Last updated: May 11, 2026
HUAYU DIANA Publisher ("we", "our", "the Service") is a web tool that allows any registered user to connect their own TikTok account and publish videos to TikTok. This Privacy Policy describes what data we collect, how we use it, and your rights.
1. Information We Collect
- Account information: Your email address and password (stored as a secure hash) when you register.
- TikTok OAuth data: After you authorize via TikTok OAuth, we store your TikTok display name, avatar URL, open_id, and the OAuth access and refresh tokens needed to publish on your behalf.
- Uploaded videos: Video files you upload are stored temporarily on our servers. Files are deleted automatically after a successful publish, or within 48 hours.
- Publish history: We store metadata about each video you publish (caption, status, timestamp). We do not store the video content after publishing.
2. How We Use Your Information
- To authenticate you and associate your TikTok accounts with your profile.
- To upload videos and publish them to TikTok using your authorized credentials.
- To display your publish history in your dashboard.
- We do not sell, share, or disclose your data to third parties, except to TikTok as required to operate the publishing feature.
3. TikTok API Scopes
We request the following TikTok API scopes:
- video.publish — to publish videos to your TikTok account on your request.
- video.upload — to upload video files to TikTok's servers prior to publishing.
We do not access your TikTok followers, messages, analytics, or any data beyond what is listed above.
4. Data Retention
- Video files are deleted from our servers immediately after a successful publish, or within 48 hours at most.
- Publish history records are retained for up to 1 year.
- TikTok tokens are stored for as long as your account is active. You may revoke them at any time by disconnecting your TikTok account.
5. Your Rights and Data Deletion
You may request deletion of all your data at any time by visiting our Data Deletion page. We will process your request within 30 days. You may also revoke TikTok access directly in your TikTok account settings at tiktok.com/settings.
6. Security
Passwords are stored using bcrypt hashing. OAuth tokens are stored server-side and never exposed to other users. All connections use HTTPS.
7. Contact
For privacy questions, contact us at: privacy@huayu.ltd