yiyaotechai Privacy Policy
Last Updated: July 9, 2026 | Effective Date: July 9, 2026
yiyaotechai (hereinafter referred to as "we", "us", or "our") is developed and operated by Guangzhou Yiyao Technology Co., Ltd. We are dedicated to providing an efficient and secure quality content creation platform for enterprise content operations teams, brands, and creator teams. Contact email: business@yiyaotechai.com.
We understand the importance of your personal information. We will take appropriate security measures to protect your personal information in accordance with laws and regulations. Please read and fully understand this Privacy Policy before using our services.
Policy Highlights
To help you quickly understand this Policy, we first answer the following questions. Detailed rules appear in the sections below.
- What TikTok account, video, and interaction data we obtain: After you authorize, we obtain account identification and display information (such as open_id, nickname, avatar, bio, verification status, follower count, following count, likes count, and video count), as well as published video titles, publication times, share links, and interaction metrics (views, likes, collections, shares, comments, and similar data). We do not obtain or store your TikTok account password.
- Purposes of obtaining and using data: We use the data only to display account and work information on this Platform, aggregate content performance data, support content publishing and publish-status management, and maintain platform security and troubleshooting. We do not use it for advertising, automated decision-making, or user profiling.
- How data is stored and protected: Data is stored on encrypted servers. Platform passwords are stored as salted hashes. TikTok Access Tokens are encrypted with AES-256. Video files you upload for publishing are not retained on this Platform after publishing completes. Log information is kept for no more than 180 days.
- Whether we share data with third parties: We do not sell your personal information. Except when we transmit a work to TikTok because you initiated a publish, and except where required by law, we do not share your TikTok account, video, or interaction data with other third parties.
- How to revoke TikTok authorization: You may use Cancel Authorization on the "TK Account Authorization" page, or revoke access in the TikTok Developer Portal. After revocation, this Platform will stop retrieving new data for that account.
- How to request deletion of your platform account and related data: You may delete related account data in the Platform, or email business@yiyaotechai.com to request cancellation of your platform account and deletion of related data. Email requests will be completed within 3 business days, except where retention is required by law.
- Contact email: business@yiyaotechai.com
Part One: Business Scenarios
Our platform is a quality content creation platform for enterprise content operations teams, brands, and creator teams, primarily serving users in the United States, Mexico, and other international regions. We aim to offer smoother, clearer tools that help you simplify the full creative flow—from account authorization and publishing to performance review—so more energy goes to topics, style, and craft, and your creative potential stays front and center.
Core features of our platform include:
- Platform Account Registration and Login: Create a yiyaotechai platform account using a username and password to access and manage Platform features.
- Account Authorization and Collaborative Management (including Login Kit): Securely bind your TikTok accounts to our platform through the standard TikTok OAuth 2.0 authorization process, Login Kit, or other supported login methods (such as QR code login where available). View and manage authorized accounts in one workspace with fewer repeated logins and logouts.
- Account Tags and Organization: Apply optional content tags or labels to your bound TikTok accounts to classify and filter by content direction.
- Video Analytics Dashboard: Aggregate video performance data (views, likes, comments, shares, etc.) from your authorized accounts, presented through visual charts to help you identify quality content directions and refine creative style.
- Video Details Viewing: Centrally view complete information about your published videos, including titles, publication times, share links, and more, facilitating content archiving, performance tracking, and creative review.
- Content Publishing and Share Features: Switch among authorized accounts and publish videos (including draft and direct posting where supported) and share content through approved TikTok sharing capabilities, reducing repeated logins and uploads so quality work can be released more smoothly.
- Webhook-Driven Updates: For supported events, our platform may receive webhook notifications from TikTok to keep relevant statuses and workflows updated in near real time.
- Creative Video Guide and Reference Content: Browse tag-based creative guides, inspiration copy, and beginner-oriented suggestions to support topic planning, expression style, and content quality.
Important Notice: Our platform is an independently developed third-party tool and has no official affiliation or partnership with TikTok. We are committed to helping enterprise content operations teams, brands, and creator teams simplify the creative flow, manage their own accounts, and keep producing quality content.
Based on this business positioning, we process your personal information in the following scenarios:
Scenario 1: Platform Account Registration and Login
You may register and log in to yiyaotechai using a platform account (username and password) to access Platform features. Your platform account is separate from your TikTok account authorization.
