YOM

YOM Partner Terms

Last updated:

Version 2026-11-09. These Partner Terms apply when the owner of a YOM organization turns on the partner program. They add to the Terms of Service and the Data Processing Addendum. If they conflict, these Partner Terms win for partner features only.

Who these terms are with

YOM is run by three companies in the same group. Which one you deal with depends on where you are. For a business account, that is the country of the business's billing address.

  • India: Aapastech Private Limited (CIN U72900DL2022PTC395508; registered office 8/3, 2nd Floor, Roop Nagar, Delhi 110007, India). It is the data fiduciary for your personal data under Indian law.
  • European Union and United Kingdom: Aapastech OÜ (registry code 16453146, VAT EE102489493, Tornimäe tn 3 // 5 // 7, 10145 Tallinn, Estonia). It is the controller of your personal data under the GDPR and the UK GDPR.
  • Everywhere else: 14818032 Canada Inc. (Burlington, Ontario, Canada). It is the controller of your personal data.

The three companies share engineering, hosting and support, and each processes personal data for the others under a written intra-group agreement. In this document “YOM”, “we” and “us” mean whichever of them you deal with.

“We” means that company. “You” means the organization whose owner accepted these Partner Terms.

1. What the partner program lets you do

A partner can use the YOM partner API to:

  • open and manage YOM organizations for its own customers (“managed organizations”) and create projects in them;
  • send server events into those projects;
  • show a managed organization’s reports inside the partner’s own product, using short-lived embed tokens;
  • send a managed organization’s owner a sign-in link so they can take over the account (“claim” it);
  • read daily usage totals for its managed organizations.

You turn the program on and off yourself in Settings. Only an owner of an organization on the pay-as-you-go plan can accept these terms, and that owner must use two-step sign-in.

2. Your customers and their data

You are responsible for your relationship with your own customers. Before you open a managed organization for a customer, you must have their permission to do so under your agreement with them, and you must tell them that their analytics run on YOM.

For data in a managed organization:

  • your customer is the controller of their visitors’ data;
  • you act for your customer, and we act for you, as processors under the Data Processing Addendum;
  • once your customer claims the account, they also have a direct relationship with us under the Terms of Service, and our Data Processing Addendum applies between us and them.

You must not send us more personal data than your customers’ analytics need. Do not put names, email addresses, phone numbers or message text into event properties. You are responsible for any consent your customers’ visitors must give under the law that applies to them, and for honouring their choices.

3. Claimed accounts

When your customer claims a managed organization, they become its owner. They can see everything in it, export it, and remove your access in Settings. If they remove your access, your partner keys stop working for that organization at once. The organization and its data stay with your customer.

You may not stop a customer from claiming their account, and you may not use a claimed account against its owner’s instructions.

4. Billing

Usage in your managed organizations is billed to your organization, at your plan’s rates, until the managed organization moves to its own paid plan. You set the monthly event limit for each managed organization within your own allowance. If you leave the partner program, you still pay for usage in managed organizations that remain under your account, up to the limits you set, until you lower those limits or your customers move to their own plans.

5. Keys and security

Keep your partner keys secret and on your servers. Never put them in a browser, a mobile app or a public repository. Tell us at contact@aapastech.com within 72 hours if you believe a key has leaked, and revoke it in Settings straight away. Every partner action is recorded in the audit log of both your organization and the managed organization.

6. What you must not do

You must not:

  • open managed organizations for people who have not asked for your product;
  • use the partner API to read, copy or combine data across your customers’ accounts, except through the daily totals we provide;
  • resell YOM as a standalone analytics product under your own brand without a separate written agreement with us;
  • try to get around plan limits, rate limits or security controls.

7. Suspension and leaving

You can leave the partner program at any time in Settings. Your managed organizations, their data and their owners are not affected; your partner keys stop working for partner actions.

We may suspend your partner access if you break these terms, if your account is unpaid, or if we need to protect your customers, their visitors or YOM. When we do, we email your organization’s owners and tell them why, unless the law stops us. Suspension does not delete any data. We will lift it once the problem is fixed.

8. Changes

We may update these Partner Terms. We will give owners at least 30 days’ notice by email and in the product before a change that reduces your rights takes effect, and we will ask you to accept the new version. If you do not accept it, you can leave the program.

9. Everything else

The Terms of Service govern everything these Partner Terms do not cover, including liability limits, warranties, governing law and disputes. Questions: contact@aapastech.com.