Privacy policy

Scope and who we are

This Privacy Policy explains how Cost2Action Media (“Cost2Action,” “we,” “our,” or “us”) collects, uses, discloses and protects personal information when you visit cost2action.com, contact us, apply to become a partner, access our affiliate or advertiser platforms, or otherwise interact with our performance marketing, media buying, development and related services.

Depending on the service and agreement, Cost2Action may act as an independent controller of personal information or process information on behalf of an advertiser, agency, publisher, app developer or other partner. Where a partner determines the purpose and means of processing, its privacy notice and contract may also apply.

Information we collect

Information you provide

This may include your name, work email, telephone number, company, job title, business address, partner type, payment and tax information, account credentials, campaign requirements, traffic information and the contents of your communications.

Information collected automatically

When you use our site or services, we may collect IP address, browser and device type, operating system, approximate location, referring URL, page activity, timestamps, cookie identifiers, advertising identifiers and security logs.

Campaign and attribution information

Depending on the campaign, we may receive click identifiers, device or advertising identifiers, event data, postback data, conversion status, validation results, source and placement data, app events and fraud or quality signals from partners, measurement providers and authorized traffic sources.

How we use information

• Operate, secure and improve our websites, platforms and services.
• Evaluate partner applications and manage advertiser, agency, publisher, affiliate and developer relationships.
• Set up tracking, attribute events, validate conversions, detect fraud and assess traffic quality.
• Optimize campaigns, reconcile reporting, calculate payments and resolve discrepancies.
• Respond to inquiries, provide support and send service or partnership communications.
• Comply with contracts, tax, accounting, legal and regulatory obligations.
• Protect our rights, partners, users and systems from misuse or unlawful activity.

Where applicable, we rely on consent, performance of a contract, compliance with legal obligations and legitimate interests such as operating secure services, preventing fraud and developing business relationships. You may withdraw consent where consent is the applicable basis.

How we disclose information

We may disclose information to advertisers, agencies, publishers, affiliates, app owners and developers where necessary to deliver, validate and report a campaign; to MMPs, attribution providers, fraud-detection providers, hosting, analytics, communications, payment and professional service providers; and to authorities or other parties when required by law or needed to protect rights and security.

We may also disclose information as part of a merger, financing, acquisition, restructuring or sale of assets, subject to appropriate confidentiality and legal requirements. We require service providers to use personal information only for authorized purposes and to protect it appropriately.

Cookies, attribution and measurement

Our websites and campaign services may use essential cookies, local storage, tracking pixels, postbacks and similar technologies to maintain security, remember preferences, measure traffic, attribute conversions and understand performance. Non-essential analytics or advertising technologies should be activated only according to applicable consent and notice requirements.

On cost2action.com, necessary storage is used to remember your privacy selection. Analytics and marketing categories remain disabled unless you choose to allow them through our cookie manager. You can reject non-essential cookies or change your selection at any time using the “Cookie settings” control displayed on the website.

Campaign measurement may involve MMP-compatible workflows such as those used with AppsFlyer, Adjust, Kochava, Singular, Branch, Tenjin, AppTrove, AppMetrica, Airbridge or comparable providers. Those providers process data under their own terms and applicable partner agreements. You can control cookies through available consent tools and browser settings, although blocking some technologies may affect functionality or attribution.

Where a supported browser sends a Global Privacy Control (“GPC”) signal, we treat it as a browser-level request to opt out of sale or sharing for cross-context behavioral advertising and keep marketing cookies disabled. See Do Not Sell or Share My Personal Information.

Retention, international transfers and security

We retain personal information only for as long as reasonably necessary for the purposes described above, including the duration of a partner relationship and applicable reconciliation, audit, tax, dispute, fraud-prevention and legal periods. Retention depends on the type of information, contractual requirements, sensitivity and risk.

Cost2Action and its partners may process information in India, the United States and other countries that may have different data-protection laws. Where required, we use contractual or other recognized safeguards for international transfers.

We use reasonable administrative, technical and organizational measures intended to protect personal information. No transmission or storage method is completely secure, and we cannot guarantee absolute security.

Your privacy rights

Depending on where you live and the applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, and information about how personal information is used or disclosed. You may also have the right to opt out of certain sale, sharing, profiling or targeted advertising and to appeal a decision concerning a request.

California residents may have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information and receive non-discriminatory treatment for exercising their rights. We may need to verify your identity and authority before completing a request. Authorized agents may submit requests where permitted by law. Review our California Privacy Notice and privacy-choice page for additional disclosures and request methods.

You may also lodge a complaint with the data-protection or privacy regulator in your jurisdiction. We will not discriminate against you for exercising an applicable privacy right.

Children and external services

Our business services are not directed to children, and we do not knowingly collect personal information from children under 13 or the higher minimum age required by applicable law. Our sites may link to external services that have their own privacy practices; we encourage you to review those notices.

Changes to this policy

We may update this policy to reflect changes in our services, technology, agreements or legal requirements. We will post the updated version here and change the effective date. Where required, we will provide additional notice.