Updated: December 31, 2025
This policy applies to PulsePoint’s platforms and services, including PulsePoint’s ad exchange, demand-side platform, and data analytics product(s) (collectively, the “Platforms”), and it explains our practices regarding the collection, use, and disclosure of information on our platforms as well as your rights with regard to that information.
This policy does not govern the collection and use of information through our website at www.pulsepoint.com – that is governed by our website privacy policy. This policy also does not govern the collection or use of information collected by our clients or the third parties they may otherwise contract with.
If you would like to go straight to our cookie opt-out tool, click here.
PulsePoint, Inc. (“PulsePoint”) operates several technology platforms that help advertisers serve ads on mobile applications, websites and other digital channels. If you have any questions regarding the use or privacy of your data, please email dataprivacy@pulsepoint.com
Our headquarters is located at:
283-299 Market Street
2 Gateway Center, 4th Floor
Newark, NJ 07102
PulsePoint is a member in good standing of the Network Advertising Initiative (NAI), an association dedicated to responsible data collection use in advertising. PulsePoint also adheres to the specifications of the IAB EU Transparency & Consent Framework for purposes of compliance with EU data protection laws. Our Vendor Number with IAB Europe is 81.
PulsePoint’s Platforms help advertisers and publishers provide advertising over the internet, as well as other channels such as digital billboards or smart TVs. Additionally, the Platforms allow for advertisers to show advertising to you that is relevant to your interests, with the hope that you are presented with ads that may provide beneficial products and services for you.
Through our ad exchange, PulsePoint works with publishers and other content providers to help them sell their advertising space, which in turn helps them to fund their content or apps. On our demand-side platform, also known in the industry as a “DSP,” we work with advertisers who will purchase that advertising space to advertise their goods and services to consumers who may be likely to be the right audience for those ads. We may also measure and report on how often an ad was seen, and how effective that ad was by metrics given to us by the advertiser. To do this, we receive and share “pseudonymous” personal data – data such as IP addresses, cookies, and other unique identifiers – that we receive or may assign to you to remember who “you” are, but that do not directly identify you or your direct contact information.
With respect to our analytics product, we work with our clients to understand the browsing behavior of healthcare providers (“HCPs”). Through pieces of code called “pixels,” we collect information on certain of our clients’ websites or other internet-enabled spaces to understand if HCPs are visiting certain webpages (such as pharmaceutical brand pages) and what kind of information they are viewing.
How we collect information:
When a person browses the internet, our publisher partners may request advertisements from PulsePoint’s Platform. Through the serving of those advertisements or through other Platform analytics, we may collect or otherwise receive information that is linked to your computer or device that may reflect how you interact with a webpage, the advertisements you view or click, or other information from your mobile device. As a result, our Platforms may collect data from partners sending us requests for ads on websites, apps, smartTVs, digital billboards, or other advertising channels; through cookies and pixels; through clients or partners providing data to us; through clients and partners using our Platforms; and through the delivery of advertising. We also license data from third-party data providers to help us provide better targeting for our advertising clients.
In addition, PulsePoint is part of the Internet Brands family of companies, and is a subsidiary of WebMD Health Corp. Other companies within the Internet Brands group, including WebMD, may be able to use information collected by PulsePoint for purposes of its own advertising, and PulsePoint also receives certain information collected by the Internet Brands group of companies in support of the PulsePoint Platforms.
Types of information we may collect:
PulsePoint specializes in health-related advertising and may collect and use information based on a user’s interactions with content on sites or within ads that pertain to health. For example, if you have previously interacted with content that has to do with skin care, PulsePoint may collect that information and you may subsequently be shown an ad on another page for skin care-related products and services. We do not, however, collect sensitive health information like a user’s specific health condition or diagnosis, or information that reveals a person’s health condition or diagnosis.
Most of the information PulsePoint collects is either pseudonymous data, such as cookies, mobile advertising IDs, or other unique identifiers; or non-personally identifiable data, which is data that does not identify you in any way but may be associated with your browsing behavior. Under US State Privacy Laws, some of this data may be considered “personal information” or “personal data.” We may collect information such as:
Additionally, for HCPs, we receive data from our affiliate, Medscape, such as an HCP’s name, practice area, practice location, and practice email address; this is disclosed in Medscape’s Terms of Use and Privacy Policy. We may license similar data from third party data providers. We also collect publicly available information about HCPs from the National Provider Identifier Registry.
We also contract with third parties to license de-identified healthcare data, including filled prescription data. This data comes to us already in de-identified form in compliance with HIPAA de-identification standards, and we use the data based on the direction of expert determinations to ensure that data remains de-identified. PulsePoint will never attempt to re-identify a specific individual with this data.
Our Clients may input their own data into our Platforms to support their advertising campaigns and goals. In our contracts, we require our Clients to comply with applicable laws, and we do not permit them to input or share with us certain information, such as certain sensitive data or HIPAA-covered data.
We use the data we collect for the following purposes:
Some of the use cases may be considered “selling” or “sharing” of personal information under applicable laws.
