FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Advertising

Promo AI

MarketingOfficial website

Promo AI is a US AI driven advertising and video creative platform that personalises ads, tracks conversions and sets behavioural identifiers, requiring prior GDPR consent under Article 5(3) ePrivacy.

Block Promo AI until consentScan my site
Overview

What does Promo AI do?

What is Promo AI

Promo AI is a US based advertising and video creative platform that uses generative AI to produce, personalise and serve ad units across social, display and connected TV channels. It combines a creative engine with audience analytics, A/B testing and conversion tracking to optimise marketing campaigns. The platform deploys a JavaScript SDK and conversion pixels on customer websites, which sets identifiers and reports back behavioural events. Because the service personalises ads based on visitor behaviour, it is treated as advertising and audience profiling under GDPR and ePrivacy.

What data and cookies does Promo AI collect

The Promo AI tag sets cookies such as _promo_uid (visitor identifier), _promo_session (session correlation) and _promo_ad_clicks (creative engagement state). The platform receives the visitor IP, user agent, referrer, page URL, on site events (page view, video view, add to cart, purchase), creative identifiers and the campaign that drove the visit. When the customer connects their advertising accounts, additional signals like ad impressions, clicks and conversions are exchanged with Meta, Google, TikTok and other ad networks for optimisation.

GDPR and ePrivacy implications

Promo AI is used for advertising personalisation and conversion tracking, two activities that fall outside any consent exemption under Article 5(3) of the ePrivacy Directive. The CNIL, BfDI, AEPD and ICO require prior, freely given, specific and informed consent before any identifier is set or read. The legal basis under Article 6(1)(a) GDPR is consent. Profiling at this scale also calls for a DPIA, and the AI Act adds transparency obligations regarding AI generated creatives.

International data transfers

Promo AI is operated from the United States and processes data on US cloud infrastructure for AI generation and analytics. Transfers from the EEA rely on Standard Contractual Clauses and on EU US Data Privacy Framework certification where the entity is enrolled. A transfer impact assessment must evaluate the impact of US surveillance laws (FISA 702, EO 12333) on the visitor data shared with the platform. Document onward transfers to advertising partners in your record of processing activities.

Practical compliance steps

Block the Promo AI script and conversion pixels in your CMP until consent. Map the service under advertising or audience targeting, never strictly necessary. Sign SCCs, complete a TIA, run a DPIA covering the profiling and AI generation, and add Promo AI to your record of processing activities. For AI Act compliance, disclose to users that creatives shown to them are AI generated and document the data used to fine tune the models. Align retention rules across the website tag, the ad accounts and the analytics warehouse.

Compliance

Promo AI and the GDPR

Promo AI is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Article 6(1)(a) GDPR (consent) for advertising personalisation, behavioural targeting and conversion tracking. Article 5(3) ePrivacy Directive requires prior consent for non essential identifiers.
Risk level
high
Applicable regulations
GDPR, ePrivacy Directive (Article 5(3)), CNIL France, BfDI Germany, AEPD Spain, ICO UK PECR, AI Act considerations for automated content generation

Impact assessment (DPIA)

High risk DPIA recommended due to large scale advertising profiling, AI driven creative personalisation, behavioural conversion tracking, US transfers and potential AI Act transparency obligations.

Sample text for your banner

We use Promo AI (advertising personalisation and AI generated creative, US vendor) which sets identifiers on your device and shares signals with Promo AI in the United States to tailor ads. Without your consent these identifiers are not set or read.
Cookies and trackers

What Promo AI sets and contacts

Tracking method
JavaScript SDK, third party cookies, server side conversion tracking, AI driven creative personalisation pixels
Server location
United States and global cloud (AI generation infrastructure relies on US cloud providers)
Data transferred outside the EU
Promo AI processes data on US cloud infrastructure (typical AWS or GCP US regions for AI generation). Transfers from the EEA require Standard Contractual Clauses and a transfer impact assessment, supported by DPF certification when available.

Cookies set (4)

NameTypeDurationPurpose
_promo_uidthird_party12 monthsPersistent visitor identifier used to recognise returning visitors and tie them to advertising audiences.
_promo_sessionthird_partysessionSession correlation identifier that groups events for the current visit.
_promo_ad_clicksthird_party90 daysStores creative engagement state (impressions, clicks, completions) for AI driven optimisation.
_promo_convthird_party30 daysConversion attribution cookie used to credit a campaign or creative when a goal is completed.

Third-party domains contacted (3)

  • promo.com
  • cdn.promo.com
  • app.promo.com
Questions

Frequently asked questions about Promo AI

Can't find your question? Write to us, we answer fast.

Which cookies does Promo AI set?

Promo AI typically sets _promo_uid (visitor identifier), _promo_session (session correlation) and _promo_ad_clicks (creative engagement state). Conversion pixels can also write campaign or click identifiers depending on the connected ad networks.

Is consent required to use Promo AI in the EU?

Yes. Promo AI is used for advertising and audience profiling, so it falls outside the strictly necessary exemption of Article 5(3) of the ePrivacy Directive. Prior, freely given, specific and informed consent is mandatory and the script must be blocked by a CMP until acceptance.

What is the legal basis for processing through Promo AI?

Article 6(1)(a) GDPR (consent) is the only realistic basis for cross site advertising profiling and conversion tracking. Legitimate interest cannot bypass the ePrivacy consent requirement. AI generated creative also calls for AI Act transparency notices.

Does Promo AI transfer data to the United States?

Yes. Promo AI runs on US cloud infrastructure for AI generation and analytics. Transfers rely on Standard Contractual Clauses, supplemented by EU US Data Privacy Framework certification when applicable, and a transfer impact assessment.

Do I need a DPIA for Promo AI?

A DPIA is strongly recommended. The processing involves systematic, large scale advertising profiling, AI driven creative personalisation, behavioural conversion tracking and US transfers, all of which trigger high risk indicators in WP29 and EDPB guidelines. AI Act conformity assessments may also apply.

How do I implement Promo AI in a GDPR compliant way?

Block the Promo AI script and conversion pixels in your CMP until consent. Map the service under advertising or audience targeting, never strictly necessary. Sign SCCs, complete a TIA, run a DPIA, document Promo AI in your record of processing activities, and add an AI generated content disclosure for AI Act compliance.

Are there alternatives to Promo AI?

European AI driven creative platforms include Smartly.io (Finland, recently acquired), Creatopy (Romania), Pencil (UK) and Adcreative.ai (UK based but with US infrastructure). For privacy first measurement, Piwik PRO and Matomo offer European hosted analytics that pair well with creative tools.

How should I update my cookie policy for Promo AI?

List the Promo AI cookies (_promo_uid, _promo_session, _promo_ad_clicks), state the advertising and AI driven personalisation purpose, mention the data shared (events, creative IDs, IP, user agent), name the Promo AI vendor with US transfers under SCCs, link to the consent withdrawal mechanism and the AI generated content disclosure.

Same category

More services: Advertising

See the whole category

Rakuten

Rakuten is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Rakuten supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Rakuten ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Marketing

Yieldlab

Yieldlab is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Yieldlab provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Yieldlab helps deliver the right message to the right audience at the right time.

Marketing

Sonobi

Sonobi is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Sonobi enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Sonobi empowers marketing teams to achieve measurable growth.

Marketing

Enlistly

Enlistly is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Enlistly supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Enlistly ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Marketing

Taboola

Taboola is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Taboola enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Taboola empowers marketing teams to achieve measurable growth.

Marketing

PagineGialle

PagineGialle is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. PagineGialle supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, PagineGialle ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Marketing

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site