Privacy Policy — Business HQ

Last updated: November 1, 2026

What Business HQ is

Business HQ is a private tool built and used only by Jay Hasan to run his own businesses (The Candle, ImpressivelyDigital and Cerulane). It is not offered to the public, and no one else can sign up for it.

Google data it uses

When Jay connects his own Google accounts, Business HQ uses Google APIs only to do what he asks it to: read and send email on his own Gmail account for his businesses, and upload and manage videos on his own YouTube channel (for example, posting The Candle's scheduled lessons). It requests no more access than those tasks need.

YouTube API Services

Business HQ uses YouTube API Services to upload Jay's own videos to his own YouTube channel and to confirm which channel is connected. By using Business HQ you are agreeing to be bound by the YouTube Terms of Service, and Google's handling of data is described in the Google Privacy Policy.

The only YouTube data Business HQ keeps is the ID and link of each video it uploaded, shown in Jay's private dashboard. It does not collect, store or share any other YouTube data, and it uses no cookies or tracking on YouTube data.

TikTok

Business HQ uses TikTok's Login Kit and Content Posting API to post Jay's own videos to The Candle's own TikTok account. It reads only that account's basic profile (to confirm which account is connected) and the status and link of videos it posted. It does not access any other TikTok user's data. Access can be removed at any time in the TikTok app under Settings and privacy > Security > Manage app permissions; the stored token and video links are then deleted within 7 days.

Storage and sharing

Access tokens and the data needed for these tasks are stored privately in Jay's own Cloudflare account and on his own computer. Google user data is not sold, not shared with third parties, not used for advertising, and not used to train AI models. Business HQ's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access and deleting data

Access can be revoked at any time through the Google security settings page (myaccount.google.com/permissions). When access is revoked, or on request by email, the stored access token and any stored YouTube data (video IDs and links) are deleted within 7 days. Business HQ also refreshes or deletes stored YouTube data at least every 30 days, as the YouTube API Services policies require.

Contact

Questions: jaamihasan89@gmail.com