Privacy Policy
This Privacy Policy applies to the official Google Cloud application named heavyequipment (also referred to as Heavy Equipment Wiki, Google Project ID: heavyequipmentwiki) and the website located at https://heavyequipment.wiki (accessible at both https://heavyequipment.wiki/privacy-policy and https://heavyequipment.wiki/privacy-policy/). We are committed to protecting your personal information and respecting your privacy in strict compliance with the Google API Services User Data Policy, Limited Use requirements, California Consumer Privacy Act (CCPA), and General Data Protection Regulation (GDPR).
"The heavyequipment (Heavy Equipment Wiki) application's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements."
- Google Account ID (OpenID Connect `sub`)
- Google Verified Email Address (`userinfo.email`)
- Basic Profile Display Name & Avatar URL (`userinfo.profile`)
- Strictly for administrator authentication to CMS portal (
/ourcmskiuq_wiki/) - Zero Data Selling: We NEVER sell or monetize Google user data
- Zero Third-Party Sharing: No advertisers, brokers, or external entities
- Zero Targeted Advertising: Never used for ads or marketing
- Zero AI Training: Never used to train generalized AI/ML models
- Revoke Anytime: Google Permissions or email soporadara@kiuq.com (48-hr deletion)
We Do Not Sell Data
We never sell, rent, lease, or trade your personal information or Google user data to third-party data brokers, marketers, or advertisers.
Google Limited Use
Google OAuth authentication adheres strictly to the Google API Services User Data Policy, including all Limited Use requirements.
Instant Data Deletion
Users can revoke Google permissions at any time or request immediate permanent deletion of their account records within 48 hours.
01Company & Application Overview
This Privacy Policy applies to the website https://heavyequipment.wiki and the associated Google Cloud application Heavy Equipment Wiki (Project ID: heavyequipmentwiki), referred to herein as "Heavy Equipment Wiki," "the App," "we," "us," or "our".
We operate an authoritative specifications database, engineering wiki, and direct quotation platform for heavy construction machinery, compact mini excavators (including the TERROR XVII PRO, TERROR III, and TERROR IV series), STOMP 65 skid steer loaders, and heavy-duty hydraulic attachments. We also operate a secured Content Management System (CMS) for authenticated administrative team members to manage equipment listings, technical specifications, and knowledge articles.
Our principal business address is 2522 S Malt Ave., Commerce, CA 90040, USA. If you have any inquiries regarding data processing, you can contact our privacy officer at soporadara@kiuq.com or info@heavyequipment.wiki, or call +1 (213) 214-2203.
02Information We Collect
We collect information in three ways: information you voluntarily provide, information accessed via Google OAuth authentication when using administrative services, and information that is automatically collected when you visit our website.
A. Information You Voluntarily Provide
- Contact Information: Name, business name, email address, phone number, and physical mailing/shipping address when requesting machine quotes or spec sheets.
- Equipment Inquiry Details: Machinery models of interest (e.g., mini excavator bucket sizes, cabin configurations, hydraulic breaker pin dimensions).
- Customer Support Records: Notes, correspondence, and technical questions submitted through our contact forms or email.
- Order Information: Billing details, shipping destination, and transaction references when processing equipment orders.
B. Automatically Collected Information
- Technical & Device Data: IP address, browser type and version, language settings, operating system, and screen resolution.
- Usage Data: Pages visited, duration of visit, referral URLs, search keywords used, and links clicked.
- Cookies & Tracking Identifiers: Small files placed on your browser to recognize returning visitors, remember shopping cart state, and measure site performance.
03Google API Services, OAuth 2.0 & User Data Policy Disclosure
Heavy Equipment Wiki integrates with Google OAuth 2.0 authentication services to allow authorized administrative users and content managers to securely sign in to our Content Management System (CMS) portal (https://heavyequipment.wiki/ourcmskiuq_wiki/).
3.1 Google OAuth Scopes Accessed
When you initiate Google Single Sign-On (SSO) on Heavy Equipment Wiki, our application requests access only to the following standard, non-sensitive identity scopes:
- openid: Used to authenticate your identity via OpenID Connect.
- https://www.googleapis.com/auth/userinfo.email: Used to retrieve your primary Google account email address and verified email status.
- https://www.googleapis.com/auth/userinfo.profile: Used to retrieve your basic profile information (display name, given name, family name, and profile picture avatar URL).
3.2 Specific Google User Data Collected & Stored
Heavy Equipment Wiki receives and processes the following specific data elements from your Google Account:
- Google Subject ID: A unique numerical identifier assigned by Google to associate your authenticated account.
- Email Address: Used as your unique administrator login username and for critical security notifications.
- Full Name: Displayed on administrative activity logs and within the CMS dashboard interface.
- Profile Picture URL: Used strictly to display your user avatar within the authenticated CMS navigation bar.
- Authentication Session Tokens: Cryptographically verified session tokens used to maintain your secure authenticated session during your browser visit.
3.3 Purpose of Collection & Use
Google user data is collected and processed strictly for the following operational purposes:
- Authenticating authorized administrative team members to manage equipment catalog listings, machinery specifications, and technical blog posts.
- Validating role-based access privileges and protecting confidential site management operations.
- Recording security audit logs of administrative changes for compliance and integrity.
We NEVER use Google user data for advertising, consumer profiling, automated behavioral tracking, or commercial marketing.
3.4 Non-Sharing, Non-Sale & Data Protection Commitments
- Zero Data Sale: Heavy Equipment Wiki does NOT sell, rent, lease, or monetize Google user data under any circumstances.
