Privacy Policy

At AppAcquire, we take your privacy seriously. This policy explains how we collect, use, and protect your information when you use our platform.

We collect information you provide directly to us, such as when you create an account, list an app, or contact us. This includes your name, email address, and any other information you choose to provide.

We use your information to provide our services, communicate with you, and improve our platform. We may also use it to send you updates about new listings and opportunities that match your interests.

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy. We may share information with service providers who assist us in operating our platform.

We implement appropriate security measures to protect your personal information. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Google user data

You can sign in with Google, and sellers can optionally connect Google Play Console, AdMob, and Firebase (Google Analytics) so buyers can see verified numbers on a listing. This section says exactly what we access, why, who it is shared with, how it is protected, and how long we keep it.

What we access, and why

• Sign in with Google: we receive your name, email address and profile picture to create and secure your AppAcquire account.
• Play Console: only when you invite our AppAcquire service account in Play Console and click I’ve invited AppAcquire, we read aggregate crash and user-count reports for the one app on your store link. If you also grant report and financial permissions and give us your reports bucket name, we read that app's install, rating, country and earnings reports. We do not receive your Google password or a JSON key.
• AdMob (read-only): only when you click Connect AdMob, we read your list of AdMob apps and their estimated earnings for the last 90 days, so you can pick the app you are selling.
• Firebase / Google Analytics (read-only): only when you click Connect Firebase Analytics, we read the names and store identifiers of your app data streams, and active users, new users and sessions for the last 56 days.

We use this data for one purpose: to show verified figures for the app you choose on your listing, and to confirm the connected app is the one you are selling. We never write to your Google accounts.

Who we share Google user data with

We do not sell Google user data, rent it, use it for advertising or profiling, or give it to data brokers. We do not use it to train AI models. It is disclosed only to the following, and only as described:

• Buyers and the public, as part of your listing. The aggregate figures you connect (for example revenue, active users, installs, ratings, and the app's name and store link) appear on your listing, which is the point of connecting. On a private listing the app's name and store link are shown only to buyers you approve after they accept a confidentiality agreement, while the aggregate figures and a range for audience size appear on the public teaser. We never publish user-level data, your other apps, or your Google account details.
• AppAcquire administrators, who can see the stored summary when they review your listing.
• Infrastructure providers that process data on our behalf, only to run the service, under their own terms and without any right to use it for their own purposes: Google Cloud (Firebase Authentication and Firestore, where your account and the stored summary are kept), Vercel (hosting and processing your connection requests), and Resend (sending account and notification emails to your address).
• Authorities, only if the law requires it, or to protect the rights and safety of AppAcquire and its users. If we are ever involved in a merger or sale, Google user data would remain subject to this policy and the Limited Use requirements below.

Nobody else receives Google user data from us. We do not transfer it to any other app, service or company.

How we protect it

• Minimal by design. We keep only a signed summary of aggregate numbers, the app name and its store identifier for the one app you select. Other apps and properties in your accounts, and any user-level or customer-level data, are never saved. While you choose which AdMob app to connect, the list of your apps is held briefly in a signed, short-lived token in your own browser, and is then discarded.
• No lasting access. AdMob and Firebase use read-only Google sign-in with online access only. We do not request or store a refresh token, and the access token is used for a few requests during that single connection, kept only in memory, never written to our database or logs, and then discarded. Play Console works through a service account you invite, which you can remove in Play Console at any time. Its private key is kept as an encrypted secret on our server and is never sent to a browser.
• Encryption. All traffic between you, AppAcquire and Google uses HTTPS (TLS). Stored data is encrypted at rest by Google Cloud.
• Tamper protection. Each summary is signed on our server, so it cannot be altered by anyone, including the seller, without the signature failing.
• Access controls. Stored data can only be read or written through our server and Firestore security rules. Private records, such as proof of ownership and a private listing's real name, can be read only by the owner, our administrators and buyers the owner approves. Administrator access is limited to a small team, uses accounts with an assigned role, and is used only to review listings, for security, or to comply with the law.
• If something goes wrong. If we learn of unauthorised access to Google user data, we will tell the people affected and the relevant authorities as the law requires.

How long we keep it, and how to delete it

We keep the connected summary for as long as your listing is live. It is deleted when you remove the listing or delete your account, which you can do yourself from Account → Settings. To remove a connected summary from your listing, or to ask us to delete anything we hold, email support@appacquire.com and we will act promptly and within 30 days. You can also revoke our access at any time at myaccount.google.com/permissions.

AppAcquire's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide the verification features you ask for, we do not allow humans to read it except for the reasons above, and we do not use it for advertising or sell it.

Buyer requests and alerts

When you create a buyer request or save a search, we store what you tell us: your budget, the platforms, categories and figures you want, when you plan to buy, and anything you add in free text. Only you and AppAcquire staff can see it. Sellers and other buyers cannot, and we never publish a request without your explicit consent.

We use your requests to show you matching listings, to email you alerts at the frequency you choose, and to contact you about apps that may fit. We may tell a seller that a buyer is interested in an app like theirs, but we never share who you are with a seller without asking you first. Staff may keep private notes on a request to help find you a deal.

If you delete a request, it leaves your dashboard and its alerts stop, but we keep a record of it so we understand demand on the marketplace. Deleting your account erases all your requests and the notes on them. Every alert email has a link to turn that request's alerts off.

Buyer profiles

If you fill in a buyer profile (a description of you or your company, your budget, when you plan to buy, and optionally a website), we show it to the sellers you message or ask for access, so they know who they are talking to. It is not shown publicly. A copy is kept with each conversation or access request as it was when you got in touch. You can edit your profile at any time, and deleting your account deletes it.

Buying and selling through escrow

When you make or accept an offer, we keep a record of the deal: the listing, the agreed price, each step and when it happened, and the documents you write and sign with the other party (the non-disclosure agreement, letter of intent and asset purchase agreement). Those documents include the legal names and addresses you enter. Only you, the other party and AppAcquire staff can see them.

When you sign a document by typing your name, we also record the time, your IP address, your browser (its user agent), and a fingerprint (hash) of the exact text you signed. We use these only as evidence of who signed what and when, if that is ever questioned.

Payments are handled by Escrow.com, not by us. To set up the transaction we send Escrow.com the email address you confirm for it, the other party's email address, the price and a description of the app. Escrow.com then verifies your identity and handles the money under its own privacy policy. We receive the status of the transaction from Escrow.com (for example, that the payment is secured), but never your bank or card details.

Deal records and signed documents are records of a contract, so we keep them after the deal ends and after you delete your account, for as long as we may need them for legal, tax or dispute purposes. Ask support@appacquire.com if you want a copy.

You have the right to access, update, or delete your personal information. You can delete your account and its data yourself from Account → Settings, or email support. If you tell us why you are leaving when you delete it, we keep that answer without your name or email, unless you choose to let us contact you about it. Messages you sent us through the contact form are kept so we can reply. You can also opt out of our communications at any time by clicking the unsubscribe link in our emails.

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.