Quality Media Wealth Privacy Policy
Effective date: 27 October 2026 · Last updated: 27 October 2026
This Privacy Policy explains how Geldman Group LLC ("we", "us", "our") collects, uses, stores, shares and deletes information when you use Quality Media Wealth (QMW) at qmw.io (the "Service"). Quality Media Wealth is a marketplace where people buy and sell YouTube channels, and where a seller confirms the channel's real numbers by connecting it to Google with read-only access.
Data controller: Geldman Group LLC, a Wyoming limited liability company, 30 N Gould St, Sheridan, WY 82801, USA. Contact: info@geldmangroup.com.
Representatives: we are appointing a representative in the European Union (Article 27 GDPR and Article 13 of the Digital Services Act) and in the United Kingdom (Article 27 UK GDPR). Their names and addresses will be published here as soon as they are appointed. Until then, write to info@geldmangroup.com.
1. Short version
- We collect what you type into the forms (a buyer's email and budget, a seller's asking price) and basic technical data (IP address, country, language).
- A seller does not type an email address: we take it from the Google account the seller uses to verify the channel.
- If you are a seller and you choose Verify with Google, we read your channel's data from YouTube with read-only permission. We cannot upload, edit or delete anything on your channel.
- With your separate consent, we show your channel's verified revenue and views without the channel's name or link to registered buyers. The name and link are shown only to a buyer you approve.
- Our team receives every request in full through our internal Telegram notifications.
- We never sell your data and never use it for advertising.
- You can revoke our Google access at any time at https://security.google.com/settings/security/permissions and ask us to delete your data at info@geldmangroup.com.
2. Information we collect
2.1 Information you give us
| Who | What | Why |
|---|---|---|
| Buyer | Email address, budget, currency, language | To send you channels that fit your budget and to manage your membership |
| Seller | Asking price, currency, language. The email address comes from your Google account when you verify (section 2.3) | To review and list your channel and to contact you about buyers |
| Anyone | Messages you send us | To answer you |
| Paid members | Name and billing details are collected by our payment provider; we receive only confirmation of payment, the plan and the last four digits of the card | To provide and renew the membership |
A buyer must provide an email address and a seller must verify with Google; without this we cannot contact you.
2.2 Information we collect automatically
When you use the Service, our hosting provider processes your IP address, approximate country (derived from the IP address), browser language and type, and the time of the request. We use it to show the site in your language and currency, deliver pages, protect the forms from automated abuse and see from which countries requests come.
Bot protection. The forms are protected by Cloudflare Turnstile, which checks technical signals from your browser (for example your IP address and browser characteristics) to tell people from automated programs. It runs without advertising cookies and the result is used only to accept or reject the form.
Limits and duplicates. To stop repeated automated requests we keep a keyed hash of your IP address for one hour and accept no more than five requests per hour from one address. To avoid duplicate requests we keep a keyed hash of a buyer's email address and of a verified channel's ID next to the encrypted request; a hash cannot be turned back into the email or the ID.
2.3 Information from Google and YouTube (sellers who choose to verify)
Quality Media Wealth uses YouTube API Services. If you choose Verify with Google, you are sent to Google's own sign-in page, where you decide whether to grant our OAuth application — shown by Google as "Gutenberg Factory", operated by Geldman Group LLC — the following read-only permissions:
| Google permission | What we read |
|---|---|
youtube.readonly - View your YouTube account | Channel name, ID, link, creation date, subscriber, view and video counts |
yt-analytics.readonly - View YouTube Analytics reports | Views, watch time, subscribers gained and lost, audience countries, by month |
yt-analytics-monetary.readonly - View monetary and non-monetary YouTube Analytics reports | Estimated revenue and similar revenue figures, by month |
openid and email - See your primary Google Account email address | Your email address, so we can contact you about your listing and buyers |
We do not receive your Google password. We do not request permission to upload, edit or delete videos, comments or any other content.
2.4 Public YouTube data
For channels listed or linked on the Service we may read public data (subscriber, view and video counts) through the YouTube Data API. We do not store such public statistics for more than 30 days without refreshing them.
3. How we use information and on what legal basis
| Purpose | Legal basis (EEA, UK, Switzerland) |
|---|---|
| Run the marketplace: list channels, match buyers with channels, send notifications, arrange introductions | Contract (Art. 6(1)(b) GDPR) |
| Verify a seller's channel and show its verified figures without the channel name to registered buyers; show the name and link to buyers the seller approves | Consent (Art. 6(1)(a) GDPR), which you can withdraw at any time |
| Refresh the verified figures of an active listing at least every 30 days | Consent |
| Provide paid memberships, renewals and cancellations | Contract |
| Notify our team about new requests through Telegram | Legitimate interests (Art. 6(1)(f) GDPR): handling requests quickly |
| Prevent fraud, spam and abuse; keep the Service secure; see from which countries requests come | Legitimate interests |
| Keep tax and accounting records | Legal obligation (Art. 6(1)(c) GDPR) |
We do not: sell personal information or Google user data; use Google user data for advertising, credit decisions or to build user profiles; let any human read your Google user data except (a) our team, to review your own listing, (b) with your consent for a support request, (c) for security or abuse investigations, (d) to comply with law; combine data from different sellers' channels to produce statistics about YouTube's revenue or business; create new metrics from YouTube data.
We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.
4. Google API Services User Data Policy (Limited Use)
Quality Media Wealth's (OAuth app "Gutenberg Factory") use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Before you verify, you must accept this Privacy Policy. By using Verify with Google you also agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.
