Numerator Privacy Policy
Last Updated: March 9, 2026
Numerator, LLC (“Numerator”) respects your concerns about privacy. This Privacy Policy describes the types of personal information we collect, how we use the information, with whom we may share it and the choices available to you regarding our use of the information. We also describe measures we take to protect the security of the information and how you can contact us about our privacy practices.
This Privacy Policy applies to the personal information we obtain when you interact with us, including through your use of the Numerator website, social media pages and other platforms that reference or link to this Privacy Policy (collectively, the “Services”).
For information about our privacy practices with respect to Receipt Hog, please see the Receipt Hog Privacy Policy.
Click on one of the links below to jump to the listed section:
—-
Information We Obtain
The types of personal information we may obtain about you include:
- Contact information (such as your name, organization name, telephone number, postal and email address);
- Country of residence;
- Account information (such as username and password);
- Geolocation information;
- Other information you choose to provide, such as when you contact us or provide feedback or responses to questionnaires and surveys.
Automated Collection of Information
When you use our Services, we may collect certain information by automated means, such as through cookies, pixel tags, web beacons, device logs, server logs, and other technologies. A “cookie” is a text file that websites send to a visitor’s computer or other internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. A “web beacon,” also known as an internet tag, pixel tag or clear GIF, links web pages to web servers and cookies and may be used to transmit information collected through cookies back to a web server. The information we collect in this manner on our Platforms may include your device IP address; unique device identifier and other device characteristics; web browser characteristics; operating system; language preferences; referring URLs, emails and web addresses; clickstream data and actions taken on the Services; dates and times of usage; usage statistics; and other information regarding use of the Services.
We may use these automated technologies to collect information about your equipment, browsing actions and usage patterns. These technologies help us:
- remember your information so you do not have to re-enter it;
- track and understand how you use and interact with the Services;
- tailor the Services around your preferences;
- measure the usability of the Services and the effectiveness of our communications;
- authenticate your identity, protect against fraud and provide our products and services; and
- otherwise manage and enhance our products and services, and help ensure they are working properly.
To provide a localized experience, we use your IP address to determine your approximate location at a country level. This processing occurs in real-time and is used solely to direct you to the appropriate regional version of our website. We do not store your IP address for this purpose, nor do we link it to an identifiable profile.
Your browser may tell you how to be notified about certain types of automated collection technologies and how to restrict or disable them. For mobile devices, you can manage how your device and browser share certain device data by adjusting the privacy and security settings on your mobile device. Without these technologies, however, you may not be able to use all of the features of the Services.
Our Services are not designed to respond to “do not track” signals from browsers.
How We Use the Information We Obtain
We may use the personal information we obtain to:
- Provide our Services and manage your account;
- Communicate with you, respond to inquiries and offer support and assistance;
- Personalize your experience with the Services;
- Determine your eligibility to participate in market research, product testing or other similar programs;
- Advertise and market our Services;
- Administer participation in surveys, sweepstakes, promotions or other programs;
- Perform analytics and market, trend or statistical research and solicit user feedback regarding product research and development;
- Compile, anonymize or aggregate personal data for our business purposes;
- Operate, evaluate and improve our business and our affiliates’ products and services (including developing new products and services; improving and analyzing our and our affiliates’ products and services; managing our communications; providing technical support; and performing accounting, auditing and other internal functions);
- Maintain and enhance the safety and security of our Services, prevent misuse and troubleshoot technical issues;
- Verify your identity and protect against fraud and other criminal activity, claims and other liabilities;
- Exercise our rights and remedies, respond to requests from government entities, and defend against legal claims; and
- Comply with and enforce applicable legal requirements, relevant industry standards and Numerator policies.
We also may use the information in other ways for which we provide specific notice at the time of collection.
To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
Third-Party Analytics Services
We may use third-party analytics services on the Services, such as Google Analytics. The providers of these analytics services use technologies such as cookies and web beacons to help us analyze your use of the Services. The information collected through these means may be disclosed to or collected directly by these services. To learn more about Google Analytics, please visit https://www.google.com/policies/privacy/partners/.
