada

E-Mail: privacy@tritondigital.com

Privacy Notice for California Residents

1. Introduction and Scope

This section supplements the disclosures provided in our general Privacy Notice and applies to California consumers. This section describes the rights California consumers have under the California Consumer Privacy Act, as amended and along with any implementing regulations (“CCPA”). Any terms defined in the CCPA shall have the same meaning when used in this section.

This section does not apply to personal information collected from California-based employees, job applicants, contractors, or similar individuals but does apply to personal information collected in the context of business-to-business (B2B) transactions.

This section applies to “personal information” that we collect, meaning information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, or household. Personal information does not include publicly available information, or information that has been deidentified or aggregated.

2. Personal Information We Collect

We may collect the personal information and sensitive personal information listed below. The tables also list, for each category, the purposes for which we collect, use, and disclose the personal information. Note that the specific personal information we collect about you may vary depending on the nature of your relationship with us.

We may also use your personal information to administer and manage our relationship with you and your employer (such as record keeping, payments, and communicating with you). 

Sales and Sharing of Personal Information

From time to time, we may use or disclose your personal information in a manner that is considered a “sale” or “share” under California law to provide the most relevant advertising and deliver marketing messages and personalized offers. The categories of third parties to which we disclose your personal information include analytics, advertising, and technology companies. 

The categories of personal information that we may sell or share include identifiers, commercial information, internet or other electronic network activity information, geolocation data, and inferences. We do not knowingly sell or share the personal information of consumers under the age of 16.

We may disclose the categories of personal information identified above to the following categories of recipients, as further explained in the section titled “How We Disclose Your Personal Information” above:

• The iHeart Companies
• Vendors and Service Providers
• Business Partners and Other Third Parties
• Government Authorities
• Other Parties, where permitted by law or in the event of any actual or contemplated merger, sale, transfer of assets, acquisition, bankruptcy, or similar event, including related to due diligence conducted prior to such event.

Your California Privacy Rights

If you are a resident of California, you have the right to submit certain requests relating to your personal information as described above under “Your Privacy Rights”. To exercise any applicable right, please submit a request by email at privacy@tritondigital.com or call us toll-free at 1 800-939-9413. Please note that, if you submit a request to know, request to delete, or request to correct, we will match your personal information against our records to verify your identity. You may designate an authorized agent to make a request on your behalf; however, you may still need to verify your identity directly with us before your request can be processed. An authorized agent may submit a request on your behalf using the webform or toll-free number listed above. 

You may opt out of the sale of your personal information and the sharing of your personal information for cross-context behavioral advertising by clicking the “Your Privacy Choices” link in the footer of the Triton webpage you are visiting and managing your preferences. You may also opt out of sales and sharing by using the Global Privacy Control preference signal. Your opt-out request will be applied on a browser and device basis, and you will need to set your preferences for each browser and device you use. Your selections will be lost if you clear your cache and cookies. You may need to set your preferences separately for each device that you use to visit our Services.  

You will not to be discriminated against for exercising these rights. We will not deny you any services, nor charge you different prices, in retaliation for exercising your privacy rights.  

We do not use or disclose sensitive personal information for purposes to which the right to limit use and disclosure of sensitive personal information applies. As such, we do not offer this right.

Right to Know. In addition to the Right to Access as described above, you have the right to know what personal information we have collected about you, which includes: 

1. The categories of personal information we have collected about you, including 
2. The categories of sources from which the personal information was collected
3. Our business or commercial purposes for collecting selling, sharing, or disclosing personal information
4. The categories of recipients to which we disclose personal information
5. The categories of personal information that we sold, and for each category identified, the categories of third parties to which we sold that particular category of personal information
6. The categories of personal information that we disclosed for a business purpose, and for each category identified, the categories of recipients to which we disclosed that particular category of personal information
7. The specific pieces of personal information we have collected about you

Other California Disclosures

Shine the Light

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits California residents to opt out of our disclosure of your personal information to third parties for their direct marketing purposes. Triton does not disclose personal information to third parties for their own direct marketing purposes. If you are a California resident, you may request information about our compliance with the Shine the Light law by contacting us at privacy@tritondigital.com. Any such request must include "California Shine the Light Request" in the first line of the description and include your name, street address, city, state, and ZIP code.

