Privacy

Last updated: October 14, 2026

GoMarketMe Technology, LLC ("GoMarketMe," "we," "us," or "our") provides a mobile app affiliate marketing platform. This Privacy Policy explains how we handle information through gomarketme.co, gomarketme.net, and related SDKs, APIs, dashboards, campaign links, referral tools, documentation, and services.

It applies to developers, marketers, affiliates, agencies, business customers, visitors, and users of apps that integrate our SDK, as relevant to their interaction with GoMarketMe. This policy provides information about processing; it is not a request for consent to every use described below.

1. Our role

GoMarketMe acts as controller for personal information it uses to manage its own accounts, billing, website, communications, and business relationships.

When GoMarketMe processes app-user personal data on an app developer's behalf through GoMarketMe SDK version 6.0.2 and later with Attribution Method set to Referral Codes, the app developer is the controller and GoMarketMe is its processor. Our Data Processing Agreement ("DPA") governs that processing, including instructions, security, retention, deletion, and subprocessors.

App developers are responsible for explaining their own app's data practices and establishing the lawful basis and any required consent for processing. Their privacy policies apply to their own collection and use of app-user information.

2. Account, website, and platform information

This section describes account, website, and platform information. SDK data practices are described separately in Section 3.

Depending on your use of the services, we may collect:

  • Information you provide, such as your name, email, telephone number, company, role, address, app details, campaign information, affiliate details, support requests, and communications.
  • Account and operational records, such as identifiers, settings, permissions, login activity, campaign configuration, referral materials, platform activity, and compliance records.
  • Technical and usage information, such as browser and device information, operating system, access times, referring pages, authentication events, session identifiers, error reports, and security logs. For the marketing website, this may also include IP addresses and other network information.
  • Campaign and referral information, such as app, campaign and affiliate identifiers, referral codes, links, QR codes, click or scan events, timestamps, and eligible installation, purchase, subscription, or conversion records.

The GoMarketMe platform at gomarketme.net does not log or store users' IP addresses.

We may receive relevant information from app developers, affiliates, connected integrations, payment and authentication providers, support and infrastructure providers, business partners, and public sources, where lawful and relevant to the service being provided.

Information needed to create an account, authenticate access, provide a requested service, or meet a legal requirement may be necessary for those purposes. If you do not provide it, we may be unable to provide the relevant feature. Other information you choose to provide may be optional.

3. GoMarketMe SDK and app-user data

This section describes referral-code and affiliate-link attribution and related transaction processing. The specific Referral Codes statements below apply to GoMarketMe SDK version 6.0.2 and later with Attribution Method set to Referral Codes.

In the Referral Codes configuration described below, the SDK handles referral, attribution, and transaction information. It does not collect app users' names, email addresses, telephone numbers, contacts, messages, photos, precise location, health records, payment card details, or Apple or Google account credentials through the SDK.

Referral and transaction data may constitute personal data under applicable law.

Referral Codes

With Attribution Method set to "Referral Codes," a referral code submitted within the app provides the attribution signal and associates eligible activity with an affiliate or partner.

For SDK version 6.0.2 and later using this method, data covered by the DPA includes referral codes, app, campaign and affiliate identifiers, purchase and subscription records, transaction identifiers, and timestamps.

With Attribution Method set to Referral Codes, GoMarketMe SDK version 6.0.2 and later does not use fingerprinting or collect device information or network information. It does not collect IDFV, Android ID, or IDFA and does not request App Tracking Transparency (ATT) permission.

Affiliate links

GoMarketMe also supports affiliate-link attribution. When affiliate links are used, GoMarketMe processes referral and campaign information to associate eligible activity with an affiliate and provide reports. This may include link, app, campaign and affiliate references, click events, timestamps, and related attribution and transaction records.

GoMarketMe SDK version 6.0.2 and later does not collect IDFV or Android ID. The DPA described in this policy applies to the Referral Codes configuration stated in Section 1.

