Effective date: September 30, 2026

Privacy Policy

This policy explains what data Platform (the "Service") collects, why, and what we do — and don't do — with it. The Service is operated by Simon United LLC, d/b/a West Highland Ventures ("we," "us"), of Rochester, New York.

1. Who this policy covers

The Service is used by three groups of people, and this policy addresses all of them:

• Client organizations ("Networks") — membership organizations such as retail buying groups, franchise systems, and consortia that subscribe to the Service.
• Members — the independent businesses belonging to a Network who connect their social media accounts to the Service.
• Visitors — anyone browsing this website.

2. What we collect, and why

From social media platforms, with Member consent

When a Member connects an account, they authorize us through TikTok's or Meta's official login (OAuth) consent screens. Through each platform's official API, we then access, on an ongoing basis until access is revoked:

• Basic profile information — account name, handle, and follower count — to identify the connected account.
• Content the Member posted — captions, posting dates, formats, and links — to attribute activity to campaigns and brands.
• Engagement metrics — likes, comments, shares, views, and reach — to measure performance for the Member and their Network.

If a Member separately opts in to publishing features, we additionally receive permission to post content that the Member has explicitly chosen and scheduled to their own account. We never post anything a Member has not individually approved.

We never see or store any Member's password. Access tokens issued by the platforms are stored encrypted at rest. A Member can revoke our access at any time from their TikTok or Facebook/Instagram account settings, or by emailing us.

From Networks

Networks provide their member roster: business names, locations, business contact email addresses, and social media handles. This is business contact information used to invite Members and operate the Network's dashboard.

From this website

Standard server logs (IP address, browser type, pages viewed) used for security and troubleshooting. We do not run third-party advertising trackers on this site.

3. What we do with data

• Show each Network a dashboard of its own Members' social performance.
• Send each Member their own performance summaries (for example, a weekly email of their week's posts and engagement).
• Produce aggregate, network-level reporting that Networks may share with brand partners and sponsors. Brand-facing reporting is aggregated at the network or brand-campaign level.
• Operate, secure, and improve the Service.

4. What we never do

• We do not sell personal data. To anyone, in any form.
• We do not share one client's data with another. Each Network's data is stored in its own isolated database. No Network can ever see another Network's Members or metrics.
• We do not post to a Member's account without that Member's explicit action.
• We do not profile or target consumers. The Service measures the performance of business accounts' own content; it does not build profiles of the consumers who interact with that content.
• We do not use platform data to train AI models or for any purpose outside operating the Service for the Member's own Network.

5. Platform terms

Our use of data received from Meta (Facebook and Instagram) complies with the Meta Platform Terms, and our use of data received from TikTok complies with the TikTok Developer Terms of Service, including each platform's data deletion and retention requirements. If a Member disconnects or a platform instructs us to delete data obtained through its API, we do so within the timeframe the platform requires.

6. Retention and deletion

• Members: disconnect at any time via your platform settings, or email us to have your connection removed and your platform-derived data deleted.
• Networks: on termination of a Network's subscription, that Network's database — including all of its Members' data — is exported to the Network on request and then deleted, per the terms of the Network's service agreement.
• Encrypted backups are retained on a rolling schedule for disaster recovery and expire automatically.

7. Security

Data is encrypted in transit (TLS) and platform access tokens are encrypted at rest. Access to production systems is limited to personnel who operate the Service. Each Network's data is physically separated from every other Network's. No method of storage is perfectly secure, but isolation and encryption are designed in, not added on.

8. Children

The Service is for businesses and business organizations. It is not directed to children and we do not knowingly collect personal information from anyone under 16.

9. Your rights

Depending on where you live, you may have rights to access, correct, or delete personal information we hold about you. Email us and we will honor legitimate requests promptly. If you are a Member, please write from the email address your Network has on file so we can verify you.

10. Changes

If this policy changes materially, we will update the effective date above and notify Networks directly. Continued use of the Service after a change means acceptance of the updated policy.

11. Contact

Simon United LLC d/b/a West Highland Ventures
Rochester, New York
hello@example.com