Do Not Track

Some browsers may have a “Do Not Track” setting. Please note that our Service is not designed to respond to “Do Not Track” settings. 

Nevada 

If you are a Nevada resident you may have additional rights which you can exercise by sending an email to privacy@tritondigital.com.

Disclosures for Users of Our Services Outside the United States

When you use our Services outside the United States, you may have rights under data protection laws in your country, such as the European Union’s and the United Kingdom’s General Data Protection Regulation, Canada’s Personal Information Protection and Electronic Documents Act and substantially similar provincial legislation, and Australia’s Privacy Act and Privacy Principles. We recognize the privacy rights of individuals in any countries where data protection laws apply to Triton Digital, which is the controller of your personal information. 

This section provides additional information to supplement our Privacy Notice. Please review this information alongside the other sections of our Privacy Notice, which outline the personal information we collect, the sources of this information, our purposes for processing it, our retention practices, and the circumstances under which we disclose personal information to others.

In certain jurisdictions outside the United States, we are required to explain our legal bases for processing personal information. We process personal information under the following legal bases:

• Contractual Obligations. We use personal information when necessary to provide the Services you request, including administer any account you have with us, validate your access to Services, process your requests, provide customer service, and send you administrative or transactional communications. If you do not provide personal information to us as necessary for the Services you request, we will not be able to provide those Services to you.
• Legitimate Interests. We use personal information based on our legitimate interests, provided that these interests are reasonably aligned with your privacy rights and expectations. Our legitimate interests include operating, maintaining and enhancing our Services; performing analytics and market research; improving customer service and overall user experience; and safeguarding the security of our systems and data. 
• Meet Our Legal Obligations. We use personal information as needed to comply with our legal obligations, including as needed for fraud prevention, public safety, complying with public authorities and courts, and enforcing or defending our rights and those of others. 
• Consent. We may use personal information as described in this Privacy Notice with your consent, including when needed for marketing communications, advertising and tracking technology (“Cookie”) use. We will ask for your consent to the use of non-essential Cookies, including for analytics and advertising purposes. For more information on our use of Cookies, please click “Your Privacy Choices” in the footer of our website. You may withdraw your consent to our use of non-essential Cookies at any time by adjusting your Cookie preferences through the “Your Privacy Choices” link in the footer of our website. Additional information is also found in the “Cookies and Tracking Technologies” section above. 

Your Rights

Typical privacy rights that you may have under the data protection laws applicable to you include the following:

• Access and portability of your personal information, including: (i) confirming whether we are processing your personal information; (ii) obtaining access to or a copy of your personal information; and (iii) receiving an electronic copy of your personal information, or asking us to send that information to another company in a structured, commonly used, and machine-readable format where practicable. 
• Correct your personal information where it is inaccurate or incomplete. In some cases, we may provide self-service tools that enable you to update your personal information. 
• Delete your personal information. 
• Restrict or object to our processing of your personal information, meaning that you can limit our processing in some circumstances or object to all or some processing of your personal information. Common scenarios where you might have these rights are when our processing of your personal information is based on our legitimate interests or when we are using your personal information for marketing purposes. 
• Withdraw your consent to our processing of your personal information. Please note that your withdrawal will only take effect for future processing and will not affect the lawfulness of processing before the withdrawal.

You may submit your privacy request using either of the following methods:

• By email to privacy@tritondigital.com

If you disagree with our processing of your personal information or a decision we make with respect to a right you request, you may have the right to lodge a complaint with your local privacy or data protection authority. However, we invite you to reach out to us first to see if we can resolve the issue for you. 

International Transfers of Personal Information

Please note that when you provide personal information to us, we will process your personal information in the United States and other locations outside your home country or province. The laws in these countries may not provide a similar level of protection for personal information as those in your home country. Personal information transferred or communicated outside of your country may be accessible to foreign courts, law enforcement and other public authorities.

We take steps to help ensure personal information receives appropriate protection in the jurisdictions in which we process it. For example, where we transfer personal information outside of the European Economic Area or the United Kingdom to other countries, we use appropriate and suitable safeguards, including standard contractual clauses, to help protect personal information being processed in other countries. For more information about our safeguards, to ask about our processing of your personal information in other jurisdictions (including by our service providers), or to obtain a copy of the relevant standard contractual clauses used for transferring personal information, please contact our Privacy Office by email at privacy@tritondigital.com.