PulsePoint discloses information that it collects to the following categories of third parties:
We may share certain information with Google as a partner in the ad ecosystem. Where we share information with Google, Google uses the information to deliver its services, maintain and improve them, develop new services, measure the effectiveness of advertising, protect against fraud and abuse, and personalize content and ads you may see on Google and on our partners’ sites and apps. You can review Google’s Privacy & Terms page here.
We collect information about users through technologies such as cookies, pixels, tags, web beacons, or other similar technologies. “Cookies” are small data files that are stored by your web browser on your computer. When you visit a webpage, the cookie sends back data about that visit. “Pixels” are small graphic images (usually invisible) that can be embedded in content and ads on a webpage that track usage of websites and effectiveness of communication. These pixels can then be used to recognize our cookies and to monitor certain user interactions with a website.
Cookies and these other technologies are important and useful because they allow us to recognize and distinguish between devices and provide relevant advertising as described in this policy. Our cookie domain is contextweb.com.
You have several choices when it comes to opting out of the collection of information about your web browsing activities through cookies. See the “Opt Outs” section below for ways to opt-out. You can also find information about opting out on the DAA website. For additional information on cookies, please review our Cookie Policy.
You have various options to opt out of our use of your personal information for targeted advertising and/or the sale or sharing of your personal information. Please note that opting out does not prevent you from seeing ads; it simply means that we will no longer collect your data for the purpose of targeted advertising or to sell or share your personal information. You may still see ads that come from our services, they just may not be relevant to you.
Cookie-based opt-outs are browser- and device-specific. If you change web browsers or change computers, you will need to opt out of cookies on those browsers or devices as well. If you delete your cookies, you will also delete the opt out signal to PulsePoint, so you will need to re-submit the opt out after that deletion.
Note that different devices require separate opt-outs because each device type uses different technologies, and many of the opt-out technologies available are browser- or cookie-based so they will only apply to those specific browsers or cookies.
Your options include:
PulsePoint Opt Out
You can use our PulsePoint Opt Out Tool, available at this link.
Industry Opt Outs
Certain online advertising industry groups provide certain programs that allow users to control the use of cookie-based identifiers placed by companies that participate in these programs. You can access these programs through the following:
Global Privacy Control
You may also set a preference on your browser through a browser-based opt out signal called “Global Privacy Control” which will provide a signal to automatically make opt-out requests as you browse the web. This signal is only available on certain browsers and is browser-specific, so it will only apply to the browser on which you opt to use it. However, for purposes of the Platforms, PulsePoint honors this signal when it is passed through to us by our partners. You can learn more about GPC here. Additionally, the NAI has recently released a Global Privacy Control browser extension for Google Chrome which you can access here.
Mobile App Opt Outs
If you are using a mobile device, your mobile device may offer settings to limit or disable mobile apps from gathering certain information. Review the settings for the app, or access the privacy settings of your device and select “limit ad tracking” (iOS) or “opt-out of interest based ads” (Android). For more information on how to opt out on mobile devices, you can visit the NAI’s information page located at https://thenai.org/how-to-opt-out/advertising-privacy-settings-on-mobile-devices.
Other Identifier Opt Outs
We may share information that we collect from you, such as your IP address or other information about your browser or operating system with certain service providers, including LiveRamp, Inc. LiveRamp returns an online identification code that we may store in our first-party cookie and it may be shared with advertising companies to enable interest-based and targeted advertising. You may opt out of this use here.
Healthcare Provider Opt Out
If you are a healthcare provider (“HCP”) with a registered NPI number, you may request that your NPI number and other personal information be removed from PulsePoint’s NPI database at any time by submitting a request here.
Depending on where you live, you may be afforded specific rights with respect to your privacy and control over your personal information. Those rights include:
If you would like to submit a request to access, correct, or delete of the data we have on file for you, you may submit such requests here. Alternatively, you may email us at dataprivacy@pulsepoint.com or write to PulsePoint Privacy Department, 283-299 Market Street, 2 Gateway Center, 4th Floor, Newark, NJ 07102. We may take reasonable steps to confirm your identity in an effort to prevent identity theft. Also, please note that in general, we only have pseudonymous data on any given individual (other than HCPs). The information we need to complete these requests will include either your PulsePoint cookies, your MAID, or your IP address.
To find your PulsePoint cookies, look for the cookies on your browser that resolve to “contextweb.com”. For MAIDs, on an Android device a MAID is referred to as an AAID. Go to your device settings and click on “Ads.” Your AAID will be listed at the bottom of the screen. On an iOS device, a MAID is referred to as an IDFA. The IDFA is hidden by default on iOS devices. You can find the IDFA using a third party app, which are available in the Apple App Store. You can find some of those apps here.
If we deny your request, you may have the right to appeal our decision by emailing us at dataprivacy@pulsepoint.com and/or following the directions in the denial response.
Response Fees
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
EEA RESIDENTS
We do not intentionally process data of consumers in the EEA for the purposes of our DSP. However, we may receive data of EEA consumers through web traffic passed to us through our Ad Exchange. If we receive data from a device located in the EEA, you will be afforded the rights provided under the GDPR. EEA residents are also able to access our Data Protection Officer, who is reachable at dpo.webmd.ams@dentons.com. For more information on our practices with respect to data of EEA residents, please visit our EEA supplement.