Interest-Based Advertising
You may see our ads on other websites because we use third-party ad services on our Services. Through these ad services, we can tailor our messaging to individuals considering demographic data, inferred interests and browsing context. These ad services track information about your online activities over time and across third-party websites and apps by collecting information through automated means, including through the use of cookies, web server logs, web beacons and other similar technologies. These ad services may collect data about your visits to websites and apps that participate in these services, such as the pages or ads you view and the actions you take on the websites or apps. This data collection takes place both on our Services and on third-party websites and apps that participate in these ad services. These ad services use this information to show you ads that may be tailored to your individual interests. This process also helps us track the effectiveness of our marketing efforts.
To learn how to opt out of interest-based advertising in the U.S., please visit www.aboutads.info/choices, www.networkadvertising.org/choices/, and http://preferences-mgr.truste.com/. To opt out of interest-based advertising in Canada, please visit https://optout.aboutads.info/?c=3&lang=en and https://youradchoices.ca/en/appchoices.
Information We Share
We may share the categories of personal information listed above with the categories of third parties listed in this section. We may share the information we obtain about you with (1) our affiliated companies (which include our parent company and any other subsidiaries, joint venture partners or other companies that we control or that are under common controls with us); (2) Internet service providers, operating systems and platforms, (3) professional services organizations, such as auditors and law firms, (4) social media platforms, if you use those services to connect with us, and (5) third-party vendors and other entities to perform services on our behalf, such as web hosting, IT support and communications providers.
We also may disclose personal information (1) if we are required to do so by law or legal process, such as a court order or subpoena; (2) in response to requests by government agencies, such as law enforcement authorities; (3) to establish, exercise or defend our legal rights; (4) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; (5) in connection with an investigation of suspected or actual illegal activity or (6) otherwise with your consent or as directed by your representative.
In addition, we reserve the right to transfer to relevant third parties the personal information we have about you in the event of a potential or actual sale or transfer of all or a portion of our business or assets (including in the event of a merger, acquisition, joint venture, reorganization, divestiture, dissolution, or liquidation), or other business transaction.
Transfer of Your Personal Information
We may transfer the personal information that we collect about you to recipients, such as our service providers and affiliates, in jurisdictions other than the jurisdiction in which the personal information originally was collected. As a result, your personal information may be lawfully accessed by U.S. or foreign courts, law enforcement or other government authorities. Those jurisdictions may not have the same data protection laws as the jurisdiction in which you initially provided the personal information. When we transfer your personal information to recipients in other jurisdiction (such as the U.S.), we will protect that personal information as described in this Privacy Policy.
Your Rights and Choices
We offer you certain choices in connection with the personal information we collect from you. You can unsubscribe from our marketing mailing lists by following the “Unsubscribe” link in our emails.
U.S. State Privacy Rights
Depending on your state of residence, you may have the right to request (1) confirmation of whether we process your personal information and access to the personal information we maintain about you, including a copy provided in a portable format; (2) correction of your personal information; (3) deletion of your personal information; and (4) to opt out of the processing of your personal information for purposes of targeted advertising or the sale of your personal information. We may take steps to verify your identity before honoring your request to the extent permitted by applicable law.
To submit a request, please email us at [email protected]. To exercise your opt-out rights, please click here or, for opt-out requests that involve automated technologies on the device and browser you are currently using, by using the Global Privacy Control signal. Requests sent using the Global Privacy Control will apply to the device and browser from which they are submitted. For more information about the Global Privacy Control, please visit https://globalprivacycontrol.org. To submit a request as an authorized agent where permitted by applicable law, please email us at [email protected] with the subject line “Authorized Agent Request.” Subject to applicable law, you may appeal our decision with respect to a request you have submitted by emailing us at [email protected].
- California Residents. Please see the “California Consumer Privacy Statement” section of this Privacy Policy for more information about your privacy rights.
- Colorado Consumers. Please see the “Colorado Consumer Privacy Statement” section of this Privacy Policy for more information about your privacy rights.