Scenario 2: Account Authorization and Binding
You authorize your TikTok account to us through our platform via the standard TikTok OAuth 2.0 authorization process, Login Kit, or other supported authorization methods (such as QR code login where available), enabling viewing and management of authorized TikTok accounts' information and data within our platform. This scenario is a prerequisite for using all features of our platform.
Scenario 3: Video Data Display and Analytics
After you complete account authorization, we retrieve and display interaction metrics for your published videos, including views, likes, collections, shares, and comments. These are presented through visual dashboards to assist you in content performance evaluation, creative-style refinement, and creative decision-making.
Scenario 4: Video Details Viewing
We provide detailed information about your published videos (titles, publication times, share links, etc.) for content archiving, performance tracking, and creative review.
Scenario 5: Content Publishing
You may switch among authorized accounts and publish videos through our platform, reducing repeated logins and re-uploads so quality work can complete the publishing flow more smoothly.
Scenario 6: Account Tags and Organization
You may create or apply tags/labels to organize and filter your bound accounts by content direction. Tags are optional and used solely for your own organization within the Platform.
Scenario 7: Creative Video Guide and Reference Content
You may browse creative guides, inspiration copy, and other reference materials to support topic planning and content-quality improvement. In general, this content can be viewed without providing additional personal information beyond what is necessary for Platform access and basic usage analytics/security.
Scenario 8: Webhook Event Handling
For approved webhook integrations, we may receive event notification payloads from TikTok (for example, publishing status or related callback data) to process feature workflows, update status displays, and improve service reliability.
Scenario 9: Platform Operation and Security Maintenance
To ensure the normal operation of our platform, prevent malicious use, troubleshoot technical issues, and optimize service experience, we record relevant system data during your use of the platform.
Part Two: Data Flow
This section details the full lifecycle of your personal information, from collection and storage to usage and deletion.
I. Data Collection
We collect your personal information in the following scenarios:
| Collection Scenario | Types of Information Collected | Collection Method | Collection Frequency |
|---|---|---|---|
| Platform Account Registration and Login | Username, password (stored as a salted hash, not in plain text), account creation time, and related authentication records | Actively provided by you and processed by the system for authentication | At registration and each login |
| Account Authorization | OAuth Access Token, open_id, TikTok nickname, profile picture, bio, verification status, follower count, following count, likes count, video count | Automatically obtained via OAuth 2.0 authorization flow or other supported authorization methods (such as QR code login where available) | One-time, only when you actively authorize an account |
| Video Data Retrieval | Video ID, video titles, publication times, share links, and interaction data (views, likes, collections, shares, comments) | Automatically obtained via TikTok API | Real-time each time you refresh or view data |
| Content Publishing | Video files, titles, descriptions, and other publishing content | Actively uploaded and submitted by you | Each time you publish |
| Webhook Event Notifications | Event callback payloads and related metadata provided by TikTok for supported webhook events | Automatically received from TikTok through approved webhook subscriptions | When subscribed events are triggered |
| Platform Usage | IP address, access time, operation records | Automatically recorded by the system | Recorded with each request |
| Issue Troubleshooting | Error logs, usage frequency data, crash reports | Automatically collected by the system | Recorded when errors or exceptions occur |
II. Data Storage and Protection
Storage Location: All data is stored on secure, encrypted servers (currently located in the United States).
Protection Measures: We implement industry-standard security measures, including encryption in transit, access control, and regular security audits. Platform account passwords are stored as salted hashes (not in plain text). Your TikTok Access Token is encrypted using AES-256 and accessed only by authorized personnel in necessary scenarios. We do not obtain or store your TikTok account password.
Storage Periods:
| Information Type | Storage Period | Basis for Determination |
|---|---|---|
| Platform Account Credentials and Authentication Records | Until you delete your platform account, subject to legal retention requirements | Necessary for account authentication, security, and fraud prevention |
| OAuth Access Token | Until you actively cancel authorization or delete your account | You may cancel authorization at any time; the token becomes invalid immediately upon cancellation |
| TikTok Account Information (nickname, profile picture, follower count, etc.) | Throughout the account's active period | Necessary for providing the service |
| Video Data (views, likes, etc.) | Throughout the account's active period | Necessary for providing the service |
| Publishing Content (video files, titles, descriptions, etc.) | Cleared immediately after publication | Used solely for transmission to TikTok; no copies retained |
| Webhook Event Notification Data | Retained only as long as needed for event processing, status synchronization, troubleshooting, and security review | Necessary to support webhook-based workflows and maintain service reliability |
| Log Information (IP address, access time) | No more than 180 days | Used for issue troubleshooting; automatically anonymized after expiration |
III. Data Usage
Collected and stored data is used solely for the following purposes:
- Displaying account information and video data on your personal dashboard for your review and analysis;
- Generating trend charts, performance rankings, and other analytical results to help you identify quality directions and refine creative style;
- Enabling you to switch among authorized accounts and publish videos so quality content can be released more smoothly;
- Processing webhook event notifications to update publishing or account-related statuses and support workflow automation where enabled;
- Ensuring platform operation security and preventing malicious use;
- Troubleshooting technical issues and optimizing service experience.
