TOP LEVEL MOVESPrivacy Policy
Effective date: October 18, 2026 · DRAFT, not yet reviewed by a lawyer
This policy explains what information Top Level Moves (“we”, “us”) handles through this website (toplevelmoves.com) and through our internal publishing tool (the “Tool”), which posts our own videos to our own TikTok account using TikTok's official APIs.
1. Who we are
Top Level Moves is a faceless short-form video brand operated by Top Level Moves. Contact: [email protected].
2. Website visitors
This website has no accounts, comments, advertising, analytics, or tracking cookies. Our hosting provider may keep standard server logs (such as IP address, browser type and time of request) for security and reliability. We do not use those logs to identify you. The only form on the site is the email signup described in section 2A.
2A. Email list (the Next Move Checklist)
If you enter your email address in the signup form, we collect that email address (and, through our email provider, basic signup details such as the signup time and the page you signed up from). We use it only to send you the Next Move Checklist and occasional Top Level Moves updates. We do not sell your email address or share it with anyone other than the email service that sends our messages, beehiiv, which handles it under its own privacy policy. Every email has an unsubscribe link, and you can also email [email protected] to be removed. The signup form is loaded from beehiiv and may set its own cookies for spam protection.
3. The publishing tool and TikTok data
The Tool is used only by Top Level Moves, to publish content to the Top Level Moves TikTok account. When we connect our account through TikTok Login Kit, TikTok gives the Tool:
- OAuth tokens (an access token and a refresh token) and the account's open ID, so the Tool can act on behalf of our account;
- Basic creator information returned by TikTok's creator info endpoint (account nickname, username, avatar URL, available privacy options, interaction settings and maximum video length), which we display before each post;
- Post status for videos we publish (for example, processing, published or failed).
We request only the scopes the Tool needs: user.info.basic and video.publish. We do not collect, read, store or process data about other TikTok users, followers, viewers or their content. We do not scrape TikTok.
4. How we use and store it
We use the information above only to publish our own content and to check whether a post succeeded. Tokens are stored encrypted-at-rest or with owner-only file permissions on a private machine we control, and are never shared, sold, or put in source code. Access tokens expire after about 24 hours and are refreshed automatically; refresh tokens expire after about 365 days.
5. Sharing
We do not sell personal information. Email addresses are shared only with our email service provider as described in section 2A. Videos and captions we publish are sent to TikTok, which handles them under TikTok's Privacy Policy.
6. Retention and deletion
We keep tokens only while the Tool is connected. We can disconnect at any time by revoking access in TikTok (Settings → Security → Apps and services / Manage app permissions) or through TikTok's token revoke endpoint, after which we delete stored tokens. Post-status records are kept for up to 90 days for troubleshooting, then deleted.
7. Children
This website and the Tool are not directed to children under 13, and we do not knowingly collect information from them.
8. Your choices
The Tool only handles our own account, so it holds no personal information about you. For the email list, you can unsubscribe at any time using the link in any email, or email us to access or delete your email address. We will respond within 30 days.
9. Changes
We will post any changes on this page and update the effective date.