QUINSTREET INC

Previous wording

We derive all of our revenue from the sale of online marketing and media services, which is still a developing industry that has undergone rapid and dramatic changes in its relatively short history and which is characterized by rapidly-changing Internet media and advertising technology, evolving industry standards, regulatory uncertainty, and changing visitor and client demands. In addition, our business model and product offerings continue to evolve. We believe that our implementation of our enhanced products and media strategies across our business is in a relatively early stage. As a result, we face risks and uncertainties such as but not limited to:

Current wording

We derive all of our revenue from the sale of online marketing and media services, which is still a developing industry that has undergone rapid and dramatic changes in its relatively short history and which is characterized by rapidly-changing online media and advertising technology, evolving industry standards, regulatory uncertainty, and changing visitor and client demands. In addition, our business model and product offerings continue to evolve. We believe that our implementation of our enhanced products and media strategies across our business in a relatively early stage. As a result, we face risks and uncertainties such as but not limited to:

Previous wording

our dependence on Internet search companies to attract Internet visitors;

Current wording

our dependence on Internet search companies to attract visitors to our owned and operated and our third-party publishers’ websites;

Previous wording

our ability to continually optimize our websites to allow Internet visitors to access our websites through mobile devices;

Current wording

our ability to continually optimize our websites for mobile devices;

Previous wording

our ability to expand the capabilities of our platform including deployment of artificial intelligence features in our product;

Current wording

our ability to expand the capabilities of our platform including deployment of artificial intelligence features in our products;

Previous wording

We rely on clients’ marketing spend on our owned and operated websites and on our network of third-party publisher and strategic partner websites. We have historically derived, and we expect to continue to derive, the majority of our revenue through the delivery of qualified inquiries such as clicks, leads, calls, applications and customers. One component of our platform that we use to generate client interest is our system of monetization tools, which is designed to match content with client offerings in a manner that optimizes revenue yield and end-user experience. Clients will reduce or stop spending marketing funds on our owned and operated websites or our third-party publisher and strategic partner websites if their investments do not generate marketing results and ultimately users or if we do not deliver advertisements in an appropriate and effective manner. The failure of our yield-optimized monetization technology to effectively match advertisements or client offerings with our content in a manner that results in increased revenue for our clients could have an adverse impact on our ability to maintain or increase our revenue from client marketing spend.

Current wording

We rely on clients’ marketing spend on our owned and operated websites and on our network of third-party publisher and strategic partner websites. We have historically derived, and we expect to continue to derive, the majority of our revenue through the delivery of qualified inquiries such as clicks, leads, calls, applications and customers. One component of our platform that we use to generate client interest is our system of monetization tools, which is designed to match content with client offerings in a manner that optimizes revenue yield and end-user experience. Clients will reduce or stop spending their marketing funds on our owned and operated websites or our third-party publisher and strategic partner websites if their investments do not generate marketing results and ultimately users or if we do not deliver advertisements in an appropriate and effective manner. The failure of our yield-optimized monetization technology to effectively match advertisements or client offerings with our content in a manner that results in increased revenue for our clients could have an adverse impact on our ability to maintain or increase our revenue from client marketing spend.

Previous wording

Even if our content is effectively matched with advertisements or client offerings, our current clients may not continue to place marketing spend or advertisements on our websites. For example, macroeconomic conditions such as an economic downturn, a recession in the United States or other countries, a public health crises such as the COVID-19 pandemic and geopolitical conflicts such as the Russia-Ukraine military conflict and the Israel-Hamas war have impacted and may continue to impact our clients’ marketing spend in the short-term and potentially in the long-term. If any of our clients decide not to continue to place marketing spend or advertising on our owned and operated websites or on our third-party publisher or strategic partner websites, we could experience a rapid decline in our revenue over a relatively short period of time. Any factors that limit the amount our clients are willing to and do spend on marketing or advertising with us, or to purchase marketing results from us, could have a material adverse effect on our business, financial condition, operating results and cash flows.

Current wording

Even if our content is effectively matched with advertisements or client offerings, our current clients may not continue to place marketing spend or advertisements on our websites or our third-party publisher or strategic partner websites. For example, macroeconomic conditions such as an economic downturn, a recession in the United States or other countries, a public health crises such as the COVID-19 pandemic and geopolitical conflicts such as the Russia-Ukraine military conflict and the Israel-Hamas war have impacted, and may continue to impact, our clients’ marketing spend in the short-term and potentially in the long-term. If any of our clients decide not to continue to place marketing spend or advertisements on our owned and operated websites or on our third-party publisher or strategic partner websites, we could experience a rapid decline in our revenue over a relatively short period of time. Any factors that limit the amount our clients are willing to and do spend on marketing or advertising with us, or to purchase marketing results from us, could have a material adverse effect on our business, financial condition, operating results and cash flows.

Previous wording

Furthermore, a substantial portion of our revenue is generated from a limited number of clients, including one client that accounted for 20% of our net revenue for fiscal year 2023. Our clients can generally terminate their contracts with us at any time or pause marketing spending without contract termination, and they do not have minimum spend requirements. Clients may also fail to renew their contracts or reduce their level of business with us, leading to lower revenue.

Current wording

Furthermore, a substantial portion of our revenue is generated from a limited number of clients, including two clients that accounted for 20% and 14% of our net revenue for three months ended September 30, 2024. Our clients can generally terminate their contracts with us at any time or pause marketing spending without contract termination, and they do not have minimum spend requirements. Clients may also fail to renew their contracts or reduce their level of business with us, leading to lower revenue.