Transaction verification and reporting

GoMarketMe sends relevant purchase and subscription information directly to Apple or Google for server-side verification. Verified records are evaluated for eligible attribution, commission calculation, reporting, and fraud prevention.

SDK data covered by the DPA is processed on the app developer's documented instructions. We do not sell SDK data or use it for unrelated advertising or profiles across unrelated apps and websites.

App privacy and sensitive app categories

Developers remain responsible for assessing their app's own tracking and consent requirements, including other technologies they use. The SDK exclusions for version 6.0.2 and later with Referral Codes are stated above.

Integrating GoMarketMe into a health, fitness, wellness, or similar app does not give the SDK access to that app's health records. Developers remain responsible for whether their particular use of the service is appropriate under laws applicable to their app and users.

4. How we use information

For information we process as controller, purposes may include:

  • Setting up accounts, authenticating users, and managing permissions.
  • Providing and supporting the requested platform features, campaigns, reports, and business relationships.
  • Managing subscriptions, payments, invoices, and other billing records.
  • Answering requests, providing onboarding and support, and sending service communications.
  • Maintaining and improving the website and platform, diagnosing errors, and understanding usage.
  • Detecting fraud, abuse, unauthorized access, false accounts, and attempts to evade restrictions.
  • Enforcing agreements, handling disputes, protecting legal rights, and complying with law.
  • Sending marketing communications where permitted, subject to applicable consent and opt-out requirements.

For app-user data covered by the DPA, the permitted purposes and instructions are those stated in that agreement. The broader controller purposes above do not independently authorize unrelated use of covered SDK data.

5. Lawful bases

Where the GDPR or UK GDPR applies and we act as controller, the applicable basis depends on the purpose:

  • Contract: information necessary to provide services under an agreement with you, administer your account, or respond to a request to enter into an agreement.
  • Legitimate interests: running and securing a business platform, preventing fraud and misuse, supporting business contacts, improving service performance, and protecting legal rights, where those interests are not overridden by your rights and interests.
  • Legal obligation: information needed to meet applicable tax, accounting, regulatory, and other legal duties.
  • Consent: processing for which applicable law requires consent, including relevant non-essential marketing website cookies or marketing activities. Consent may be withdrawn without affecting the lawfulness of earlier processing.

For covered SDK data, the app developer determines the lawful basis as controller, and GoMarketMe processes that data on its instructions.

6. Sharing information

We disclose information only as relevant to the applicable service, purpose, instructions, or legal requirement.

Hosting and storage. GoMarketMe uses Amazon Web Services (AWS) for hosting and data storage. Data stored by GoMarketMe in its AWS infrastructure is stored in region us-west-2, United States of America. AWS is a subprocessor for personal data covered by the DPA.

Transaction verification. Relevant transaction information is sent to Apple or Google to verify purchases and subscriptions.

Billing. Stripe processes payments for GoMarketMe services. We do not store full payment card numbers. We may receive payment status, billing details, transaction identifiers, and information needed to manage invoices, subscriptions, and refunds. This platform billing is separate from app-user SDK transaction verification.

Other service providers. Providers assisting with authentication, support, communications, analytics, monitoring, or security may process relevant account, website, or platform information. Any provider engaged to process data covered by the DPA is subject to its subprocessor requirements.

Campaign participants. Authorized developers, affiliates, agencies, and campaign administrators may receive relevant referral, conversion, purchase, subscription, commission, and performance reports needed for their campaigns. For covered SDK data, sharing follows the Customer's instructions and authorized campaign configuration.

Legal and business matters. We may disclose information to meet lawful obligations, respond to legal process, address fraud or security issues, or protect legal rights, subject to applicable law. Information may also be involved in a merger, acquisition, financing, or business transfer. For covered SDK data, these disclosures remain subject to the DPA and applicable legal requirements.

At your direction. We may disclose information where you direct us to do so or provide valid consent when required.

7. Marketing website cookies

The GoMarketMe platform at gomarketme.net does not use cookies.

Our marketing website at gomarketme.co may use cookies and similar technologies for site functionality, remembering preferences, and analytics.

