Effective date: August 30, 2026

Privacy Policy

This Privacy Policy explains how HuyiKuai handles personal information when creators use its website, TikTok Login Kit connection, and Content Posting API Direct Post workflow.

Operator and contact

HuyiKuai is operated by HU Junjie, an individual operator based in China (the "Operator," "HuyiKuai," "we," or "us"). The Operator is responsible for the personal information described in this policy. Privacy questions and requests may be sent to H1429311366@outlook.com.

Service availability

HuyiKuai is intended only for creators located in countries and regions where TikTok is lawfully available. It is not offered to users in mainland China or any other jurisdiction where TikTok is unavailable or prohibited.

Information we process

• TikTok authorization information: the authorization code used for token exchange, TikTok open identifier, approved scopes, access token, and connection status.
• Upload information: the size of the video selected by the creator, the TikTok upload URL and publish identifier returned for that request, and upload status.
• Technical information: IP address, browser and device information, request time, and security or error logs that may be processed by our hosting provider when the website is accessed.
• Support information: the email address and message content a person voluntarily sends to our support address.

Video handling

A video chosen by the creator is uploaded to HuyiKuai's secured temporary storage so it can be published immediately or at the creator-selected time. After the creator reviews the caption, privacy, interaction and disclosure settings and explicitly confirms posting, HuyiKuai transfers the video to TikTok through the Content Posting API Direct Post FILE_UPLOAD workflow. Temporary video files are automatically deleted under the retention periods described below.

How and why we use information

We process the information above only to:

• connect the TikTok account selected by the creator;
• perform the creator-requested immediate or scheduled Direct Post;
• maintain session security, diagnose errors, and prevent abuse;
• respond to support, privacy, and deletion requests; and
• comply with applicable legal obligations.

Depending on applicable law, these activities are based on performing the service requested by the user, the user's authorization or consent, legitimate interests in securing the service, and legal obligations.

TikTok permissions

The user.info.basic scope is used to identify the connected creator account. The video.publish scope is used to publish only after the creator selects a local video, reviews the posting settings and explicitly confirms the action. Although video.upload is included with the Content Posting API product, HuyiKuai does not request it during OAuth or use the draft-upload workflow. HuyiKuai does not sell TikTok data, use it for advertising, scrape TikTok, or use it for an unrelated purpose.

Cookies and local browser storage

HuyiKuai uses strictly necessary cookies to hold the TikTok access token and approved scope for up to 24 hours. The access-token cookie is marked Secure and HttpOnly. Temporary OAuth state and return-flow information are kept in browser session storage and normally disappear when the browser session ends. HuyiKuai does not use advertising or cross-site tracking cookies.

Disclosure and service providers

We do not sell personal information. Information may be disclosed only to TikTok to provide the requested TikTok feature, to Vercel as the website hosting and infrastructure provider, to professional advisers where necessary, or to authorities when required by applicable law.

International processing

The Operator, TikTok, Vercel, and their infrastructure may be located in different countries. Information may therefore be processed outside the user's country. Where required, we rely on applicable contractual, consent-based, or other lawful transfer mechanisms.

Retention

• TikTok session cookies expire after no more than 24 hours.
• OAuth state in session storage normally lasts only for the browser session.
• Videos awaiting publication are retained for no more than 30 days.
• After successful publication, temporary video files are retained for no more than 7 days and then automatically deleted.
• Support emails may be retained for up to 12 months after resolution.
• Security and request logs are retained only as long as reasonably needed for security, troubleshooting, and hosting operations, subject to the hosting provider's controls.

Information may be retained longer only when necessary to comply with law, resolve a dispute, or investigate abuse.

Security

We use HTTPS, restricted server-side handling of TikTok credentials, Secure and HttpOnly token cookies, and reasonable access controls. No internet service can guarantee absolute security. Users must not send us passwords, payment card details, or one-time verification codes.

Your choices and rights

Subject to applicable law, users may request access, correction, deletion, restriction, or a copy of their personal information, and may object to or withdraw consent for certain processing. TikTok authorization can be revoked through TikTok account settings. Requests can be made using the contact email above, and we may verify the requester's identity before responding. See also our Data Deletion Instructions.

Children

HuyiKuai is intended for adults and is not directed to anyone under 18. If we learn that we processed a child's personal information, we will take reasonable steps to delete it.

Changes to this policy

We may update this policy when the service or legal requirements change. The revised policy will be posted here with a new effective date. Where required by law, additional notice or consent will be provided.

Contact

Operator: HU Junjie (individual), China
Email: H1429311366@outlook.com