- No Third-Party Sharing: Google user data is NEVER transferred or shared with third-party advertisers, data brokers, advertising exchanges, or external marketing entities.
- No Targeted Advertising: We do NOT use Google user data to serve targeted advertisements, retargeting campaigns, or promotional materials.
- No AI/ML Model Training: Google user data is NEVER used to train, retrain, or improve generalized machine learning models or artificial intelligence systems.
- Encrypted Transmission: All data exchanged with Google APIs is protected via TLS 1.3 / HTTPS encryption in transit.
Mandatory Google API Services User Data Policy / Limited Use Disclosure
"Heavy Equipment Wiki's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements."
3.6 Google Data Retention Standards
Heavy Equipment Wiki retains Google user profile information and session credentials only for as long as necessary to fulfill the authentication and administrative purposes stated above. Session tokens automatically expire upon logout or after 30 days of inactivity. When an administrator account is decommissioned, all associated Google profile data is permanently purged from our servers within 30 days.
3.7 User Data Deletion & Access Revocation Instructions
Users have complete control over their Google data and can revoke access or request permanent deletion at any time through either of the following methods:
You can revoke Heavy Equipment Wiki's access to your Google Account at any time by visiting your Google Security permissions page: https://myaccount.google.com/permissions . Selecting Heavy Equipment Wiki and clicking "Remove Access" immediately terminates our ability to access your profile data.
To request the complete, permanent deletion of your administrator account and all stored profile data, send an email to our Data Protection Officer at soporadara@kiuq.com or info@heavyequipment.wiki with the subject line "Google User Data Deletion Request". All verified deletion requests are fulfilled within 48 hours free of charge, with written confirmation delivered upon completion.
04Google Web Services & Third-Party Tools
In addition to Google OAuth authentication, we use standard Google webmaster and cataloging tools to maintain website performance and search visibility:
- Google Analytics & Tag Manager: We use Google Analytics to analyze aggregated visitor patterns, page speed, and catalog engagement. Google Analytics processes anonymized IP addresses. You can opt out via the Google Analytics Opt-out Browser Add-on .
- Google Search Console: Used to monitor search indexing, crawl rate, Core Web Vitals, and mobile responsiveness to maintain optimal user experience.
- Google Merchant Center & Product Structured Data: Product technical specifications, verified pricing, SKU/GTIN identifiers, and stock availability are published via Schema.org JSON-LD microdata for accurate Google Shopping cataloging.
- Ecwid E-Commerce Store Widget: Direct online equipment ordering is powered through Ecwid, which complies with PCI-DSS Level 1 security standards for encrypted card handling. Payment data is transmitted directly to vetted merchant payment gateways.
05How We Use General Information
We process general customer information solely for legitimate commercial purposes:
- ✔ Providing machine specs, operator manuals & quotes
- ✔ Arranging nationwide freight shipping & delivery
- ✔ Processing warranty claims & parts inquiries
- ✔ Verifying hydraulic attachment pin compatibility
- ✔ Preventing fraudulent orders and spam submissions
- ✔ Complying with federal, state, and tax legal obligations
06Data Sharing & Third-Party Disclosure
We do not sell, rent, lease, or monetize your personal information or Google user data to third parties under any circumstances.
We only share necessary information with trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you, under strict confidentiality agreements:
- Freight & Logistics Carriers: Delivering mini excavators, skid steers, and heavy attachments to customer jobsites or commercial loading docks.
- Payment Processors: Authorized financial processors operating under PCI-DSS certification.
- Legal & Regulatory Authorities: Only when required by law, subpoena, or governmental inquiry to protect safety, property, or legal rights.
07Cookies & Tracking Control
Cookies are small files transferred to your computer’s hard drive through your web browser that enable the site to recognize your browser and capture certain information. We use cookies to compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.
You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies through your browser settings (Chrome, Safari, Firefox, Edge). If you disable cookies, some features of our equipment catalog or shopping bag may have reduced functionality.
08Your Privacy Rights (CCPA & GDPR Compliance)
Depending on your location, you hold significant legal rights regarding your personal information:
California Consumer Privacy Act (CCPA)
- • Right to know what personal data is collected and how it is used.
- • Right to request deletion of personal information.
- • Right to opt-out of the sale of personal information (Note: We do NOT sell your data).
- • Right to non-discrimination for exercising CCPA rights.
General Data Protection Regulation (GDPR)
- • Right to access your stored data and request portable copies.
- • Right to rectify incomplete or inaccurate records.
- • Right to erasure ("Right to be Forgotten").
- • Right to withdraw consent and restrict data processing.
To exercise any of these rights, email us at soporadara@kiuq.com or info@heavyequipment.wiki with the subject line "Privacy Data Request." We respond to all verified requests within 30 calendar days.
09Data Security & Technical Safeguards
We implement robust technical and organizational security measures to maintain the safety of your personal information and Google user credentials. Our entire website and API endpoints are encrypted via 256-bit Secure Sockets Layer (SSL/TLS 1.3) technology, and server access is restricted exclusively to authorized personnel under multi-factor authentication.
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, satisfy warranty and legal obligations, and resolve commercial disputes.
10Children’s Online Privacy Protection Act (COPPA)
Our website, products, and commercial machinery services are directed exclusively to individuals aged 18 and older. We do not knowingly collect or solicit any personal information from children under the age of 13. If we become aware that a child under 13 has provided us with personal information, we will immediately delete such data.
11Contact Us Regarding Privacy
If you have any questions, comments, data deletion requests, or concerns regarding this Privacy Policy or our Google OAuth integration, please contact our Data Protection Officer: