Privacy Policy

Effective Date: March 21, 2026

This Privacy Policy describes how Higher Ground Landscaping ("Company," "we," "us," or "our") collects, uses, stores, shares, and protects information in connection with the HGL Content Engine application and related services ("Service"). Higher Ground Landscaping is located in Oakland County, Michigan, and serves as the data controller for information collected through the Service.

By using the Service or authorizing it to access your social media accounts, you consent to the data practices described in this policy. Your data belongs to you, and we are committed to protecting it.

1. Information We Collect

We collect the following categories of information when you use or authorize the Service:

1.1 TikTok Account Information

When you connect your TikTok account to the Service via TikTok's official Login Kit (OAuth 2.0), we collect:

• Open ID (unique TikTok user identifier)
• Display name and username
• Profile avatar URL
• OAuth access tokens and refresh tokens

The specific TikTok API scopes we request are:

• user.info.basic — to identify the connected account
• video.publish — to post video content directly to your TikTok profile
• video.upload — to upload video files to TikTok for publishing

We only request the minimum permissions necessary to provide the Service. We do not request access to your followers, messages, comments, or any other TikTok data beyond what is listed above.

1.2 Content Data

• Videos, thumbnails, captions, descriptions, and hashtags created, uploaded, or scheduled through the Service
• AI-generated metadata (titles, descriptions, hashtags) produced by the Service for your content

1.3 Usage Data

• Posting schedules and publishing status (success, failure, pending)
• Error logs and diagnostic information
• Feature usage patterns within the Service

1.4 Device and Technical Data

• IP address, browser type, and operating system when accessing the Service through a web interface

2. How We Collect Information

We collect information through the following methods:

• TikTok API / Login Kit: When you authorize the Service to connect to your TikTok account, TikTok's OAuth flow provides us with an access token and basic profile information. This authorization is initiated by you and can be revoked at any time.
• Direct Input: Content you upload or create within the Service (videos, captions, etc.).
• Automated Collection: Usage logs and error data generated during normal operation of the Service.

We obtain your explicit consent before accessing your TikTok account or posting any content on your behalf. No content is posted without your prior authorization.

3. How We Use Your Information

Each type of data we collect is used for a specific purpose:

• TikTok Account Information: To authenticate your account and publish content to your TikTok profile on your behalf.
• Content Data: To process, format, schedule, and publish your video content to TikTok and other connected platforms.
• Usage Data: To monitor posting performance, troubleshoot errors, and improve the reliability of the Service.
• Device/Technical Data: To maintain security and diagnose technical issues.

We do not use your data for any purpose other than providing and improving the Service. We do not use your data for advertising, profiling, or cross-context behavioral advertising.

4. Third-Party Platform Integration

The Service integrates with TikTok through TikTok's official API. When you authorize the Service to access your TikTok account:

• We receive an OAuth access token that allows us to post content on your behalf.
• We access only the permissions (scopes) you explicitly grant during the authorization flow.
• You maintain full awareness and control over what content is posted to your TikTok account.
• TikTok may audit our application for compliance with their developer terms at any time.

Your use of TikTok is governed by TikTok's Terms of Service and TikTok's Privacy Policy. We encourage you to review those documents.

5. Data Sharing

We do not sell, rent, or trade your personal information to any third party. We do not share your personally identifiable information without your explicit consent.

We may share information only in the following limited circumstances:

• TikTok Platform: Content and metadata you authorize us to post is transmitted to TikTok via their API for publishing to your account.
• Service Providers: With trusted third-party services that help us operate the Service (e.g., cloud hosting, AI processing), under appropriate confidentiality agreements and only to the extent necessary to provide the Service.
• Legal Requirements: When required by law, subpoena, court order, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to affected users.

6. Data Retention and Deletion

• Authentication Tokens: OAuth tokens are stored securely for the duration of your connection to the Service. Tokens are deleted immediately when you disconnect your account or revoke access.
• Content Data: Videos, metadata, and posting records are retained for up to 12 months after creation, or until you request deletion, whichever comes first.
• Usage Data: Logs and diagnostic data are retained for up to 90 days.
• Account Disconnection: When you disconnect your TikTok account from the Service, we immediately revoke and delete all associated access tokens and cease all API access to your TikTok account. Content data associated with your account will be deleted within 30 days of disconnection.
• Deletion Requests: You may request deletion of your data at any time by contacting us at the email address below. We will process deletion requests within 30 days and confirm completion.

7. Data Security

We implement technical, physical, and administrative safeguards consistent with the highest industry standards to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Secure storage of authentication tokens with access controls
• Regular security reviews and updates
• Access limited to authorized personnel only

7.1 Breach Notification

In the event of a data breach that affects your personal information, we will:

• Immediately disconnect all affected API integrations to prevent further unauthorized access
• Notify affected users within 72 hours of discovering the breach
• Notify TikTok and any other affected platform partners
• Provide details about the nature of the breach, the data affected, and steps taken to address it
• Comply with all applicable breach notification laws

8. Your Rights

You have the following rights regarding your personal information:

• Right to Access: Request a copy of the information we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete information.
• Right to Deletion: Request deletion of your information. We will process requests within 30 days.
• Right to Revoke Access: Disconnect your TikTok account from the Service at any time, which will immediately revoke our access to your TikTok account and trigger deletion of associated tokens.
• Right to Opt Out: You may opt out of any non-essential data collection by contacting us.
• Right to Data Portability: Request your data in a commonly used, machine-readable format.

To exercise any of these rights, contact us at highergroundlandscaping1@gmail.com. We will respond to all requests within 30 days.

9. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt Out of Sale: We do not sell your personal information. We have not sold personal information in the preceding 12 months.
• Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your CCPA rights, contact us at highergroundlandscaping1@gmail.com.

10. Prohibited Data Practices

We commit to the following restrictions on data use:

• We will not build databases, profiles, or dossiers on individuals using data obtained from TikTok.
• We will not use TikTok data for unauthorized advertising or cross-context behavioral advertising.
• We will not share personally identifiable information with third parties without your explicit consent.
• We will not retain TikTok data longer than necessary to provide the Service.

11. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected information from a person under 18, we will take immediate steps to delete that information and terminate any associated account access.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. If we make material changes, we will provide notice through the Service or via email. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

Higher Ground Landscaping
Oakland County, Michigan
Email: highergroundlandscaping1@gmail.com
Website: highergroundlandscaping.net