We participate in the EU-US Data Privacy Framework, the UK Extension to the EU-US Data Privacy Framework, and the Swiss-US Data Privacy Framework. To learn more, click here.
If you are located in the EEA and visit a site or other content provider that happens to work with PulsePoint and uses the IAB Europe Transparency and Consent Framework, that publisher should provide you with an option to choose which third parties you wish to allow access to your device and information.
This Privacy Policy applies only to information gathered by us in connection with our Platform. There are other companies involved in collecting information and serving ads. The use of third-party pixels, cookies, and other technologies on websites that end-users visit, in apps that end-users use, and in ads served to end-users should be described by the privacy policies associated with those websites, apps, and ads. We have no responsibility for the collection, use, or disclosure of information by those third parties via such websites, apps, or ads.
We use reasonable security measures to protect the data in our possession. However, no method of transmission or storage of data is 100% secure. To the extent we provide your data to any third parties, we request that they use reasonable and industry standard security measures to protect your information.
Personal Information we acquire through our Platforms is generally deleted within 45-60 days but may be retained in PulsePoint’s internal network for up to 18 months from the date of collection before deletion. We may keep or store aggregated or non-personally identifiable data derived from that information indefinitely.
We retain information we collect from you where we have an ongoing legitimate business need to do so (for example, to comply with applicable legal, tax or accounting requirements).
When we have no ongoing legitimate business need to process your data, we will either delete or anonymize it or, if this is not possible (for example, because your data has been stored in backup archives), then we will securely store your data and isolate it from any further processing until deletion is possible.
In the interest of the privacy of children, we do not knowingly collect information from or target end users under the age of 18. Our Platform is neither developed for nor directed at children. If we learn we have collected or received information from a minor under 18 without verification of parental consent, we will endeavor to delete that information.
Our Platform is based in the United States and operates under United States law. If you are located outside of the United States, the information we collect may be transferred to and processed in the United States and in other countries where the privacy laws may not be the same as the laws where you reside and, in some cases, may not be as protective. Additional considerations apply to the collection, use, and disclosure of information from individuals who live in the EEA.
Certain web browsers allow you to turn on settings that automatically send a signal to companies you interact with online to indicate you would like to opt out of having your data shared or sold. PulsePoint has implemented and will honor GPC. PulsePoint is also a signatory to the IAB’s MSPA and recognizes the GPP consent string in accordance with IAB guidance.
Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the “CCPA”), we are required to disclose certain additional information to California residents. If you are a California resident, the information in this Section pertains to you.
In addition to the privacy rights listed below for certain US Residents, California Residents have the right to limit the use of sensitive personal information that we may collect about such residents. We generally do not attempt to collect any “Sensitive Personal Information” as defined under the CCPA, but we may be sent such information from publishers or other partners without prior notice. If we use or disclose this sensitive personal data for any reason other than as permitted under the CCPA, you have the right to request that we limit that use to only specific uses as prescribed under the CCPA.
California Disclosure
In the past 12 months:
Categories of Personal Information Collected
For Healthcare Providers Only: Identifiers such as name, postal address, telephone number, email, account name; Professional or employment-related information such as current place of employment; and all items collected below for consumers.
For Consumers: Identifiers such as Cookies, IP address, Mobile Ad IDs, Timestamps, User Agent Strings, unique personal identifiers, online identifiers, IP address; Location Data such as general location data that is “imprecise” under applicable law, as well as other location data that may be determined based on WiFi; Internet and Electronic Network Information, such as information on a user’s interaction with a website, application or advertisement; and Inferences drawn from other personal information.
Please also see “Information We Collect” in the privacy policy above for more details.
Categories of Sources from which Information is Collected
Websites, mobile applications, technology platforms, other adtech providers, data providers, data brokers.
Purposes for Collecting and Disclosing Personal Information
We use collected information to provide online advertising services, as further described above in “How We Use Collected Information” and “How We Share Information”
Categories of Personal Information that we sell or share
Pursuant to the definition of “sell” under the CCPA, we “sell” only the personal information described for “Healthcare Providers Only” under the “Categories of Personal Information Collected” provided above in this chart. Pursuant to the definition of “share” under the CCPA, we share the information for both HCPs and Consumers under “Categories of Personal Information Collected” provided above in this chart.
Third parties to whom information is shared or sold
Publishers, demand partners, supply partners, measurement providers, identity resolution partners, advertiser clients (for HCP data only)
PulsePoint is a registered Data Broker for purposes of, and as defined by, the California Delete Act. Below are the statistics for the Calendar Year 2024:
For requests to delete and to know/access, many of the requests are listed as “denied” because we were either unable to verify the identity of the individual making the request, or because we were not able to locate any information relating to the individual making the request.
We reserve the right to change or modify this privacy notice and any of our Services at any time and any changes will be effective upon being posted unless we advise otherwise. We encourage you to periodically review this privacy notice for the latest information on our privacy practices.