Previous wording

We are exposed to data privacy and security risks, particularly given that we gather, transmit, store and otherwise process personal information. If we fail to maintain adequate safeguards to protect the security, confidentiality and integrity of personal information, including any failure to develop, implement and support our technology infrastructure and assessment processes, we may be in breach of our commitments to our clients and consumers. Unauthorized or accidental access to or disclosure or use of confidential or proprietary data (including personal information) in our network systems, including via ransomware attacks, may cause us to incur significant expenses and may negatively affect our reputation and business.

Current wording

We are exposed to data privacy and security risks, particularly given that we gather, transmit, store and otherwise process personal information and implement artificial intelligence technology in certain products. If we fail to maintain adequate safeguards to protect the security, confidentiality and integrity of personal information, including any failure to develop, implement and support our technology infrastructure and assessment processes, we may be in breach of our commitments to our clients and consumers. Unauthorized or accidental access to, or disclosure or use of, confidential or proprietary data (including personal information) in our network systems, including via ransomware attacks, may cause us to incur significant expenses and may negatively affect our reputation and business.

Previous wording

Nearly all of our products and services are web-based, and online performance marketing is data-driven. As a result, the amount of data stored on our servers is substantial. We gather, transmit, store and otherwise process confidential and proprietary information about our users and marketing and media partners, including personal information. This information may include social security numbers, credit scores, credit card information, and financial and health information, some of which is held, managed or otherwise processed by our third-party vendors. As a result, we are subject to certain contractual terms, including third-party security reviews, as well as federal, state and foreign laws and regulations designed to protect personal information. Complying with these contractual terms and various laws and regulations is expensive and could cause us to incur substantial additional costs or require us to change our business practices in a manner adverse to our business. In addition, cybersecurity incidents, cyber-attacks and other breaches have been occurring globally at a more frequent and severe level, and are evolving in nature and will likely continue to increase in frequency and severity in the future. Additionally, some actors are using artificial intelligence technology to launch more automated, targeted and coordinated attacks. Our existing security measures may not be successful in preventing security breaches, cyber-attacks or other similar incidents. As we grow our business, we expect to continue to invest in technology services, hardware and software. Creating the appropriate security support for our technology platforms is expensive and complex, and our execution could result in inefficiencies or operational failures and increased vulnerability to security breaches, cyber-attacks and other similar incidents. We may also make commitments to our clients regarding our security practices in connection with clients’ due diligence. If we do not adequately implement and enforce these security policies to the satisfaction of our clients, we could be in violation of our commitments to our clients and this could result in a loss of client confidence, damage to our reputation and loss of business. Despite our implementation of security measures and controls, our information technology and infrastructure are susceptible to circumvention by an internal party or third-party, such as electronic or physical computer break-ins, security breaches, attacks, malware, ransomware, viruses, social engineering (including phishing attacks), denial of service or information, fraud, employee error and other disruptions or similar incidents, including those perpetrated by criminals or nation state actors, that could result in, among other things, third parties gaining unauthorized access to our systems and data (including confidential, proprietary and personal information). Moreover, retaliatory acts by Russia in response to economic sanctions or other measures…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Nearly all of our products and services are web-based, and online performance marketing is data-driven. As a result, the amount of data stored on our servers is substantial. We gather, transmit, store and otherwise process confidential and proprietary information about our users and marketing and media partners, including personal information. This information may include social security numbers, credit scores, credit card information, and financial and health information, some of which is held, managed or otherwise processed by our third-party vendors. As a result, we are subject to certain contractual terms, including third-party security reviews, as well as federal, state and foreign laws and regulations designed to protect personal information. Complying with these contractual terms and various laws and regulations is expensive and could cause us to incur substantial additional costs or require us to change our business practices in a manner adverse to our business. In addition, cybersecurity incidents, cyber-attacks and other breaches have been occurring globally at a more frequent and severe level, are evolving in nature and will likely continue to increase in frequency and severity in the future. Additionally, some actors are using artificial intelligence technology to launch more automated, targeted and coordinated attacks. Our existing security measures may not be successful in preventing security breaches, cyber-attacks or other similar incidents. As we grow our business, we expect to continue to invest in technology services, hardware and software, such as our QRP product. Creating the appropriate security support for our technology platforms is expensive and complex, and our execution could result in inefficiencies or operational failures and increased vulnerability to security breaches, cyber-attacks and other similar incidents. We may also make commitments to our clients regarding our security practices in connection with clients’ due diligence. If we do not adequately implement and enforce these security policies to the satisfaction of our clients, we could be in violation of our commitments to our clients and this could result in a loss of client confidence, damage to our reputation and loss of business. Despite our implementation of security measures and controls, our information technology and infrastructure are susceptible to circumvention by an internal party or third-party, such as electronic or physical computer break-ins, security breaches, attacks, malware, ransomware, viruses, social engineering (including phishing attacks), denial of service or information, fraud, employee error and other disruptions or similar incidents, including those perpetrated by criminals or nation state actors, that could result in, among other things, third parties gaining unauthorized access to our systems and data (including confidential, proprietary and personal information). Moreover, retaliatory acts by Russia in response to economic sancti…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Negative changes in economic conditions and the regulatory environment have had in the past, and may in the future have, a material and adverse impact on our revenue, business and growth.

Current wording

Negative changes in the economic conditions and the regulatory environment have had in the past, and may in the future have, a material and adverse impact on our revenue, business and growth.

Previous wording

We, our third-party publishers’, and our clients’ businesses operate in highly regulated industries, subject to many laws and regulatory requirements, including federal, state, and local laws and regulations regarding unsolicited commercial email, telemarketing, search engines, Internet tracking technologies, comparison shopping platforms, direct marketing, data privacy and security, advertising and consumer protection, pricing, sweepstakes, promotions, intellectual property ownership and infringement, trade secrets, export of encryption technology, acceptable content and quality of goods, and taxation, among others. Each of our financial services and other client verticals is also subject to various laws and regulations, and our marketing activities on behalf of our clients are regulated. Many of these laws and regulations are frequently changing and can be subject to vagaries of interpretation and emphasis, and the extent and evolution of future regulation is uncertain. Keeping our business in compliance with existing laws and regulations or bringing our business into compliance with new laws and regulations, therefore, may be costly, affect our revenue and harm our financial results.

