Privacy Policy

Effective Date: September 10, 2026

MoShiyihu (“we,” “us,” or “our”) operates the creator publishing service available at https://yhtk.moshiyihu.com/ (the “Service”).

This Privacy Policy explains what information we collect, how we use and protect it, and the choices available to users when using our Service, including when connecting a TikTok account through TikTok’s official authorization process.

1. Information We Collect

Account Information

When you create an account on our Service, we may collect information such as:

• Your name
• Email address
• Password in securely hashed form
• Account status
• Login and account activity information

We do not store your account password in plain text.

TikTok Account Information

When you choose to connect your TikTok account, you are redirected to TikTok’s official OAuth authorization interface.

Depending on the permissions you approve, TikTok may provide us with information such as:

• TikTok user or creator identifier
• Display name or nickname
• Username
• Profile image
• Basic profile information
• Account statistics where authorized
• Video information where authorized
• Access and refresh tokens
• Permissions or scopes that you approved

We only request access to information required to provide features that you choose to use.

Your TikTok password is never provided to or collected by us.

Content and Publishing Information

When you use our publishing features, we may process:

• Videos that you choose to upload or publish
• Video captions and descriptions
• Privacy settings
• Comment, Duet, and Stitch preferences where supported
• Commercial-content disclosure settings
• Other publishing options selected by you
• TikTok publishing identifiers
• Video processing and publishing status
• Error and diagnostic information related to publishing

Content is submitted to TikTok only after the user intentionally initiates and confirms the relevant upload or publishing action.

Technical and Security Information

We may collect technical information necessary to operate and protect the Service, including:

• IP address
• Browser and device information
• Login timestamps
• Security logs
• Application errors
• API request status information

This information is used primarily for authentication, security, abuse prevention, troubleshooting, and reliable operation of the Service.

2. How We Use Information

We use collected information to:

• Create and manage user accounts
• Authenticate users
• Connect TikTok accounts authorized by users
• Display authorized TikTok account information
• Upload or publish content selected by users
• Retrieve information about videos where authorized
• Display publishing history and processing status
• Maintain TikTok authorization sessions
• Protect the Service against unauthorized access and abuse
• Diagnose technical problems
• Comply with applicable laws and platform requirements

We do not use TikTok information to send unsolicited messages, automatically publish content without user instruction, or access TikTok accounts that have not authorized our application.

3. TikTok Integration

Our Service integrates with TikTok using TikTok’s official developer APIs and OAuth authorization process.

Connecting a TikTok account is optional.

When connecting TikTok, users are shown TikTok’s authorization page and can decide whether to approve the requested permissions.

Depending on the functionality enabled for our application, these permissions may include TikTok scopes related to:

• Basic user information
• Profile information
• User statistics
• Video information
• Video uploading
• Video publishing

We use each permission only to provide the corresponding functionality requested by the user.

MoShiyihu is an independent service and is not affiliated with, endorsed by, or sponsored by TikTok.

TikTok’s own handling of information is governed by TikTok’s applicable Terms of Service and Privacy Policy.

4. User Control and Consent

Users remain in control of their TikTok account and content.

We do not publish videos to TikTok without a user-initiated action.

Before publishing content, users can review the content and applicable publishing settings and explicitly choose whether to proceed.

Users may choose not to connect TikTok and may disconnect their TikTok account from our Service.

Users may also revoke our application’s access through their TikTok account settings.

After authorization is revoked, we will no longer be able to access TikTok information through the revoked authorization.

5. How We Share Information

We do not sell or rent personal information.

We may share information only when necessary to operate the Service, including with:

• TikTok, when you direct us to access TikTok functionality or submit content
• Hosting, infrastructure, database, and security service providers used to operate the Service
• Government authorities or other parties when disclosure is required by applicable law
• A successor organization in connection with a lawful merger, acquisition, restructuring, or sale of assets

Third-party service providers are permitted to process information only as necessary to provide their services to us and subject to applicable contractual and legal obligations.

6. Data Security

We use reasonable technical and organizational safeguards to protect information handled by the Service.

These measures include, where appropriate:

• Password hashing
• Encrypted storage of TikTok access and refresh tokens
• Server-side storage of TikTok credentials
• Access controls
• Session security
• CSRF protection
• Login rate limiting
• Separation of individual user data
• Security logging and monitoring

TikTok access and refresh tokens are not intentionally exposed in the user’s browser.

No internet service can guarantee absolute security, but we work to protect information using safeguards appropriate to the nature of the data.

7. Data Retention

We retain personal information only for as long as reasonably necessary to:

• Provide the Service
• Maintain your account
• Maintain publishing records requested by users
• Protect the Service
• Resolve technical issues
• Meet applicable legal requirements

When information is no longer required, we may delete or anonymize it according to our data retention practices.

8. Disconnecting TikTok and Deleting Data

You may disconnect your TikTok account from the Service at any time.

You may also revoke our application’s authorization directly through TikTok.

Users may request deletion of their Service account and associated personal information.

When a valid deletion request is received, we will delete or anonymize personal information that is no longer required for legal, security, fraud-prevention, or legitimate operational purposes.

Revoking TikTok authorization prevents future access through the revoked token but does not automatically delete information previously stored by our Service. Users may separately request deletion of stored information.

9. Your Rights

Depending on where you live, applicable privacy laws may provide rights including the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of personal information
• Restrict or object to certain processing
• Request a copy of certain information
• Withdraw consent where processing is based on consent

We may need to verify your identity before completing certain requests.

10. Children’s Privacy

The Service is not intended for children who do not meet the minimum age requirements applicable to TikTok or the laws of their jurisdiction.

We do not knowingly collect personal information from children in violation of applicable law.

If we become aware that such information has been collected improperly, we will take reasonable steps to delete it.

11. International Processing

Because online services may use infrastructure located in different countries or regions, information may be processed outside the country where a user resides.

Where required by applicable law, we take appropriate measures to protect information transferred internationally.

12. Changes to This Privacy Policy

We may update this Privacy Policy when our Service, TikTok integration, legal requirements, or privacy practices change.

The latest version will always be published on this page with the updated effective date.

13. Contact Us

If you have questions about this Privacy Policy, your personal information, or a request to access or delete your information, please contact the operator of the Service through:

MoShiyihu
Website: https://yhtk.moshiyihu.com/

TikTok Notice: TikTok is a trademark of its respective owner. MoShiyihu is an independent software service and is not affiliated with or endorsed by TikTok.