yiyaotechai Privacy Policy
Last Updated: July 9, 2026 | Effective Date: July 9, 2026
yiyaotechai (hereinafter referred to as "we", "us", or "our") understands the importance of your personal information. We will take appropriate security measures to protect your personal information in accordance with laws and regulations. Please read and fully understand this Privacy Policy before using our services.
Part One: Business Scenarios
Our platform is a one-stop content creation efficiency tool for TikTok creators, serving content creators and social media managers in the United States, Mexico, and other international regions. We help creators improve content production efficiency and optimize publishing strategies, allowing them to focus more on creative work rather than being consumed by repetitive tasks like account switching and data consolidation.
Core features of our platform include:
- Platform Account Registration and Login: Create a yiyaotechai platform account using a username and password to access and manage Platform features.
- Unified Multi-Account Management and Login Kit: Securely bind your TikTok accounts to our platform through the standard TikTok OAuth 2.0 authorization process, Login Kit, or other supported login methods (such as QR code login where available). View and manage all your accounts within a single interface without repeated logins and logouts.
- Account Tags and Organization: Apply optional content tags or labels to your bound TikTok accounts for your own classification and filtering purposes.
- Video Analytics Dashboard: Automatically aggregate video performance data (views, likes, comments, shares, etc.) from all your accounts, presented through visual charts to help you quickly identify high-performing content directions and make data-driven creative decisions.
- Video Details Viewing: Centrally view complete information about your published videos, including titles, publication times, share links, and more, facilitating content archiving, performance tracking, and experience review.
- Cross-Account Content Publishing and Share Features: Quickly switch between multiple accounts and publish videos (including draft and direct posting where supported) and share content through approved TikTok sharing capabilities, reducing repeated logins and uploads.
- Webhook-Driven Updates: For supported events, our platform may receive webhook notifications from TikTok to keep relevant statuses and workflows updated in near real time.
- Creative Video Guide and Reference Content: Browse tag-based creative guides, inspiration copy, and beginner-oriented suggestions to support your content planning.
Important Notice: Our platform is an independently developed third-party tool and has no official affiliation or partnership with TikTok. We are committed to providing efficiency tools for genuine content creators to help them better manage their own accounts.
Based on this business positioning, we process your personal information in the following scenarios:
Scenario 1: Platform Account Registration and Login
You may register and log in to yiyaotechai using a platform account (username and password) to access Platform features. Your platform account is separate from your TikTok account authorization.
Scenario 2: Account Authorization and Binding
You authorize your TikTok account to us through our platform via the standard TikTok OAuth 2.0 authorization process, Login Kit, or other supported authorization methods (such as QR code login where available), enabling unified viewing and management of multiple TikTok accounts' information and data within our platform. This scenario is a prerequisite for using all features of our platform.
Scenario 3: Video Data Display and Analytics
After you complete account authorization, we retrieve and display interaction metrics for your published videos, including views, likes, collections, shares, and comments. These are presented through visual dashboards to assist you in content performance evaluation and creative decision-making.
Scenario 4: Video Details Viewing
We provide detailed information about your published videos (titles, publication times, share links, etc.) for content archiving and performance tracking purposes.
Scenario 5: Cross-Account Content Publishing
You may quickly switch between multiple authorized accounts and publish videos through our platform, eliminating the tedious process of repeated logins and re-uploads.
Scenario 6: Account Tags and Organization
You may create or apply tags/labels to organize and filter your bound accounts. Tags are optional and used solely for your own organization within the Platform.
Scenario 7: Creative Video Guide and Reference Content
You may browse creative guides, inspiration copy, and other reference materials. In general, this content can be viewed without providing additional personal information beyond what is necessary for Platform access and basic usage analytics/security.
Scenario 8: Webhook Event Handling
For approved webhook integrations, we may receive event notification payloads from TikTok (for example, publishing status or related callback data) to process feature workflows, update status displays, and improve service reliability.
Scenario 9: Platform Operation and Security Maintenance
To ensure the normal operation of our platform, prevent malicious use, troubleshoot technical issues, and optimize service experience, we record relevant system data during your use of the platform.
Part Two: Data Flow
This section details the full lifecycle of your personal information, from collection and storage to usage and deletion.