Current wording

We, our third-party publishers’, and our clients’ businesses operate in highly regulated industries, subject to many laws and regulatory requirements, including federal, state, and local laws and regulations regarding unsolicited commercial email, telemarketing, search engines, Internet tracking technologies, comparison shopping platforms, direct marketing, data privacy and security, advertising and consumer protection, pricing, sweepstakes, promotions, intellectual property ownership and infringement, trade secrets, use of artificial intelligence, export of encryption technology, acceptable content and quality of goods, and taxation, among others. Each of our financial services and other client verticals is also subject to various laws and regulations, and our marketing activities on behalf of our clients are regulated. Many of these laws and regulations are frequently changing and can be subject to vagaries of interpretation and emphasis, and the extent and evolution of future regulation is uncertain. Keeping our business in compliance with existing laws and regulations or bringing our business into compliance with new laws and regulations, therefore, may be costly, affect our revenue and harm our financial results.

Previous wording

For example, regulation in data privacy and security is rapidly evolving in the U.S. and internationally, including laws, rules and regulations applying to the solicitation, collection, retention, deletion, sharing, use and other processing of personal information. At the U.S. federal level, we are subject to the laws and regulations promulgated under the authority of the Federal Trade Commission, which regulates unfair or deceptive acts or practices (including with respect to data privacy and security). At the state level, we are subject to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”). The CCPA requires covered businesses to, among other things, provide disclosures to California residents about their data collection, use, sharing and processing practices and, with limited business exceptions, the CCPA affords such individuals various rights with respect to their personal information, including to request deletion of personal information collected about them and to opt-out of certain personal information selling and sharing practices. A number of other states have enacted, or are considering enacting, comprehensive data privacy laws. In addition, laws in all 50 U.S. states require businesses to provide notice under certain circumstances to consumers whose personal information has been disclosed as a result of a data breach. Further, foreign laws and regulations such as the EU General Data Protection Regulation (the “EU GDPR”), and the version thereof implemented into the laws of the United Kingdom following Brexit (the “UK GDPR”), may apply to our business and marketing activities that are offered to European Union and United Kingdom users. The EU GDPR and UK GDPR include a range of compliance obligations and penalties for non-compliance are significant. Although the substantive requirements of the UK GDPR are largely aligned with those of the EU GDPR, exposing us to burdens and risks comparable to the EU GDPR, that may change over time. Preparing for and complying with existing and new data privacy and security laws and regulations requires significant time and resources to ensure we store, use, share and otherwise process personal information in accordance with applicable laws and regulations. We also are, and in the future may become, subject to various other obligations relating to data privacy and security, including industry standards, external and internal policies, contracts and other obligations. Violations or alleged violations of laws and regulations, or any such obligations, by us, our third-party publishers, our clients or our third-party service providers on which we rely to process personal information on our behalf, could result in enforcement actions, litigation, damages, fines, criminal prosecution, unfavorable publicity, and restrictions on our ability to operate, any of which could have a material adverse effect on our business, financial condit…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Further, foreign laws and regulations such as the European Union General Data Protection Regulation (the “EU GDPR”), and the version thereof implemented into the laws of the United Kingdom (the “UK GDPR”), may apply to our business and marketing activities that are offered to European Union and United Kingdom users. The EU GDPR and UK GDPR include a range of compliance obligations and penalties for non-compliance are significant. Although the substantive requirements of the UK GDPR are largely aligned with those of the EU GDPR, exposing us to burdens and risks comparable to the EU GDPR, that may change over time. Preparing for and complying with existing and new data privacy and security laws and regulations requires significant time and resources to ensure we store, use, share and otherwise process personal information in accordance with applicable laws and regulations. We also are, and in the future may become, subject to various other obligations relating to data privacy and security, including industry standards, external and internal policies, contracts and other obligations. For example, numerous jurisdictions are considering laws and regulations that would impose additional data privacy and other compliance requirements on the use of Artificial Intelligence (“AI”) and could require us to adjust or limit our product offerings in such jurisdictions. Violations or alleged violations of laws and regulations, or any such obligations, by us, our third-party publishers, our clients or our third-party service providers on which we rely to process personal information on our behalf, could result in enforcement actions, litigation, damages, fines, criminal prosecution, unfavorable publicity, and restrictions on our ability to operate, any of which could have a material adverse effect on our business, financial condition, and results of operations. In addition, new laws or regulations (including amendments thereof or changes in enforcement of existing laws or regulations applicable to us or our clients) could affect the activities or strategies of us, our clients or our third-party service providers and, therefore, lead to reductions in their level of business with us or otherwise impact our business or our business model.

