Last updated: 2026-09-05
Jiotte Tools are command-line tools run by one person on their own computer. They hold one OAuth token per platform, locally, and use them for two purposes: uploading that person's own videos to their own TikTok drafts inbox, and reading how that person's own published videos performed. There is no server, no database, no telemetry about whoever runs them, and no other users.
Nothing else is stored. In particular:
The video file being uploaded, its byte size, and the OAuth token that authorizes the upload. These go to TikTok's Content Posting API so the video can be placed in the authorizing account's drafts inbox. TikTok's own privacy policy governs what TikTok then does with it.
Nobody. There is no third-party processor, no advertising, no data sharing and no sale of data. There is no hosted backend to send anything to.
The OAuth token that authorizes the read, and the identifiers of the authorizing channel's own videos. Nothing else: no video file, no script, and no information about any other person. Google's own privacy policy governs what Google does with the request. Google's handling of it is governed by the Google Privacy Policy.
From TikTok, the video.upload scope, which allows placing a video in the
authorizing account's drafts inbox. It does not request permission to publish.
From Google, two read-only scopes on the authorizing channel:
https://www.googleapis.com/auth/youtube.readonly to list that channel's own
videos and their public view, like and comment counts, and
https://www.googleapis.com/auth/yt-analytics.readonly to read that channel's
own share count and average view percentage. Neither scope can write. Nothing is
requested about any other account, and no individual viewer is identified — the
platforms report totals for the operator's own uploads.
The numbers are written to a file on the operator's own computer, beside the identifier and title of the video they belong to, and read back by the operator to judge their own editorial choices. They are not transferred to anyone, not used for advertising, not used to develop or improve a machine-learning model, and not sold. Jiotte Tools' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
A token is kept until it is deleted or until the platform expires it. TikTok issues access tokens valid for 24 hours and refresh tokens valid for 365 days. Google's access tokens last an hour; its refresh token can also stop working if it is revoked, if the authorization stays unused, if the consent screen is left in testing, or if too many are issued. Deleting a token file removes it immediately; that tool then cannot act until it is authorized again.
The fetched counts are the operator's record of how their own videos did. Every run refreshes them, and the operator re-runs the tool at least every thirty days for as long as they keep the record. When authorization is withdrawn, or a video is deleted from the channel, the operator deletes that video's rows — and, because the file is kept in a git repository on the same computer, rewrites the history that holds them. Deleting the file removes the whole record.
Remove the app from the TikTok account's connected apps settings, and from myaccount.google.com/permissions for the Google side. That invalidates the stored token at the platform, whatever is left on disk. The token files can then be deleted from the operator's computer.
The tools are not directed at children and are not usable by anyone other than the operator who installed and authorized them.
This policy may be updated. The date at the top of this page is the date of the current version.
Questions or requests: jiotte-ai@googlegroups.com