I. Data Collection
We collect your personal information in the following scenarios:
| Collection Scenario | Types of Information Collected | Collection Method | Collection Frequency |
|---|---|---|---|
| Platform Account Registration and Login | Username, password (stored as a salted hash, not in plain text), account creation time, and related authentication records | Actively provided by you and processed by the system for authentication | At registration and each login |
| Account Authorization | OAuth Access Token, TikTok nickname, profile picture, follower count, following count | Automatically obtained via OAuth 2.0 authorization flow or other supported authorization methods (such as QR code login where available) | One-time, only when you actively authorize an account |
| Video Data Retrieval | Video titles, views, likes, collections, shares, comments, share links | Automatically obtained via TikTok API | Real-time each time you refresh or view data |
| Cross-Account Publishing | Video files, titles, descriptions, and other publishing content | Actively uploaded and submitted by you | Each time you publish |
| Webhook Event Notifications | Event callback payloads and related metadata provided by TikTok for supported webhook events | Automatically received from TikTok through approved webhook subscriptions | When subscribed events are triggered |
| Platform Usage | IP address, access time, operation records | Automatically recorded by the system | Recorded with each request |
| Issue Troubleshooting | Error logs, usage frequency data, crash reports | Automatically collected by the system | Recorded when errors or exceptions occur |
II. Data Storage
Storage Location: All data is stored on secure, encrypted servers (currently located in the United States). We implement industry-standard security measures to protect your data, and we do not share your data with any third party.
Storage Periods:
| Information Type | Storage Period | Basis for Determination |
|---|---|---|
| Platform Account Credentials and Authentication Records | Until you delete your platform account, subject to legal retention requirements | Necessary for account authentication, security, and fraud prevention |
| OAuth Access Token | Until you actively cancel authorization or delete your account | You may cancel authorization at any time; the token becomes invalid immediately upon cancellation |
| TikTok Account Information (nickname, profile picture, follower count, etc.) | Throughout the account's active period | Necessary for providing the service |
| Video Data (views, likes, etc.) | Throughout the account's active period | Necessary for providing the service |
| Publishing Content (video files, titles, descriptions, etc.) | Cleared immediately after publication | Used solely for transmission to TikTok; no copies retained |
| Webhook Event Notification Data | Retained only as long as needed for event processing, status synchronization, troubleshooting, and security review | Necessary to support webhook-based workflows and maintain service reliability |
| Log Information (IP address, access time) | No more than 180 days | Used for issue troubleshooting; automatically anonymized after expiration |
III. Data Usage
Collected and stored data is used solely for the following purposes:
- Displaying account information and video data on your personal dashboard for your review and analysis;
- Generating trend charts, performance rankings, and other analytical results to support your creative decision-making;
- Enabling you to quickly switch between authorized accounts and publish videos, improving content distribution efficiency;
- Processing webhook event notifications to update publishing or account-related statuses and support workflow automation where enabled;
- Ensuring platform operation security and preventing malicious use;
- Troubleshooting technical issues and optimizing service experience.
Usage Restrictions: We do not use your data for any purposes not explicitly authorized by you, nor do we engage in automated decision-making or user profiling based on your data.
IV. Data Deletion
You may initiate data deletion through the following methods:
| Action | Scope of Data Deletion | Effective Time |
|---|---|---|
| Cancel Account Authorization | The Access Token for that account becomes immediately invalid; data updates cease | Immediate |
| Delete Account | All personal data (including account information, video data, and logs) | Immediate |
| Cancel Account (Email Request) | All personal data (same scope as Delete Account) | Completed within 3 business days |
Important Notice: Deletion operations are irreversible. Please proceed with caution. This does not apply to data that must be retained under applicable laws and regulations.
Local Copy Reminder: If you have exported, downloaded, or otherwise stored TikTok-related data locally on your own devices or systems, you are responsible for deleting those local copies after account cancellation, authorization revocation, or feature termination, unless retention is required by law.
V. Data Sharing Restrictions
We do not share your personal information with any company, organization, or individual, except in the following cases:
- After obtaining your explicit consent: We may share specific information after obtaining your separate consent;
- Legal requirements: As required by laws, regulations, litigation dispute resolution, or by competent administrative or judicial authorities.
We do not transfer your personal information to any company, organization, or individual, except in the following cases:
- After obtaining your explicit consent;
- In the event of mergers, acquisitions, or bankruptcy liquidations, if personal information transfer is involved, we will require the new holder to continue to be bound by this Policy; otherwise, we will require the new holder to obtain your authorization and consent anew.
We do not publicly disclose your personal information, except with your separate consent or as required by law.
Part Three: User Authorization Method
I. Authorization Principles
Our platform adheres to the following authorization principles:
- Voluntary Authorization: You are entirely free to choose whether to authorize your TikTok account to our platform;
- Minimum Necessity: We only request the minimum permissions necessary to provide the service;
- Informed Consent: You are fully aware of the scope and purpose of the permissions you grant before authorization;
- Withdrawable at Any Time: You may withdraw your authorization at any time; upon withdrawal, we will cease obtaining your data.
II. Authorization Process
When you bind an account through our platform, you will be redirected to the official TikTok authorization page, or use another supported authorization method (such as Login Kit or QR code login where available). You will need to log in to your account on the official TikTok page and, with full understanding, confirm the permission scope you are granting to our platform.
Important Commitment: Our platform does not obtain, collect, or store your TikTok account password. Regardless of the authorization method used, authentication takes place through TikTok's official authorization mechanisms. Our platform only receives the Access Token returned after successful authorization.