Previous wording

Additionally, in connection with our owned and our third-party publishers’ telemarketing campaigns to generate traffic for our clients, we are subject to various state and federal laws regulating telemarketing communications (including SMS or text messaging), including the federal Telephone Consumer Protection Act (the “TCPA”), which requires prior express written consent for certain types of telemarketing calls and adherence to “do-not-call” registry requirements which, in part, mandate that callers maintain and regularly update lists of consumers who have chosen not to be called and restrict calls to consumers who are on the national do-not-call list. As currently construed, the TCPA does not distinguish between voice and data, and, as such, text and SMS/MMS messages are also “calls” for the purpose of TCPA obligations and restrictions. For violations of the TCPA, the law provides for a private right of action under which a plaintiff may recover monetary damages of $500 for each call or text made in violation of the prohibitions on certain calls made using an artificial or pre-recorded voice or an automatic telephone dialing system and certain calls made to numbers properly registered on the federal “do-not-call” list. The TCPA and other similar state laws are subject to interpretations that may change. We regularly evaluate how this may apply to our business. Our efforts to comply with the TCPA have not had a material impact on traffic conversion rates. However, depending on future traffic and product mix, it could potentially have a material effect on our revenue and profitability, including increasing our and our clients’ exposure to enforcement actions, litigation and statutory damages. The TCPA regulations have resulted in an increase in individual and class action litigation against marketing companies for alleged TCPA violations. TCPA violations can result in significant financial penalties, including penalties or criminal fines imposed by the Federal Communications Commission (the “FCC”) or fines of up to $1,500 per violation imposed through private litigation or by state authorities. Additionally, we generate inquiries from users that provide a phone number, and a significant amount of revenue comes from calls made by our internal call centers as well as, in some cases, by third-party publishers’ call centers. We also purchase a portion of inquiry data from third-party publishers and cannot guarantee that these third-parties will comply with applicable laws and regulations. Any failure by us or the third-party publishers on which we rely for telemarketing, email marketing, and other performance marketing activities to adhere to or successfully implement appropriate processes and procedures in response to existing laws and regulations and changing regulatory requirements could result in legal and monetary liability, significant fines and penalties, or damage to our reputation in the marketplace, any of which could have a material advers…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Additionally, in connection with our owned and our third-party publishers’ telemarketing campaigns to generate traffic for our clients, we are subject to various state and federal laws regulating telemarketing communications (including SMS or text messaging), including the federal TCPA, which requires prior express written consent for certain types of telemarketing calls and adherence to “do-not-call” registry requirements which, in part, mandate that callers maintain and regularly update lists of consumers who have chosen not to be called and restrict calls to consumers who are on the national do-not-call list. As currently construed, the TCPA does not distinguish between voice and data, and, as such, text and SMS/MMS messages are also “calls” for the purpose of TCPA obligations and restrictions. For violations of the TCPA, the law provides for a private right of action under which a plaintiff may recover monetary damages of $500 for each call or text made in violation of the prohibitions on certain calls made using an artificial or pre-recorded voice or an automatic telephone dialing system and certain calls made to numbers properly registered on the federal “do-not-call” list. The TCPA and other similar state laws are subject to interpretations that may change. We regularly evaluate how this may apply to our business. Our efforts to comply with the TCPA have not had a material impact on traffic conversion rates. However, depending on future traffic and product mix, it could potentially have a material effect on our revenue and profitability, including increasing our and our clients’ exposure to enforcement actions, litigation and statutory damages. The TCPA regulations have resulted in an increase in individual and class action litigation against marketing companies for alleged TCPA violations. TCPA violations can result in significant financial penalties, including penalties or criminal fines imposed by the Federal Communications Commission (the “FCC”) or fines of up to $1,500 per violation imposed through private litigation or by state authorities. Additionally, we generate inquiries from users that provide a phone number, and a significant amount of revenue comes from calls made by our internal call centers as well as, in some cases, by third-party publishers’ call centers. We also purchase a portion of inquiry data from third-party publishers and cannot guarantee that these third-parties will comply with applicable laws and regulations. Any failure by us or the third-party publishers on which we rely for telemarketing, email marketing, and other performance marketing activities to adhere to or successfully implement appropriate processes and procedures in response to existing laws and regulations and changing regulatory requirements could result in legal and monetary liability, significant fines and penalties, or damage to our reputation in the marketplace, any of which could have a material adverse effect on our business, financial condit…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Changes in regulations, or the regulatory environment, applicable to us or our media sources, third party publishers or clients could also have a material adverse effect on our business. For example, in December 2023, the FCC adopted new rules to further restrict the transmission of text messages. One of these rules has been appealed and is being subjected to judicial review, but generally these new rules are scheduled to take effect over the course of 2024 and early 2025 to further restrict the transmission of text messages. The rules, among other things, amend TCPA consent requirements to prohibit the practice of allowing a single consumer consent to be grounds for multiple entities to deliver automated marketing calls and text messages, thereby requiring consent for such calls and text messages to be secured and provided on a “one-to-one” basis and requiring the consent to be “logically and topically associated” with the interaction that prompted the consent. Further, the new rules allow the FCC to “red flag” certain numbers, requiring mobile carriers to block texts from those numbers. The rules also codify that the national Do-Not-Call list protections apply to text messaging, making it illegal for marketing texts to be sent to numbers on the national Do-Not-Call registry absent an applicable exception. The FCC order adopting the new rules also encourages providers to make email-to-text messages an opt-in service for end users. Except for the “one-to-one” and “logically and topically associated” consent rule and the “red flag” blocking requirements, the new rules took effect on March 26, 2024. The “one-to-one” and “logically and topically associated” consent rule, which has been appealed, is scheduled to take effect on January 27, 2025, absent judicial intervention. The “red flag” blocking requirements are scheduled to take effect on July 24, 2024.