Canadian Privacy Rights
If you are located in Canada, you have the right to access, update and correct inaccuracies in, and withdraw consent to our collection, use and disclosure of, your personal information in our custody or control. You may make such a request or withdraw your consent by emailing or writing to us using the contact information set out below. We may request certain personal information for the purpose of verifying your identity when you seek access to or correction of your personal information.
Retention of Your Personal Information
We will retain your personal information for the period reasonably necessary to achieve the purposes set out in this Privacy Policy (or any other notice provided at the time of collection) and our legal obligations, taking into account applicable statutes of limitation and records retention requirements under applicable law.
How We Protect Personal Information
We maintain administrative, technical and physical safeguards designed to protect personal information against accidental, unlawful or unauthorized access, destruction, loss, alteration, disclosure or use.
Children’s Privacy
Our Services are designed for a general audience and are not directed to children under the age of 18. We do not knowingly collect or solicit personal data from children under the age of 18 (or other relevant age, as applicable pursuant to relevant law) through our Services. If we become aware that we have collected personal information from a child under such age, we will promptly delete the information from our records. If you believe that a child under such age may have provided us with personal information, please contact us at [email protected].
Links to Third-Party Services and Features
For your convenience and information, the Services may provide links to other online services (such as other websites or social media platforms), and may include third-party features such as apps, tools, widgets and plug-ins. These online services and third-party features may operate independently from us. The privacy practices of the relevant third parties, including details on the information they may collect about you, are subject to the privacy statements of these parties, which we strongly suggest you review. To the extent any linked online services or third-party features are not owned or controlled by Numerator, we are not responsible for these third parties’ information practices.
Updates to Our Privacy Policy
We may update this Privacy Policy from time to time and without prior notice to you to reflect changes in our personal information practices. We will indicate at the top of the policy when it was most recently updated.
How to Contact Us
You can update your preferences, ask us to remove your information from our mailing lists, submit a request or ask us questions about this Privacy Policy or the manner in which we or our service providers (including our service providers outside your jurisdiction) handle your personal information by contacting us at:
Numerator Privacy
Numerator, LLC
24 E. Washington St., Suite 1200
Chicago, IL 60602
[email protected]
Numerator Korea Privacy Statement
Last Updated: October 1, 2026
This Numerator Korea Privacy Statement supplements the Numerator Privacy Policy and applies solely to personal information collected from data subjects in Korea. In the event of any conflict, this Numerator Korea Privacy Statement will prevail over the Numerator Privacy Policy. This Numerator Korea Privacy Statement does not apply to personal information collected about our personnel or job applicants.
—-
Personal Information Items Processed
We collect and use personal information to the minimum extent necessary to provide services in accordance with the Personal Information Protection Act of Korea.
- Items of personal information processed without your consent:
Legal Basis | Purpose | Types of PI | Retention Period |
|---|---|---|---|
| Art. 15(1)(4) (Performance of a contract) |
|
| As long as necessary for the provision of the services. |
- Items of personal information processed with your consent:
We process the following personal information items with your consent, in accordance with Articles 15(1)(1) and 22(1)(7) of the Personal Information Protection Act. You have the right to refuse consent for the collection and use of your personal information; however, if refused, you may not be able to access certain services.
Purpose | Types of PI | Retention Period |
|---|---|---|
| Send promotional marketing emails using website form submissions and route consenting leads to the sales team for follow-up. | Name, email address, job title, company and country selected on the website form (U.S., Canada, South Korea, Germany or Other) | Until consent is withdrawn, the recipient unsubscribes or opts out, or the information is found to be inaccurate or no longer relevant, whichever occurs first, subject to any applicable retention obligation. |
| Measure website traffic, user journeys, ad engagement and conversions, and optimize advertising using the Meta Pixel and Google tag, where consent is required and obtained. | Meta Pixel: standard HTTP headers, pixel identifiers, button clicks and optional custom visitor data, where provided. Google tag: standard HTTP headers (IP address, browser type, operating system, page URL and referral source), unique tracking or cookie identifiers, button clicks, scrolls, form submissions and page views. | Numerator’s own retention period: Numerator stores performance data as long as necessary for the purpose of the processing. Provider retention: Meta states it stores Meta Pixel data for up to two years; Google Analytics user data retention is set to 14 months; Google Ads retains granular reporting data for up to 37 months and high-level aggregated campaign performance data for up to 11 years. |
Provision of Personal Information to Third Parties
Numerator processes personal information only within the scope specified in Personal information items processed and provides personal information to third parties only when permitted under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or when specifically required by law.