III. Permission Scope
The permissions you grant to our platform are strictly limited to the following functional requirements:
| Permission Scope | Purpose Description |
|---|---|
user.info.basic |
Read basic account information (such as open_id, avatar, and display name) for account identification and sign-in/account binding flows (including Login Kit) |
user.info.profile |
Read extended profile fields (such as profile_web_link, profile_deep_link, bio_description, and verification status) for profile display and account management |
user.info.stats |
Read statistical data (such as likes count, follower count, following count, and video count) for dashboard analytics and account insights |
video.list |
Read the list of your published videos and interaction data (views, likes, collections, shares, comments, etc.) for data analytics and display |
video.publish |
Directly post content to your TikTok profile where supported by Content Posting API |
video.upload |
Upload content as draft to your TikTok account for further editing and posting in TikTok where supported by Content Posting API |
| Webhook-related callback permissions approved by TikTok | Receive supported event callbacks from TikTok to process feature workflows and keep relevant statuses up to date |
Our Share Kit-based sharing features rely only on the above permissions and do not request any separate or additional TikTok scopes beyond those listed.
Our platform does not request any additional permissions beyond those stated above. If new permissions are required in the future, we will notify you in advance and obtain your re-authorization.
IV. Token Usage and Management
Usage Method: The obtained Access Token is used solely to periodically call the TikTok API to retrieve the latest data and to publish video content on your behalf, maintaining the normal operation of our platform's features. Token usage strictly follows the TikTok Developer Agreement and the principle of least privilege.
Security Measures: Your Access Token is encrypted using AES-256 and stored on our servers. Only authorized personnel have access in necessary scenarios, and regular security audits are conducted.
Authorization Revocation: You may revoke your authorization to our platform at any time through the "Cancel Authorization" feature within our platform or by directly logging in to the TikTok Developer Portal. Upon revocation, our platform will no longer be able to retrieve your data. Stored data will be handled in accordance with Part Two, Section IV ("Data Deletion") of this Policy.
V. Exceptions to Consent Requirement
Under relevant laws and regulations, we may process your personal information without obtaining your consent in the following circumstances:
- Necessary for the conclusion or performance of a contract to which you are a party;
- Necessary for fulfilling statutory duties or legal obligations;
- Necessary for responding to public health emergencies, or for protecting the life, health, or property safety of natural persons in emergency situations;
- Processing of personal information that you have made public or that has been lawfully made public, within a reasonable scope and in accordance with the law;
- Other circumstances provided for by laws and administrative regulations.
Part Four: Your Rights
You have the following rights regarding your personal information:
| Right | Operation Method | Response Time |
|---|---|---|
| Access Personal Information | View in the "Account Management" page within the platform | Immediate |
| Delete Account Information | "Account Management → Delete Account" within the platform | Immediate |
| Withdraw Consent (Cancel Authorization) | Cancel account authorization within the platform | Immediate |
| Cancel Account | Contact us via email to apply | Completed within 3 business days |
| Correct Personal Information | Contact us via email to apply | Within 3 business days |
| Obtain a Copy of Personal Information | Contact us via email to apply | Within 7 business days |
Part Five: Protection of Minors' Information
Our platform is not directed at children. If you are under the age of 13 (or the minimum age required by applicable law in your jurisdiction), please do not use our platform.
If we discover that we have collected personal information from a child in violation of applicable law, we will delete it promptly. If you are a parent or guardian and believe we may have collected personal information from a child, please contact us through the contact information provided below.
Part Six: Cookies and Similar Technologies
We do not use cookies for advertising or cross-site tracking. However, like most web services, we may use essential cookies or similar technologies (such as session cookies or local storage) that are necessary to provide login functionality, maintain your session, protect security, and ensure the Platform works properly.
Part Seven: Policy Updates
We may revise this Policy from time to time. For major changes, we will notify you through pop-up notifications or announcements within the platform and update the "Effective Date" at the top of this Policy.
If changes to third-party platform rules, API policies, or fees (including TikTok-related changes) affect how we collect, use, store, or delete personal information, we will update this Policy and related notices within a reasonable time after such changes become known to us.
Major changes include but are not limited to:
- Significant changes to our service model (e.g., purposes or methods of processing personal information);
- Significant changes to the primary parties with whom personal information is shared, transferred, or publicly disclosed;
- Significant changes to your rights regarding the processing of your personal information and the ways in which you may exercise those rights;
- Changes to our responsible department or contact information for personal information protection.
Part Eight: Contact Us
If you have any questions, comments, or suggestions regarding this Policy, or if you need to exercise your personal information rights, you may contact us through the following methods:
Email: lilililylyly267@gmail.com
Response Time: We will respond to your request within 15 business days.
The operator of yiyaotechai reserves the right to interpret this Privacy Policy to the extent permitted by applicable law.