Current wording

Changes in regulations, or the regulatory environment, applicable to us or our media sources, third party publishers or clients could also have a material adverse effect on our business. For example, in December 2023, the FCC adopted new rules to further restrict the transmission of text messages. One of these rules has been appealed and is being subjected to judicial review, but generally these new rules are scheduled to take effect over the course of 2024 and early 2025 to further restrict the transmission of text messages. The rules, among other things, amend TCPA consent requirements to prohibit the practice of allowing a single consumer consent to be grounds for multiple entities to deliver automated marketing calls and text messages, thereby requiring consent for such calls and text messages to be secured and provided on a “one-to-one” basis and requiring the consent to be “logically and topically associated” with the interaction that prompted the consent. Further, the new rules allow the FCC to “red flag” certain numbers, requiring mobile carriers to block texts from those numbers. The rules also codify that the national Do-Not-Call list protections apply to text messaging, making it illegal for marketing texts to be sent to numbers on the national Do-Not-Call registry absent an applicable exception. The FCC order adopting the new rules also encourages providers to make email-to-text messages an opt-in service for end users. Except for the “one-to-one” and “logically and topically associated” consent rule and the “red flag” blocking requirements, the new rules took effect on March 26, 2024. The “one-to-one” and “logically and topically associated” consent rule, which has been appealed, is scheduled to take effect on January 27, 2025, absent judicial intervention. The “red flag” blocking requirements requiring mobile wireless providers to block texts from phone numbers on a “reasonable” do-not-originate list became effective on September 3, 2024 and a similar rule which requires mobile wireless providers to block texts from numbers identified by the FCC through its Enforcement Bureau became effective on July 24, 2024.

Previous wording

As another example, in February 2024, the FCC adopted new rules governing the ability of call and text message recipients to revoke consent previously given and thereby “opt-out” of receiving future calls and text messages from a sender. These new rules specify when a call or text message recipient’s consent must be considered revoked and create certain presumptions about other forms of consent revocation that a sender of a call or text message can rebut pursuant to a totality of circumstances test administered by the FCC or a court. They also require valid consent revocations to be honored within a reasonable period not to exceed ten business days from receipt of such request. Additionally, when a recipient has consented to several categories of text messages from a sender and opt-out of a text message from that sender, the new rules permit a sender to seek to clarify the scope of the opt-out request through a one-time opt-out confirmation text message. This rule permitting a sender to seek such clarification through a one-time opt-out confirmation text message took effect on April 4, 2024. The effective date for the remaining consent revocation rules has not yet been set.

Current wording

As another example, in February 2024, the FCC adopted new rules governing the ability of call and text message recipients to revoke consent previously given and thereby “opt-out” of receiving future calls and text messages from a sender. These new rules specify when a call or text message recipient’s consent must be considered revoked and create certain presumptions about other forms of consent revocation that a sender of a call or text message can rebut pursuant to a totality of circumstances test administered by the FCC or a court. They also require valid consent revocations to be honored within a reasonable period not to exceed ten business days from receipt of such request. Additionally, when a recipient has consented to several categories of text messages from a sender and opt-out of a text message from that sender, the new rules permit a sender to seek to clarify the scope of the opt-out request through a one-time opt-out confirmation text message. This rule permitting a sender to seek such clarification through a one-time opt-out confirmation text message took effect on April 4, 2024. The remaining consent revocation rules are expected to take effect on April 11, 2025.

Previous wording

The rules could have a material adverse impact on our media sources and our clients, especially smaller businesses, as they may not be able to continue to participate in, or may substantially reduce their participation in, the online advertising channel due to increased costs, technological compliance challenges and additional legal risks, including potential liabilities or claims relating to compliance. Decreased participation in online advertising by our media sources or clients as a result of the rules could have a material adverse impact on our business, results of operation and financial condition, as it may reduce the availability to us of qualified inquiries. Moreover, our business could be materially and adversely affected directly by the FCC’s rules, as we also generate a substantial portion of our revenue from our own operation of websites to generate qualified inquiries. While some of the rules become effective in 2025, recommendations for best practices from associations such as the Cellular Telecommunications Industry Association (“CTIA”) may encourage mobile wireless carriers to require senders of SMS or text messages to comply with the amended rules ahead of the effective date. In addition, wireline and mobile wireless carriers or their service providers could elect to impose additional requirements, including with respect to prerecorded calls and the use of short codes and ten-digit long codes to transmit or receive text messages, which could have the effect of hindering our ability to contact consumers, which could have a material adverse effect on our business. The scope and application of these rules and related industry practices may be subject to changes and uncertainties. The operation of or compliance with the rules and related industry practices may decrease our revenues or increase our costs. In addition, any failure by us or our media sources or clients to comply with such laws and practices may subject us to significant liabilities.

Current wording

The FCC rules could have a material adverse impact on our media sources and our clients, especially smaller businesses, as they may not be able to continue to participate in, or may substantially reduce their participation in, the online advertising channel due to increased costs, technological compliance challenges and additional legal risks, including potential liabilities or claims relating to compliance. Decreased participation in online advertising by our media sources or clients as a result of the rules could have a material adverse impact on our business, results of operation and financial condition, as it may reduce the availability to us of qualified inquiries. Moreover, our business could be materially and adversely affected directly by the FCC’s rules, as we also generate a substantial portion of our revenue from our own operation of websites to generate qualified inquiries. While some of the rules become effective in 2025, recommendations for best practices from associations such as the Cellular Telecommunications Industry Association (“CTIA”) may encourage mobile wireless carriers to require senders of SMS or text messages to comply with the amended rules ahead of the applicable effective dates. In addition, wireline and mobile wireless carriers or their service providers could elect to impose additional requirements, including with respect to prerecorded calls and the use of short codes and ten-digit long codes to transmit or receive text messages, which could have the effect of hindering our ability to contact consumers, which could have a material adverse effect on our business. The scope and application of these rules and related industry practices may be subject to changes and uncertainties. The operation of or compliance with the rules and related industry practices may decrease our revenues or increase our costs. In addition, any failure by us or our media sources or clients to comply with such laws and practices may subject us to significant liabilities.