For the seamless provision of services, Numerator provides personal information to third parties within the minimum necessary scope, with the consent of the data subject, in accordance with Article 17(1)(1) of the Personal Information Protection Act.
In accordance with Article 17(4) of the Personal Information Protection Act, Numerator may provide additional personal information without the data subject’s consent, taking into account the matters specified in Article 14-2 of the Enforcement Decree of the Personal Information Protection Act, as follows.
- The personal information provided is closely related to the original purpose of collection, which includes providing membership services.
- Data subjects can reasonably expect the provision of personal information as part of the service contract process due to the nature of the service.
- The information is provided at the data subject’s request to deliver Numerator’s services and does not unduly infringe upon the data subject’s interests.
- Numerator has implemented necessary security measures to minimize the exposure of personal information.
Numerator may provide users’ personal information to third parties in accordance with lawful procedures specified by other laws that include special provisions.
Entrustment of Personal Information Processing
Numerator entrusts certain personal information processing tasks to third parties as follows to ensure smooth handling of personal information-related operations.
If there are any changes to the entrusted tasks or the trustee, Numerator will promptly update and disclose the information through this Privacy Policy.
Overseas Transfer of Personal Information
Numerator entrusts the following personal information processing tasks to overseas entities to ensure smooth operations. Personal information is processed only within the scope outlined in Personal Information Items Processed, and it is provided to third parties only when the data subject’s consent is obtained, when necessary for the conclusion and performance of a contract with the data subject, or when permitted by special provisions in the law, in accordance with Article 28-8, Paragraph 1 of the Personal Information Protection Act. You may opt-out of such transfer so long as the transfer is not necessary to provide you with our services.
Numerator provides and entrusts your personal information to an overseas third party as follows in accordance with Article 28-8 of the Personal Information Protection Act.
You may refuse the transfer of your personal information to an overseas third party by notifying us of your refusal through the contact information provided in the Chief Privacy Officer section, except in cases where the transfer is necessary for the conclusion and performance of a contract. However, in such cases, your use of some services may be restricted.
- Overseas Entrustment of Personal Information
Legal Basis | Recipient | Purpose of Transfer | Data Provided | Transfer Time, Method | Retention Period |
|---|---|---|---|---|---|
| Article 28-8(1)(3) (Entrustment/Storage for contract performance) | Adobe Inc. | Processes data on Numerator’s behalf for marketing automation, such as managing contacts and sending or measuring marketing communications | Personal information (such as name, email, company/contact details), marketing preferences, and email interaction/marketing engagement data | When a person submits a form, is added or updated as a lead/contact, or receives/interacts with a campaign | Until consent is withdrawn, the recipient unsubscribes or opts out, or the information is found to be inaccurate or no longer relevant, whichever occurs first, subject to any applicable retention obligation. |
| Salesforce | Processes CRM data for Numerator | Personal information (such as names, contact details), organization information, account/lead records, and activity or case information. | When a person submits a form, is added or updated as a lead/contact, or receives/interacts with a campaign. | For as long as necessary for the purposes of the processing. | |
| Analytics measurement for website traffic and interaction as well as advertising measurement, conversion measurement, and audience/remarketing services | Page and event interactions, IP/device/browser identifiers, cookie or advertising identifiers, and referral data. Ad interactions, conversion events, click or campaign IDs, cookie/device identifiers, and—in Customer Match or enhanced conversion configurations—contact data or hashed identifiers | Sent through website tags/pixels or an audience upload | Provider retention: Meta states it stores Meta Pixel data for up to two years; Google Analytics user data retention is set to 14 months; Google Ads retains granular reporting data for up to 37 months and high-level aggregated campaign performance data for up to 11 years. | ||
| Meta Platforms, Inc. | Advertising measurement, conversion measurement, and audience/remarketing services | Page/event activity, IP/device and browser identifiers, cookie IDs, ad interactions | Sent through website Meta pixel | Meta describes retention as dependent on the purpose, feature, and applicable obligations | |
| WP Engine | Website hosting and related infrastructure | Website visitor requests and server logs, including IP address, timestamp, requested URL, and browser/device information | As users access the site and the browser’s requests are handled by the hosting environment | For as long as necessary for the purposes of the processing. |
Numerator has entered into a data processing entrustment agreement with the entrustee. In accordance with the Personal Information Protection Act, the agreement specifies, among other things, the prohibition of processing personal information beyond the purpose of performing the entrusted tasks, technical and administrative protective measures, the purpose and scope of the entrusted tasks, restrictions on subcontracting, safety measures to secure personal information, management and supervision of the entrustee, and liability for damages. Numerator monitors the entrustee to ensure that personal information is processed securely.