Usage Restrictions: We do not use your data for any purposes not explicitly authorized by you, nor do we engage in automated decision-making or user profiling based on your data.
IV. Data Deletion
You may initiate data deletion or account cancellation as follows:
| Action | Scope of Data Deletion | Effective Time |
|---|---|---|
| Revoke TikTok authorization: Cancel Authorization on the "TK Account Authorization" page, or revoke access in the TikTok Developer Portal | The Access Token for that account becomes immediately invalid; this Platform stops retrieving new data for that account | Immediate |
| Delete Account | All personal data (including account information, video data, and logs) | Immediate |
| Email request to cancel the platform account and related data: send to business@yiyaotechai.com, including your platform username and deletion request | All personal data (same scope as Delete Account) | Completed within 3 business days |
Important Notice: Deletion operations are irreversible. Please proceed with caution. This does not apply to data that must be retained under applicable laws and regulations.
Local Copy Reminder: If you have exported, downloaded, or otherwise stored TikTok-related data locally on your own devices or systems, you are responsible for deleting those local copies after account cancellation, authorization revocation, or feature termination, unless retention is required by law.
V. Data Sharing Restrictions
We do not sell your personal information. Except in the following cases, we do not share your TikTok account, video, or interaction data with any company, organization, or individual:
- To complete a publish you initiated: When you submit a publish on this Platform, we transmit the work you uploaded and the publish settings you chose to TikTok so the post or draft can be created on your authorized account. This is necessary to provide publishing and is not a sale of data to other third parties;
- After obtaining your explicit consent: We may share specific information after obtaining your separate consent;
- Legal requirements: As required by laws, regulations, litigation dispute resolution, or by competent administrative or judicial authorities.
We do not transfer your personal information to any company, organization, or individual, except in the following cases:
- After obtaining your explicit consent;
- In the event of mergers, acquisitions, or bankruptcy liquidations, if personal information transfer is involved, we will require the new holder to continue to be bound by this Policy; otherwise, we will require the new holder to obtain your authorization and consent anew.
We do not publicly disclose your personal information, except with your separate consent or as required by law.
Part Three: User Authorization Method
I. Authorization Principles
Our platform adheres to the following authorization principles:
- Voluntary Authorization: You are entirely free to choose whether to authorize your TikTok account to our platform;
- Minimum Necessity: We only request the minimum permissions necessary to provide the service;
- Informed Consent: You are fully aware of the scope and purpose of the permissions you grant before authorization;
- Withdrawable at Any Time: You may withdraw your authorization at any time; upon withdrawal, we will cease obtaining your data.
II. Authorization Process
When you bind an account through our platform, you will be redirected to the official TikTok authorization page, or use another supported authorization method (such as Login Kit or QR code login where available). You will need to log in to your account on the official TikTok page and, with full understanding, confirm the permission scope you are granting to our platform.
Important Commitment: Our platform does not obtain, collect, or store your TikTok account password. Regardless of the authorization method used, authentication takes place through TikTok's official authorization mechanisms. Our platform only receives the Access Token returned after successful authorization.
III. Permission Scope
The permissions you grant to our platform are strictly limited to the following functional requirements:
| Permission Scope | Purpose Description |
|---|---|
user.info.basic |
Read basic account information (such as open_id, avatar, and display name) for account identification and sign-in/account binding flows (including Login Kit) |
user.info.profile |
Read extended profile fields (such as profile_web_link, profile_deep_link, bio_description, and verification status) for profile display and account management |
user.info.stats |
Read statistical data (such as likes count, follower count, following count, and video count) for dashboard analytics and account insights |
video.list |
Read the list of your published videos and interaction data (views, likes, collections, shares, comments, etc.) for data analytics and display |
video.publish |
Directly post content to your TikTok profile where supported by Content Posting API |
video.upload |
Upload content as draft to your TikTok account for further editing and posting in TikTok where supported by Content Posting API |
| Webhook-related callback permissions approved by TikTok | Receive supported event callbacks from TikTok to process feature workflows and keep relevant statuses up to date |
Our Share Kit-based sharing features rely only on the above permissions and do not request any separate or additional TikTok scopes beyond those listed.