Previous wording

The online media and marketing industry is characterized by rapidly changing standards, changing technologies, frequent new or enhanced product and service introductions and changing user and client demands. The introduction of new technologies and services embodying new technologies, including artificial intelligence and machine learning, and the emergence of new industry standards and practices could render our existing technologies and services obsolete and unmarketable or require unanticipated investments in technology. We continually make enhancements and other modifications to our proprietary technologies as well as our product and service offerings. This includes expansion into new categories (e.g., health insurance). Our product changes may contain design or performance defects that are not readily apparent. Expanded category offerings may experience issues as we launch new products and services. If our proprietary technologies or our new or enhanced products and services fail to achieve their intended purpose or are less effective than technologies or products and services used by our competitors, our business could be harmed.

Current wording

The online media and marketing industry is characterized by rapidly changing standards, changing technologies, frequent new or enhanced product and service introductions and changing user and client demands. The introduction of new technologies and services embodying new technologies, including artificial intelligence and machine learning, and the emergence of new industry standards and practices could render our existing technologies and services obsolete and unmarketable or require unanticipated investments in technology. We continually make enhancements and other modifications to our proprietary technologies as well as our product and service offerings. This includes expansion into new categories (e.g., health insurance). Our product changes may contain design or performance defects that are not readily apparent. Expanded category offerings may experience issues as we launch new products and services. If our proprietary technologies or our new or enhanced products and services fail to achieve their intended purpose or are less effective than the technologies or products and services used by our competitors, our business could be harmed.

Previous wording

In particular, we have incorporated and may continue to incorporate artificial intelligence and machine learning, (“AIML”), solutions into our platform, offerings, services, and features, including those based on large language models, and these applications may become more important to our operations or to our future growth over time. We expect to utilize AIML solutions to help drive future growth in our business, but there can be no assurance that we will realize the desired or anticipated benefits from AIML or properly implement or market our AIML solutions. Our competitors and other third parties may incorporate AIML into their products more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations. Additionally, our offerings based on AIML may expose us to additional lawsuits and regulatory investigations and subject us to legal liability as well as brand and reputational harm. For example, if the content, analyses, or recommendations that AIML applications assist in producing are or are alleged to be deficient, inaccurate, or biased, or infringe on third-party intellectual property rights, our business, financial condition, and results of operations may be adversely affected. Additionally, the use of AIML applications has resulted in, and may in the future result in, cybersecurity incidents that implicate the personal data of end users of such applications. Any such cybersecurity incidents related to our use of AIML applications could adversely affect our reputation and results of operations. AIML also presents emerging ethical issues and if our use of AI becomes controversial, we may experience brand or reputational harm.

Current wording

In particular, we have incorporated and may continue to incorporate artificial intelligence and machine learning, (“AIML”), solutions into our platform, offerings, services, and features, including those based on large language models, and these applications may become more important to our operations or to our future growth over time. We expect to utilize AIML solutions to help drive future growth in our business, but there can be no assurance that we will realize the desired or anticipated benefits from AIML or properly implement or market our AIML solutions. Our competitors and other third parties may incorporate AIML into their products more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations. Additionally, our offerings based on AIML may expose us to additional lawsuits and regulatory investigations and subject us to legal liability as well as brand and reputational harm. For example, if the content, analyses, or recommendations that AIML applications assist in producing are or are alleged to be deficient, inaccurate, or biased, or infringe on third-party intellectual property rights, our business, financial condition, and results of operations may be adversely affected. Regulatory uncertainty, including the lack of comprehensive federal legislation, a patchwork of existing and proposed frameworks, and emerging regulatory initiatives, may expose us to compliance challenges and uncertainties. Our failure to adapt to these changes could result in legal and reputational consequences including being required to adjust or limit our use of AI in certain jurisdictions to comply with new and evolving AI laws and regulations. Additionally, the use of AIML applications has resulted in, and may in the future result in, cybersecurity incidents that implicate the personal data of end users of such applications. Any such cybersecurity incidents related to our use of AIML applications could adversely affect our reputation and results of operations. AIML also presents emerging ethical issues and if our use of AI becomes controversial, we may experience brand or reputational harm.

Previous wording

changes in Internet search engine algorithms that affect our owned and operated and our third-party publishers’ websites’ ability to attract and retain Internet visitors; and

Current wording

changes in search engine algorithms that affect our owned and operated and our third-party publishers’ websites’ ability to attract and retain visitors; and

Previous wording

Visitor traffic to our online platforms in our lending and banking client verticals may change as interest rates change. A decrease in interest rates may lead to more consumers looking to lower their borrowing costs. These consumers may visit our websites, websites within or outside our publisher network, or our clients’ websites. To the extent consumers visit websites not in our network our lending client vertical may be adversely impacted. A decrease in interest rates may also reduce consumer demand for banking products. Interest rate increases may decrease demand for lending products but may not increase demand for banking products. Federal Reserve Board actions, regulations restricting the amount of interest and fees that may be charged to consumers, increased borrower default levels, tightening or uncertainty with respect to underwriting standards, and general market conditions affecting access to credit could also cause significant fluctuations in consumer behavior, as well as volatility in client spending and demand for media, each of which could have a material and adverse effect on our business.

Current wording

Visitor traffic to our online platforms in our personal loan, home services and banking client verticals may change as interest rates change. A decrease in interest rates may lead to more consumers looking to lower their borrowing costs. These consumers may visit our websites, websites within or outside our publisher network, or our clients’ websites. To the extent consumers visit websites outside of our network, our personal loan, home services and banking client verticals may be adversely impacted. A decrease in interest rates may also reduce consumer demand for banking products. Interest rate increases may decrease demand for personal loan and related products but may not increase demand for banking products. Federal Reserve Board actions, regulations restricting the amount of interest and fees that may be charged to consumers, increased borrower default levels, tightening or uncertainty with respect to underwriting standards, and general market conditions affecting access to credit could also cause significant fluctuations in consumer behavior, as well as volatility in client spending and demand for media, each of which could have a material and adverse effect on our business.