If there are any changes to the content of the entrusted tasks or the trustee, we will promptly disclose the information through this Privacy Policy.
- Provision of Personal Information to Overseas Third Parties
Legal Basis | Recipient | Purpose of Transfer | Data Provided | Transfer Time, Method | Retention Period |
|---|---|---|---|---|---|
| Article 28-8(1)(1) (Consent of the Data Subject) | Adobe Inc. | Processes data on Numerator’s behalf for marketing automation, such as managing contacts and sending or measuring marketing communications | Personal information (such as name, email, company/contact details), marketing preferences, and email interaction/marketing engagement data | When a person submits a form, is added or updated as a lead/contact, or receives/interacts with a campaign | Until consent is withdrawn, the recipient unsubscribes or opts out, or the information is found to be inaccurate or no longer relevant, whichever occurs first, subject to any applicable retention obligation. |
| Salesforce | Processes CRM data for Numerator | Personal information (such as names, contact details), organization information, account/lead records, and activity or case information. | When a person submits a form, is added or updated as a lead/contact, or receives/interacts with a campaign. | For as long as necessary for the purposes of the processing. | |
| Analytics measurement for website traffic and interaction as well as advertising measurement, conversion measurement, and audience/remarketing services | Page and event interactions, IP/device/browser identifiers, cookie or advertising identifiers, and referral data. Ad interactions, conversion events, click or campaign IDs, cookie/device identifiers, and—in Customer Match or enhanced conversion configurations—contact data or hashed identifiers | Sent through website tags/pixels or an audience upload | Provider retention: Meta states it stores Meta Pixel data for up to two years; Google Analytics user data retention is set to 14 months; Google Ads retains granular reporting data for up to 37 months and high-level aggregated campaign performance data for up to 11 years. | ||
| Meta Platforms, Inc. | Advertising measurement, conversion measurement, and audience/remarketing services | Page/event activity, IP/device and browser identifiers, cookie IDs, ad interactions | Sent through website Meta pixel | Meta describes retention as dependent on the purpose, feature, and applicable obligations | |
| WP Engine | Website hosting and related infrastructure | Website visitor requests and server logs, including IP address, timestamp, requested URL, and browser/device information | As users access the site and the browser’s requests are handled by the hosting environment | For as long as necessary for the purposes of the processing. |
Retention and Use Period
We retain your personal information for the period during which we provide services to you in accordance with the contract between us, but when the purpose of collecting and using personal information is achieved or when you request its destruction (whichever comes first), we destroy it in a way that cannot be restored without delay.