Our platform does not request any additional permissions beyond those stated above. If new permissions are required in the future, we will notify you in advance and obtain your re-authorization.
IV. Token Usage and Management
Usage Method: The obtained Access Token is used solely to periodically call the TikTok API to retrieve the latest data and to publish video content on your behalf, maintaining the normal operation of our platform's features. Token usage strictly follows the TikTok Developer Agreement and the principle of least privilege.
Security Measures: Your Access Token is encrypted using AES-256 and stored on our servers. Only authorized personnel have access in necessary scenarios, and regular security audits are conducted.
Authorization Revocation: You may revoke TikTok authorization at any time using Cancel Authorization on the "TK Account Authorization" page, or by logging in to the TikTok Developer Portal. Upon revocation, our platform will no longer be able to retrieve your data. Stored data will be handled in accordance with Part Two, Section IV ("Data Deletion") of this Policy.
V. Exceptions to Consent Requirement
Under relevant laws and regulations, we may process your personal information without obtaining your consent in the following circumstances:
- Necessary for the conclusion or performance of a contract to which you are a party;
- Necessary for fulfilling statutory duties or legal obligations;
- Necessary for responding to public health emergencies, or for protecting the life, health, or property safety of natural persons in emergency situations;
- Processing of personal information that you have made public or that has been lawfully made public, within a reasonable scope and in accordance with the law;
- Other circumstances provided for by laws and administrative regulations.
Part Four: Your Rights
You have the following rights regarding your personal information:
| Right | Operation Method | Response Time |
|---|---|---|
| Access Personal Information | View in the "Account Management" page within the platform | Immediate |
| Delete Account Information | "Account Management → Delete Account" within the platform | Immediate |
| Withdraw Consent (Cancel Authorization) | Cancel Authorization on the "TK Account Authorization" page, or revoke access in the TikTok Developer Portal | Immediate |
| Cancel Account | Email business@yiyaotechai.com to apply | Completed within 3 business days |
| Correct Personal Information | Email business@yiyaotechai.com to apply | Within 3 business days |
| Obtain a Copy of Personal Information | Email business@yiyaotechai.com to apply | Within 7 business days |
Part Five: Protection of Minors' Information
Our platform is not directed at children. If you are under the age of 13 (or the minimum age required by applicable law in your jurisdiction), please do not use our platform.
If we discover that we have collected personal information from a child in violation of applicable law, we will delete it promptly. If you are a parent or guardian and believe we may have collected personal information from a child, please contact us through the contact information provided below.
Part Six: Cookies and Similar Technologies
We do not use cookies for advertising or cross-site tracking. However, like most web services, we may use essential cookies or similar technologies (such as session cookies or local storage) that are necessary to provide login functionality, maintain your session, protect security, and ensure the Platform works properly.
Part Seven: Policy Updates
We may revise this Policy from time to time. For major changes, we will notify you through pop-up notifications or announcements within the platform and update the "Effective Date" at the top of this Policy.
If changes to third-party platform rules, API policies, or fees (including TikTok-related changes) affect how we collect, use, store, or delete personal information, we will update this Policy and related notices within a reasonable time after such changes become known to us.
Major changes include but are not limited to:
- Significant changes to our service model (e.g., purposes or methods of processing personal information);
- Significant changes to the primary parties with whom personal information is shared, transferred, or publicly disclosed;
- Significant changes to your rights regarding the processing of your personal information and the ways in which you may exercise those rights;
- Changes to our responsible department or contact information for personal information protection.
Part Eight: Contact Us
If you have any questions, comments, or suggestions regarding this Policy, or if you need to exercise your personal information rights (including requesting deletion of your platform account and related data), you may contact us through the following methods:
Operator: Guangzhou Yiyao Technology Co., Ltd.
Contact email: business@yiyaotechai.com
Response Time: We will respond to your request within 15 business days.
Guangzhou Yiyao Technology Co., Ltd. reserves the right to interpret this Privacy Policy to the extent permitted by applicable law.