Security Document 001

GLOBAL DATA GOVERNANCE PROTOCOL.

ESTABLISHED 2024 // REVISED: MARCH 20, 2026

1.0 Executive Summary

At Huluplex Performance Systems ("the Agency", "We", "Us"), data is not just information; it is the raw material used to engineer market dominance for our clients. This document outlines our rigorous commitment to the protection, integrity, and ethical utilization of all digital signals processed through our performance labs.

Our philosophy is "Privacy by Design." Every scaling strategy we deploy on Meta, TikTok, or Google is first audited for compliance with global privacy regulations, ensuring that performance never comes at the cost of consumer trust.

2.0 Data Acquisition Vectors

Huluplex acts as a Data Processor on behalf of its clients. We collect information through three primary vectors to facilitate high-precision advertising campaigns:

Category	Type of Data Collected	Legal Basis
Direct Performance	Names, Email Addresses, Shipping Coordinates, Transactional Values.	Contractual Necessity
Algorithmic Signals	IP Addresses, Browser Fingerprints, Clickstream Data, Device Identifiers.	Legitimate Interest
CRM Integration	Customer Lifetime Value (LTV), Purchase Frequency, Churn Probability.	Explicit Consent

3.0 Cookies & Tracking Assets

We utilize advanced tracking architectures to bypass browser-based signal loss. This includes but is not limited to:

The Huluplex CAPI Bridge

Unlike standard cookies, our server-side Conversions API (CAPI) transmits data directly from your server to the advertising platform. This ensures 100% signal accuracy while respecting user opt-out preferences at the OS level (iOS 14.5+ compliance).

Clients are required to maintain a clear "Cookie Banner" on their storefronts as per our Master Service Agreement. Huluplex is not liable for the failure of a client to implement appropriate consent mechanisms on their own domains.

5.0 Encryption Architectures

Security is the foundation of our engineering lab. All data processed within the Huluplex ecosystem is protected by the following protocols:

AES-256 Bit Encryption: All data at rest in our internal scaling dashboards is encrypted using military-grade standards.
TLS 1.3 Transmission: Every byte of data moved between our labs and ad networks is tunneled through secure, encrypted channels.
Access Control: We operate on a "Principle of Least Privilege" (PoLP). Only assigned Media Buyers and Lead Strategists have access to client-specific raw data.

7.0 Global Compliance (GDPR/CCPA/VCDPA)

Huluplex provides a unified framework for global compliance. Depending on your jurisdiction, you have specific rights regarding your data:

7.1 European Union (GDPR)

You have the right to portability, rectification, and the "Right to be Forgotten." Any request for data erasure will be executed within 30 days across all our internal databases and third-party partner integrations (e.g., Triple Whale, Hyros).

7.2 California (CCPA)

We do not "Sell" your personal information. We only "Share" it for advertising optimization purposes as defined by the CCPA. Residents of California may request a disclosure of all data categories we have processed in the preceding 12 months.

Warning: Unauthorized access to Huluplex Data Governance protocols is strictly prohibited and monitored by 24/7 security systems.

8.0 Governance Officer

For any inquiries regarding data integrity or to exercise your privacy rights, contact our Data Protection Office:

security@huluplex.com