However, we may need to retain your personal information in accordance with the relevant laws and/or in accordance with the obligations under the relevant laws, including without limitation to:
- Records related to contracts or withdrawal of subscriptions: retained for 5 years (Article 6(1)(2) of the Enforcement Decree of the Act on the Consumer Protection in Electronic Commerce);
- Records related to payment and supply of goods/services: retained for 5 years (Article 6(1)(3) of the Enforcement Decree of the Act on the Consumer Protection in Electronic Commerce);
- Records related to consumer complaints or dispute resolution: retained for 3 years (Article 6(1)(4) of the Enforcement Decree of the Act on the Consumer Protection in Electronic Commerce);
- Records related to labeling and advertising: retained for 6 months (Article 6(1)(1) of the Enforcement Decree of the Act on the Consumer Protection in Electronic Commerce);
- Records of computer communications, internet log data, and tracking data of access points: retained for 3 months (Article 15-2(2) of the Protection of Communications Secrets Act).
Destruction of Personal Information
In principle, we immediately destroy your data after the purpose of collection and use of the personal information is achieved. The process and method of destruction are as follows:
- Destruction process
- Once the purpose is achieved, your personal information is moved to a separate database (or a document box in the case of papers) and is destroyed after storage for a certain period depending on data protection reasons under our internal policy and other applicable laws and regulations. The personal information moved to a separate database will not be used for other purposes other than the purpose of retention, unless otherwise provided by law.
- Destruction method
- We delete personal information stored in the form of an electronic file by using technical means that make it impossible to restore the data. For personal information printed on paper, we shred it using a paper shredder or incinerate it.
Direct Overseas Collection of Personal Information
We collect and process your personal information directly in the United States to provide services to you.
Your Rights and How to Exercise Them
- You may exercise your rights (hereinafter referred to as the “Exercise of Rights”) at any time against us, such as the right to access, correct, delete, suspend the processing of, and withdraw your personal information.
- The Exercise of Rights may be made by email, fax, in writing, by telephone, via the Internet, or by other means pursuant to Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and we will take action without delay.
- The Exercise of Rights by you can be made through your representative, such as the user’s legal representative or a delegated person. In this case, a power of attorney must be submitted in accordance with the form in Attachment No. 11 of the ‘Notice on How to Process Personal Information’ of the Personal Information Protection Act of Korea.
- Your right to request the suspension of the processing and access to personal information may be restricted in accordance with Articles 35(4) and 37(2) of the Personal Information Protection Act.
- If the personal information is specified as the subject of collection in other laws, your request to delete the personal information may not be fulfilled.
- For requests or complaints regarding our use of personal information, please contact us through the contact information provided in the Chief Privacy Officer section.
Safety Measures to Ensure Your Personal Information
Numerator takes the following measures to ensure the security of personal information from leak, loss, misuse or inadvertent destruction:
- Administrative Measures: Establishment and implementation of an internal management plan, operation of a dedicated organization, and regular employee training
- Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of personal information, and installation and updates of security programs
- Physical Measures: Access control for computer rooms and data storage facilities
Chief Privacy Officer
Numerator takes overall responsibility for personal information processing and has designated a Chief Privacy Officer as outlined below to handle complaints and provide remedies related to personal information processing.
- Chief Privacy Officer
- Department: Numerator Privacy
- Name/Position: Data Protection Officer
- Contact: [email protected]
- Personal Information Protection Department
- Department: Numerator Privacy
- Name/Position: Data Protection Officer
- Contact: [email protected]
Remedies for Infringement of Your Rights and Interests
You can seek dispute resolution or consultation from the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, and other organizations to receive assistance for personal information infringements. For additional reports or consultations regarding personal information issues, please contact the following organizations.
- Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: (without area code) 118 (privacy.kisa.or.kr)
- Supreme Prosecutors’ Office: (without area code) 1301 (www.spo.go.kr)
- National Police Agency: (without area code) 182 (ecrm.cyber.go.kr)
Disclosure and Changes to the Privacy Policy
If we make any additions, deletions, or modifications to the Privacy Policy due to changes in laws, policies, or security technologies, we will inform you of the reasons and details of these changes. You will be notified at least seven days prior to the changes taking effect, and this information will be available on our website.
You can view the previous version of the Privacy Policy below.
There are no historical versions of the Privacy Policy.