Previous wording

We generate a significant portion of our web visitors from online media that we source directly from our third-party publishers’ and strategic partners’ owned and operated websites, as well as indirectly from the affiliates of our third-party publishers and strategic partners. We also rely on third-party call centers and email marketers. Some of these third-parties, strategic partners, vendors and their respective affiliates are authorized to use our clients’ brands, subject to contractual restrictions. Any activity by third-party publishers, strategic partners, vendors or their respective affiliates which violates the marketing guidelines of our clients or that clients view as potentially damaging to their brands (e.g., search engine bidding on client trademarks), whether or not permitted by our contracts with our clients, could harm our relationship with the client and cause the client to terminate its relationship with us, resulting in a loss of revenue. Moreover, because we do not have a direct contractual relationship with the affiliates of our third-party publishers and strategic partners, we may not be able to monitor the compliance activity of such affiliates. If we are unable to cause our third-party publishers and strategic partners to monitor and enforce our clients’ contractual restrictions on such affiliates, our clients may terminate their relationships with us or decrease their marketing budgets with us. In addition, we may also face liability for any failure of our third-party publishers, strategic partners, vendors or their respective affiliates to comply with regulatory requirements, as further described in the risk factor beginning, “Negative changes in the economic conditions and the regulatory environment have had in the past, and may in the future have, a material and adverse impact on our revenue, business and growth.”

Current wording

We generate a significant portion of our web visitors from online media that we source directly from our third-party publishers’ and strategic partners’ owned and operated websites, as well as indirectly from the affiliates of our third-party publishers and strategic partners. We also rely on third-party call centers and email marketers. Some of these third-parties, strategic partners, vendors and their respective affiliates are authorized to use our clients’ brands including to gather, transmit, store or otherwise process our clients’ data in certain instances. Any activity by third-party publishers, strategic partners, vendors or their respective affiliates which violates the marketing guidelines of our clients or that clients view as potentially damaging to their brands (e.g., search engine bidding on client trademarks), whether or not permitted by our contracts with our clients, could harm our relationship with the client and cause the client to terminate its relationship with us, resulting in a loss of revenue. Moreover, because we do not have a direct contractual relationship with the affiliates of our third-party publishers and strategic partners, we may not be able to monitor the compliance activity of such affiliates. If we are unable to cause our third-party publishers and strategic partners to monitor and enforce our clients’ contractual restrictions on such affiliates, our clients may terminate their relationships with us or decrease their marketing budgets with us. In addition, we may also face liability for any failure of our third-party publishers, strategic partners, vendors or their respective affiliates to comply with regulatory requirements, as further described in the risk factor beginning, “Negative changes in the economic conditions and the regulatory environment have had in the past, and may in the future have, a material and adverse impact on our revenue, business and growth.”

Previous wording

Acquisitions have historically been, and continue to be, an important element of our overall corporate strategy and use of capital. In addition, we regularly review and assess strategic alternatives in the ordinary course of business, including potential acquisitions, investments or divestitures. These potential strategic alternatives may result in a wide array of potential strategic transactions that could be material to our financial condition and results of operations. For example, we acquired Modernize, Mayo Labs and FCE in fiscal year 2021, and acquired AmOne, CCM and MBT in fiscal year 2019. Furthermore, we divested our education client vertical in fiscal year 2021, and we divested our B2B client vertical, our businesses in Brazil consisting of QuinStreet Brasil Online Marketing e Midia Ltda (“QSB”)and VEMM, LLC (“VEMM”) along with its interests in EDB, and our mortgage client vertical in the second half of fiscal year 2020.

Current wording

Acquisitions have historically been, and continue to be, an important element of our overall corporate strategy and use of capital. In addition, we regularly review and assess strategic alternatives in the ordinary course of business, including potential acquisitions, investments or divestitures. These potential strategic alternatives may result in a wide array of potential strategic transactions that could be material to our financial condition and results of operations. For example, we acquired AquaVida in fiscal year 2024, Modernize, Mayo Labs and FCE in fiscal year 2021, and AmOne, CCM and MBT in fiscal year 2019. Furthermore, we divested our education client vertical in fiscal year 2021, and we divested our B2B client vertical, our businesses in Brazil consisting of QuinStreet Brasil Online Marketing e Midia Ltda (“QSB”)and VEMM, LLC (“VEMM”) along with its interests in EDB, and our mortgage client vertical in the second half of fiscal year 2020.

Previous wording

Our acquisitions or investments could also result in dilutive issuances of our equity securities, the incurrence of debt or deferred purchase price obligations, contingent liabilities, amortization expense, impairment of goodwill or restructuring charges, any of which could harm our financial condition or results. For example, under our acquisition agreement with MBT, the purchase consideration included $4.0 million in post-closing payments and an estimated fair value of contingent consideration of $1.5 million of which the contingent consideration was paid off in the third quarter of fiscal year 2020. Under our acquisition agreement with CCM, the purchase consideration included $7.5 million in post-closing payments and an estimated fair value of contingent consideration of $3.6 million. Under our acquisition agreement with AmOne, the purchase consideration included $8.0 million in post-closing payments. Under our acquisition agreement with Modernize, the purchase consideration included $27.5 million in post-closing payments. Under our acquisition agreement with Mayo Labs, the purchase consideration included $2.0 million in post-closing payments. Under our acquisition agreement with FCE, the purchase consideration included $4.0 million in post-closing payments and contingent consideration of up to an additional $9.0 million. Also, the anticipated benefit of many of our strategic transactions, including anticipated synergies, may not materialize. Employee retention may be adversely impacted as the result of acquisitions, and our ability to manage across multiple remote locations and business cultures could adversely affect the realization of anticipated benefits. In connection with a disposition of assets or a business, we may also agree to provide indemnification for certain potential liabilities or retain certain liabilities or obligations, which may adversely impact our financial condition or results.

