Effective August 10, 2026.

Who we are

Highway 20 Productions LLC operates highway20productions.com and the internal HWY20 Ads Reporting integration. References to “Highway 20 Productions,” “we,” “us,” or “our” refer to Highway 20 Productions LLC. This policy also applies to its DBA brands when they use the covered website, advertising, or reporting systems.

Scope of this policy

This policy describes information that may be handled through the Highway 20 Productions website and covered DBA-brand websites, inquiries and customer communications, website security and measurement tools, advertising technology including Meta and Google, and the internal HWY20 Ads Reporting integration.

This policy does not replace a client agreement or another privacy notice that applies to a specific service.

Information we may collect

Information you provide

• Contact information such as your name, company, email address, telephone number, and preferred method of contact.
• Information included in an inquiry, contact form, project request, quote request, customer communication, comment, or other website field.
• Business, project, scheduling, property, event, marketing, and service information that you choose to provide.
• Content, files, photographs, video, logos, account identifiers, or other material provided for an authorized project.

Website and device information

The website and its service providers may process technical information such as IP address, browser and device information, referring and exit pages, timestamps, requested pages, cookie identifiers, security logs, and spam-prevention signals. The specific data fields collected depend on the tools and services used during a visit or customer interaction.

Cookies and similar technologies

The website may use cookies, pixels, tags, local storage, and similar technologies for essential site operation, security, preferences, analytics, and advertising measurement. Some technologies may be set by WordPress, hosting or security providers, embedded-content providers, analytics services, or advertising platforms. Available choices depend on the technologies in use, browser controls, and any consent controls presented on the website.

Embedded content and external websites

Pages may include or link to content hosted by other services, such as video, maps, social media, scheduling, or customer platforms. Those providers may collect information as if you visited their websites directly and apply their own privacy policies. Highway 20 Productions does not control the privacy practices of an external website.

Analytics and advertising measurement

The website may use analytics and advertising measurement tools to understand visits, improve marketing, measure campaign results, and create audiences where permitted. These tools may process page views, page interactions, referring information, device or browser data, IP-derived information, cookie identifiers, and advertising-event information.

Highway 20 Productions has been configuring Meta advertising technology, including the Meta Pixel and Conversions API. Depending on the implementation and visitor choices, browser or server events may be sent to Meta for measurement, attribution, audience creation, security, and advertising operations.

Highway 20 Productions and its covered DBA brands may also use Google Analytics, Google Ads, YouTube advertising, and related Google measurement and audience tools. Depending on the implementation and your choices, these services may process website activity, advertising-event information, and eligible first-party customer information for campaign measurement, attribution, audience creation, audience signals, and advertising operations.

Google Customer Match

When permitted by applicable law and our agreements, Highway 20 Productions or a covered DBA brand may provide eligible first-party customer contact information, such as an email address or telephone number, to Google through an approved Google Ads interface or integration. Google may use that information to match records with Google accounts, create or refresh Customer Match audiences or audience signals, reach existing customers, suppress advertising where appropriate, and measure advertising results.

We use Customer Match only with information collected directly from a customer through our websites, services, transactions, subscriptions, or other direct interactions. We do not use contact information obtained only from third-party enrichment or public-source research for Customer Match. Google processes Customer Match information under its own terms and privacy policies.

HWY20 Ads Reporting and Meta advertising data

HWY20 Ads Reporting is an internal business integration used by authorized Highway 20 Productions personnel to work with Meta advertising assets owned by Highway 20 Productions or assigned by an authorized client.

Depending on the assets and permissions assigned by a business administrator, the integration may access advertising-account, campaign, ad-set, ad, creative, Page, Instagram, dataset, delivery, budget, targeting, and performance information through Meta’s Marketing API. This information may include account and asset identifiers, configuration details, delivery status, spending, impressions, clicks, conversions, and other reporting metrics made available by Meta.

The integration is not a consumer application and does not currently offer public account creation or Facebook Login. Access tokens, passwords, payment information, and other credentials must not be submitted through this website or included in a privacy or deletion request.

RidgeSuite KeyManager browser extension

Highway 20 Productions provides the RidgeSuite KeyManager browser extension to authorized users. Its single purpose is to let a user explicitly find, fill, generate, save, and update credentials for the exact website origin the user is reviewing.

Information handled by KeyManager

The extension may handle organization and membership identifiers, collection limits, credential labels, service names, usernames, passwords, time-based one-time-password seeds and codes, encrypted credential records and envelopes, signed-client session data, device name, client version, and the final normalized website origin used for an explicit operation. Before the user requests a fill or credential review, page interaction is limited to bounded field counts and focus state. An explicit save review may read the selected form’s visible username and password.

How KeyManager uses and protects information

KeyManager uses this information only to provide and secure authentication, authorization, exact-origin credential matching, local encryption and decryption, explicit credential filling and mutation, revocation, security auditing, support, and incident response.

Bearer tokens and membership private-key packages are encrypted under a non-exportable browser-profile key. Passwords and one-time-password seeds are encrypted end-to-end before server storage and are plaintext only during a bounded local operation. The service stores ciphertext, encrypted envelopes, authorized metadata, and secret-free audit provenance. Production network communication uses HTTPS to the declared RidgeSuite KeyManager service.