5. Who we share information with
5.1 Buyers, with the seller's consent. Before a listing is published, the seller gives a separate consent, by ticking a box, to show that listing's verified figures from YouTube (for example monthly revenue and views) without the channel's name or link to registered buyers. A registered buyer is a person who has given us an email address and accepted our Terms. The channel's name and link are shown only to a buyer the seller approves. A seller can withdraw consent or the listing at any time; we then stop showing it. Figures from YouTube are always shown with the date they were retrieved and marked as data from YouTube.
5.2 Sellers, at the buyer's request. When you ask to be introduced to a seller, we pass on your contact details to that seller.
5.3 Service providers that process data on our behalf:
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, security, bot protection (Turnstile), encrypted database | USA and global network | EU-US Data Privacy Framework, Standard Contractual Clauses |
| Google LLC | Sign-in and YouTube API | USA | EU-US Data Privacy Framework |
| Telegram (Telegram Messenger Inc. and its affiliates) | Internal notifications to our team with the full content of each request | Outside the EU | Necessary to handle your request (Art. 49(1)(b) GDPR) |
| Our payment provider (named here before memberships go on sale) | Payments | USA / EU | Named with the provider |
| Resend, Inc. | Sending emails: confirmation of your email address, matching channels, notices about your listing | USA | Standard Contractual Clauses |
We do not allow third parties to serve content or advertisements on the Service.
5.4 Legal reasons. We disclose information if the law requires it, to protect the rights, safety or property of our users or the public, or in connection with a merger or sale of our business. In a sale, we will notify you before your data becomes subject to a different privacy policy.
6. How long we keep information
| Data | How long |
|---|---|
| Buyer email and budget | Until you unsubscribe or ask us to delete it, and no longer than 24 months after your last activity |
| Seller request (price, email, channel) | While the listing is active, then 24 months for dispute and fraud records |
| Keyed hash of an IP address (request limit) | One hour |
| Google access tokens | While your listing is active; revoked and deleted when you withdraw the listing, revoke access or ask us to delete your data |
| Data received from YouTube | While your listing is active, refreshed at least every 30 days; deleted within 7 days after you revoke access, withdraw your consent or ask us to delete it |
| Payment records | As long as tax and accounting law requires (generally up to 7 years) |
| Server logs | Up to 30 days |
When the period ends, electronic records are deleted irreversibly.
7. Security
Data is sent over encrypted connections (HTTPS). Requests and Google access tokens are stored in a database in which each field is encrypted (AES-256-GCM) with a key kept separately from the database, so a copy of the database alone cannot be read. Access is limited to the systems and people that need it. No method of storage or transfer is completely secure; if a breach affects your data we will notify you and the authorities as the law requires.
8. Cookies and similar technology
We do not use advertising or analytics cookies. When you choose a language in the language menu, we store it in a cookie (qmw_l, valid for one year) so the site opens in your language next time. When you start Verify with Google we set two strictly necessary cookies: qmw_v (valid for one hour) lets only the browser that confirmed the checkboxes start the check, and qmw_n (valid for 15 minutes) ties the Google response to your browser and protects you from forged sign-ins. Our hosting provider may set strictly necessary security cookies to block automated attacks. Because we use only strictly necessary technology, no cookie consent banner is shown. If this changes, we will ask for consent first.
Do Not Track: we do not track you across other websites, so we treat all visitors the same whether or not a Do Not Track signal is sent.
9. Your rights and choices
Wherever you live, you can:
- access the personal information we hold about you and get a copy;
- correct it;
- delete it;
- receive it in a portable format;
- object to or restrict processing, and withdraw consent at any time (this does not affect processing before withdrawal);
- unsubscribe from emails using the link in every email;
- revoke Google access at https://security.google.com/settings/security/permissions.
Write to info@geldmangroup.com. We answer within 30 days (within 10 days for requests under Korean law). We may ask you to confirm your identity.
Deleting YouTube data. If you ask us to delete data we received from YouTube, we delete it as soon as possible and within 7 days. Deleting data stored by Quality Media Wealth does not affect data stored by YouTube; to delete data on YouTube, use YouTube itself.
European Economic Area, United Kingdom and Switzerland. You may complain to the data protection authority of your country.
California. We do not sell or share personal information as these terms are defined by the California Consumer Privacy Act. This policy lists the categories of information we collect (section 2), their sources (sections 2.1-2.4), purposes (section 3) and recipients (section 5).
Russia. Users in Russia give a separate consent to the processing and cross-border transfer of their personal data when they submit a form; the text of that consent is at qmw.io/consent.
South Korea. Personal information is transferred abroad, over the network at the time you submit a form, to the providers in section 5 (Cloudflare, USA; Google, USA; Resend, USA; Telegram), for the purposes in section 3 and for the periods in section 6. You may refuse; you will then not be able to use the forms. Electronic files are deleted irreversibly when no longer needed. Person responsible for personal information: Privacy Officer, Geldman Group LLC, info@geldmangroup.com.
China. Personal information is processed by Geldman Group LLC outside mainland China for the purposes in section 3. By submitting a form you give your separate consent to this transfer. Contact: info@geldmangroup.com.
10. International transfers
We are based in the United States, and our providers process data in the United States and other countries. The safeguards for each provider are listed in section 5.3.
11. Children
The Service is for adults (18 or older). We do not knowingly collect information from children. If you believe a child has given us information, write to us and we will delete it.
12. Changes
We will post any change on this page and update the effective date. If a change is material, we will notify active users by email before it takes effect and, where the change affects how we use YouTube data, ask for your consent again.
13. Contact
Geldman Group LLC · 30 N Gould St, Sheridan, WY 82801, USA · info@geldmangroup.com