Privacy Policy

Last Updated: July 11, 2026

At GMVBest (hereinafter, "we", "us", "our", or the "Platform"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy describes how we collect, process, store, and protect your information as a provider of mobile measurement and marketing attribution systems, and how we handle end-user data on behalf of our advertiser clients (hereinafter, the "Clients").

1. Information We Collect

To provide accurate attribution, campaign measurement, and invalid traffic (IVT) prevention services to our Clients, we may collect and process the following information via SDKs, APIs, OAuth integrations, or tracking links integrated within the Clients' mobile apps or websites:

• Google User Data (Google APIs): When Clients link their Google Ads or Google Analytics accounts, our application accesses, collects, and processes specific Google Ads account data (including campaign structures, ad group details, impressions, clicks, spend, and conversion records) through Google APIs.
• Device Identifiers: Advertising identifiers such as IDFA (iOS), GAID (Google Advertising ID), OAID, or device-specific configurations for probabilistic matching (collected only under compliant system permission frameworks).
• Network & Hardware Specifications: IP address, mobile carrier, system language, time zone, device model, operating system version, and screen resolution.
• Ad Interaction & Conversion Actions: Ad clicks, impressions, application downloads, installations, activations, and custom in-app conversion events specified by Clients (e.g., registrations, purchases).

2. How We Use the Information and "Limited Use" Restrictions

We process the collected metadata strictly for the following legitimate business purposes:

• Marketing Attribution & Measurement: We will use your Google API data to provide you with the services you requested, specifically campaign attribution, marketing performance analysis, and ROI reporting. We will not sell your data to third parties, but we may share it with partners who help us provide our services under your direct configuration.
• Ad Fraud Guard: Utilizing automated heuristics to identify invalid interactions, click spamming, and device emulators to block fraudulent traffic claims.
• Reporting & ROI Dashboards: Compiling metrics to generate metrics such as ROAS, CPA, and LTV, allowing Clients to verify marketing effectiveness.
• System Security & Optimization: Safeguarding our server environments and maintaining stability against cyber threats or denial-of-service attempts.

Under no circumstances will information received from Google APIs be used for any purpose other than providing or improving user-facing features. We strictly prohibit the use of Google user data for: targeted advertising, selling to data brokers or information resellers, determining creditworthiness, lending purposes, or training artificial intelligence (AI) models.

3. Data Sharing, Transfers, & Disclosures

We do not sell end-user data. We share information only under the following scenarios:

• With Clients: Providing aggregated conversion dashboards and attribution logs to the respective advertising Client.
• With Media Partners: Transmitting conversion postbacks via Server-to-Server (S2S) callbacks (such as Google Ads API) at the Client's direction to feed their algorithmic optimization engines.
• Data Transfer & Disclosure Restrictions: We do not transfer or disclose your Google API user data to third parties for purposes other than the ones explicitly authorized by you to perform campaign attribution and optimization callback syncing. We never transfer Google API user data to ad networks or data syndicators.

4. Data Retention, Deletion, & Protection

• Google User Data Protection: Security procedures are in place to protect the confidentiality of your Google API data. We utilize encryption in transit (HTTPS/TLS) and at rest, alongside strict multi-layer physical and administrative access controls to safeguard your data from unauthorized access or disclosure.
• Data Retention Rules: We store your personal information and Google API data for a period of time that is consistent with our business purposes. We will retain your personal information for the length of time needed to fulfill the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law. When the data retention period expires, we will delete or destroy the data.
• Data Deletion Request: You may request for your data to be deleted by emailing contract@gmvbest.com. Upon receiving your request, we will permanently delete or anonymize your account profile, linked Google Ads OAuth permissions, and all associated measurement records within a reasonable timeframe.

5. Global Compliance & Privacy Frameworks

We design our system architecture to satisfy international data privacy regulations:

• GDPR (General Data Protection Regulation): We act as a Data Processor under GDPR. We handle EEA user data strictly on the instructions of our Clients (who act as Data Controllers), adhering to strict storage limitations.
• CCPA (California Consumer Privacy Act): We assist Clients in fulfilling opt-out requests for California residents.
• Privacy Sandbox & SKAN: We support aggregate-level measurement through native APIs (Apple SKAN 4.0 and Google Sandbox) to preserve user privacy.

6. Cookies Policy

Our website and measurement links may use cookies or browser storage to optimize usability or record marketing parameters. You can decline or clear cookies via your browser preferences. Restricting cookies may impact measurement precision. You can also modify your authorization status at any time via the Cookie Consent banner in the footer of our homepage.

7. Contact Us

If you have any questions regarding this Privacy Policy or wish to request data subject rights, please contact our Compliance Officer:

Email: contract@gmvbest.com