The extension does not use browser sync, the clipboard, page storage, cookies, file export, remote executable code, third-party analytics, or advertising. It does not send page paths, query strings, browsing history, DOM dumps, field labels, usernames, passwords, one-time-password material, organization names, or credential labels to advertising, analytics, or unrelated third parties.

KeyManager disclosure, sharing, and Limited Use

KeyManager information is not sold and is not used for advertising, lending, or unrelated profiling. It is disclosed only to the user’s authorized KeyManager service and organization as necessary to provide or secure the extension, when the user gives specific support consent, to investigate abuse or a security incident, or when required by law. Organization administrators may see authorized metadata, signed-client and session inventory, and secret-free audit events; KeyManager does not provide them plaintext passwords or one-time-password seeds.

Use of information received through browser APIs is limited to the extension’s prominently disclosed single purpose. The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

KeyManager retention and user control

Local encrypted session packages remain until sign-out, revocation, expiry, browser-profile removal, or extension removal. Sign-out removes local active packages immediately and retries unreachable server revocation without restoring access. Server records follow the user’s organization retention, audit, deletion, and recovery policies. Users can lock or sign out in the extension and can review or revoke a signed client from KeyManager’s Access page. Removing the extension deletes extension-origin storage but may not revoke an unreachable server session, so users should also revoke it from Access.

A website necessarily receives a credential the user explicitly fills into it and may observe that value. Endpoint malware, a compromised browser or profile, screenshots, input hooks, or a compromised trusted root can defeat software controls; affected clients and provider credentials should be revoked or rotated.

For KeyManager privacy or support questions, email hwy20_central+chromestore@highway20productions.com. Do not send passwords, one-time-password seeds, recovery codes, private keys, bearer tokens, or other secrets by email or through a website form.

How information may be used

• To respond to inquiries and communicate about requested or authorized services.
• To prepare estimates, schedule work, deliver services, maintain customer records, and support customer relationships.
• To operate, secure, troubleshoot, maintain, and improve the website and connected systems.
• To prevent spam, fraud, unauthorized access, and other misuse.
• To plan, create, monitor, optimize, attribute, and report on authorized advertising and marketing activity.
• To maintain business records and meet contractual, accounting, security, or legal obligations.

We process information as permitted by applicable law and our agreements.

How information may be shared

Information may be processed by service providers that support the website and authorized business operations, including hosting, WordPress plugins, security and spam prevention, analytics, communications, file storage, scheduling, customer-service tools, professional advisers, and advertising platforms such as Meta and Google. These providers may process information on our behalf to provide, secure, measure, and improve the services and advertising operations described in this policy.

Information may also be shared with a customer or business administrator when necessary to perform authorized work on that customer’s assets; when required by law, legal process, or a valid government request; to protect rights, safety, systems, or property; or as part of a business transaction subject to appropriate review.

Service providers may process information according to their own terms and privacy policies.

Retention

Different records may need different retention periods. Website submissions, customer communications, project records, security logs, advertising reports, account-access records, deletion requests, and accounting records should be retained only under an approved operational, contractual, security, or legal retention rule.

We retain information only as long as reasonably necessary for the purposes described in this policy, to provide services, maintain security and records, resolve disputes, and meet contractual or legal obligations. Information may then be deleted or anonymized where appropriate.

Security

Highway 20 Productions uses administrative, technical, and organizational safeguards appropriate to the systems it operates and restricts internal advertising access to authorized personnel. No method of storage or transmission can be guaranteed to be completely secure.

Your choices and privacy requests

You may ask what personal information Highway 20 Productions has about you, request correction or deletion, withdraw a consent where applicable, or raise a privacy concern by using the Highway 20 Productions contact page. Use the subject “Privacy Request” and include enough information to identify the relevant relationship or record.

You may also ask us not to use your contact information in future Customer Match audience uploads. You can unsubscribe from marketing emails using the link in those messages and manage personalized advertising through the controls offered by the relevant advertising platform. An opt-out request does not require deletion of records that must be retained for an authorized service, security, contractual, accounting, or legal purpose.

Highway 20 Productions may need to verify the requester’s identity and authority before acting. Some information may need to be retained for security, contractual, accounting, or legal reasons. Do not include passwords, access tokens, payment information, government identification, or other sensitive credentials in the initial request.

Requests concerning the internal Meta integration may also follow the separate HWY20 Ads Reporting Data Deletion Instructions once those instructions have been reviewed and published.

Advertising and browser choices

Visitors may be able to manage nonessential cookies through a website consent tool, browser settings, device settings, or controls provided by the relevant advertising platform. Available choices depend on the controls currently configured on the website and in the visitor’s browser or platform account.

Children’s information

The website and HWY20 Ads Reporting are not designed as services for children.

Changes to this policy

Material updates will be posted on this page with a revised effective date. Any additional notice required by applicable law or an existing agreement will also be provided.

Contact

Privacy questions and requests may be submitted through the Highway 20 Productions contact page.