Where consent is legally required for non-essential marketing website technologies, those technologies will be used only with that consent. You can manage available preferences through the marketing website's consent controls and your browser. Blocking necessary storage may affect website functionality.

Accepting the Terms or continuing to browse does not replace any separately required consent. These marketing website practices are separate from the SDK practices described in Section 3.

8. Security

We use administrative, technical, and organizational safeguards appropriate to the information and risks involved. These include appropriate access restrictions, authentication, protection of information during transmission and storage, and security monitoring and assessment.

No system provides a guarantee of perfect security. This does not reduce obligations undertaken in the DPA or imposed by applicable law.

9. Retention and deletion

You may request deletion at any time by contacting legal@gomarketme.co. Requests concerning data processed on an app developer's behalf will be handled in coordination with that developer and applicable law.

Covered SDK data. GoMarketMe retains this data only as needed for the instructed services. When those services end, deletion follows the DPA, including any lawful Customer instruction to receive a copy before deletion and the legal retention exceptions described in that agreement. Backups awaiting deletion remain protected, are placed beyond use pending deletion, and are deleted through the regular backup deletion cycle.

Information processed as controller. Account, billing, support, website, and business records are retained for the time reasonably needed for their purpose. Retention depends on the service relationship, the record's continuing relevance, applicable accounting or legal requirements, security needs, and the duration of a relevant dispute or legal claim. We delete or anonymize information when its retention is no longer needed for a lawful purpose.

The controller retention criteria do not override the DPA's limits for covered SDK data.

10. Your rights and choices

Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information; restrict or object to processing; withdraw consent; and exercise applicable rights concerning automated decisions, sale, sharing, or targeted advertising.

You may object to direct marketing and unsubscribe using the instructions in marketing communications. Necessary account, security, billing, and service notices may still be sent.

Contact legal@gomarketme.co to make a request. We may need appropriate information to verify the request and will respond within applicable legal time limits. Rights may be subject to lawful limitations. Where applicable law provides a right to appeal a decision on a request, you may contact the same address to appeal.

For data processed on an app developer's behalf, contact that developer first. If we receive a request about covered SDK data, we will forward it to the developer and assist as required by the DPA and applicable law. We will not require additional information solely to identify an individual when applicable law does not require us to do so.

You may complain to the relevant data protection authority. People in the EEA may contact their local supervisory authority; people in the United Kingdom may contact the Information Commissioner's Office.

11. United States storage and international transfers

GoMarketMe is based in Hawaii, United States of America. Data stored by GoMarketMe in AWS is stored in us-west-2, United States of America. Using the services from another country may therefore involve an international transfer.

Apple, Google, Stripe, and other recipients process the information provided to them under the arrangements applicable to their respective roles. The location of GoMarketMe's own storage does not describe every recipient's processing locations.

International transfers will comply with applicable data protection law and use legally required safeguards.

You may request information about applicable safeguards, or a copy where legally available, by contacting legal@gomarketme.co. Any permitted redactions will protect confidential information without preventing the exercise of applicable rights.

12. Children

GoMarketMe's services are not intended for children under 13, and we do not knowingly collect personal information from children under 13. If we learn that such information has been collected unlawfully, we will take appropriate steps to delete it or address it as required by law.

App developers remain responsible for age restrictions, parental consent requirements, and other rules applicable to their own apps and users.

13. Third-party websites and services

Links, app stores, payment services, and integrations may lead to services operated by other organizations. Their privacy notices describe their own processing. Our responsibilities for the providers we engage remain subject to applicable law and, for covered SDK data, the DPA.

14. Changes to this policy

We may update this policy when our services, practices, or legal requirements change. We will update the date above and provide appropriate notice of material changes. Where a change requires consent under applicable law, we will obtain that consent separately.

15. Contact

GoMarketMe Technology, LLC
330 Saratoga Rd, Suite 8654
Honolulu, HI 96830
USA

Privacy and legal contact: legal@gomarketme.co