Current wording

Our acquisitions or investments could also result in dilutive issuances of our equity securities, the incurrence of debt or deferred purchase price obligations, contingent liabilities, amortization expense, impairment of goodwill or restructuring charges, any of which could harm our financial condition or results. For example, under our acquisition agreement with AquaVida, the purchase consideration included $4.0 million in post-closing payments and an estimated fair value of contingent consideration of $2.1 million. Under our acquisition agreement with CCM, the purchase consideration included $7.5 million in post-closing payments and an estimated fair value of contingent consideration of $3.6 million. Under our acquisition agreement with Modernize, the purchase consideration included $27.5 million in post-closing payments. Also, the anticipated benefit of many of our strategic transactions, including anticipated synergies, may not materialize. Employee retention may be adversely impacted as the result of acquisitions, and our ability to manage across multiple remote locations and business cultures could adversely affect the realization of anticipated benefits. In connection with a disposition of assets or a business, we may also agree to provide indemnification for certain potential liabilities or retain certain liabilities or obligations, which may adversely impact our financial condition or results.

Previous wording

In addition to other factors that cause our results of operations to fluctuate, results are also subject to significant seasonal fluctuation. In particular, our quarters ending December 31 (our second fiscal quarter) are typically characterized by seasonal weakness. During that quarter, there is generally lower availability of media during the holiday period on a cost-effective basis and some of our clients have lower budgets. In our quarters ending March 31 (our third fiscal quarter), this trend generally reverses with better media availability and often new budgets at the beginning of the year for our clients with fiscal years ending December 31. Moreover, our lending clients’ businesses are subject to seasonality. For example, our clients that offer home services products are historically subject to seasonal trends. These trends reflect the general patterns of the home services industry, which typically peak in the spring and summer seasons. Other factors affecting our clients’ businesses include macro factors such as credit availability, the strength of the economy and employment. Any of the foregoing seasonal or cyclical trends, or the combination of them, may negatively impact our quarterly revenue and results of operations.

Current wording

In addition to other factors that cause our results of operations to fluctuate, results are also subject to significant seasonal fluctuation. In particular, our quarters ending December 31 (our second fiscal quarter) are typically characterized by seasonal weakness. During that quarter, there is generally lower availability of media during the holiday period on a cost-effective basis and some of our clients have lower budgets. In our quarters ending March 31 (our third fiscal quarter), this trend generally reverses with better media availability and often new budgets at the beginning of the year for our clients with fiscal years ending December 31. Moreover, our personal loans, home services and banking clients’ businesses are subject to seasonality. For example, our clients that offer home services products are historically subject to seasonal trends. Other factors affecting our clients’ businesses include macro factors such as credit availability, the strength of the economy and employment. Any of the foregoing seasonal or cyclical trends, or the combination of them, may negatively impact our quarterly revenue and results of operations.

Previous wording

Our board of directors canceled the prior stock repurchase program that commenced in July 2017 and authorized a new stock repurchase program allowing the repurchase of up to $40.0 million worth of common stock. As of March 31, 2024, approximately $16.8 million remained available for stock repurchases pursuant to the board authorization. The timing and actual number of shares repurchased will depend on a variety of factors including the price, cash availability and other market conditions. The stock repurchase program, authorized by our board of directors, does not obligate us to repurchase any specific dollar amount or to acquire any specific number of shares. The stock repurchase program could affect the price of our stock and increase volatility and may be suspended or terminated at any time, which may result in a decrease in the trading price of our stock. The existence of our stock repurchase program could also causes the price of our common stock to be higher than it would be in the absence of such a program and could potentially reduce the market liquidity for our common stock. Additionally, repurchases under our stock repurchase program will diminish our cash reserves. There can be no assurance that any stock repurchases will enhance stockholder value because the market price of our common stock may decline below the levels at which we repurchased such shares. Any failure to repurchase shares after we have announced our intention to do so may negatively impact our reputation and investor confidence in us and may negatively impact our stock price. Although our stock repurchase program is intended to enhance long-term stockholder value, short-term stock price fluctuations could reduce the program’s effectiveness.

Current wording

Our board of directors canceled the prior stock repurchase program that commenced in July 2017 and in April 2022 authorized a new stock repurchase program allowing the repurchase of up to $40.0 million worth of common stock. As of September 30, 2024, approximately $16.8 million remained available for stock repurchases pursuant to the board authorization. The timing and actual number of shares repurchased will depend on a variety of factors including the price, cash availability and other market conditions. The stock repurchase program, authorized by our board of directors, does not obligate us to repurchase any specific dollar amount or to acquire any specific number of shares. The stock repurchase program could affect the price of our stock and increase volatility and may be suspended or terminated at any time, which may result in a decrease in the trading price of our stock. The existence of our stock repurchase program could also cause the price of our common stock to be higher than it would be in the absence of such a program and could potentially reduce the market liquidity for our common stock. Additionally, repurchases under our stock repurchase program will diminish our cash reserves. There can be no assurance that any stock repurchases will enhance stockholder value because the market price of our common stock may decline below the levels at which we repurchased such shares. Any failure to repurchase shares after we have announced our intention to do so may negatively impact our reputation and investor confidence in us and may negatively impact our stock price. Although our stock repurchase program is intended to enhance long-term stockholder value, short-term stock price fluctuations could reduce the program’s effectiveness.