Privacy Policy

Last updated: 2026-08-26

Summary

Jiotte Uploader is a command-line tool run by one person on their own computer. It holds one TikTok OAuth token, locally, and uses it for one purpose: uploading that person's own videos to their own TikTok drafts inbox. It has no server, no database, no analytics, and no other users.

What is stored, and where

• A TikTok OAuth access token and refresh token. Written to a file on the operator's own computer, readable only by the operator's user account. It is never sent anywhere except to TikTok's own API endpoints.
• The video files the operator produced. They were already on that computer; the tool reads them in order to upload them.

Nothing else is stored. In particular:

• No profile information, follower data, or content belonging to other TikTok users.
• No usage statistics, telemetry, crash reports or logs sent off the machine.
• No cookies, trackers, fonts or scripts loaded from third parties — not by the tool, and not by these pages, which are static HTML making no external requests.

What is sent to TikTok

The video file being uploaded, its byte size, and the OAuth token that authorizes the upload. These go to TikTok's Content Posting API so the video can be placed in the authorizing account's drafts inbox. TikTok's own privacy policy governs what TikTok then does with it.

Who else receives data

Nobody. There is no third-party processor, no advertising, no data sharing and no sale of data. There is no hosted backend to send anything to.

Permissions requested

The tool requests the video.upload scope only, which allows placing a video in the authorizing account's drafts inbox. It does not request permission to publish, to read the account's content, or to act on any other account.

How long it is kept

The token is kept until it is deleted or until TikTok expires it. TikTok issues access tokens valid for 24 hours and refresh tokens valid for 365 days. Deleting the token file removes it immediately; the tool then cannot act until it is authorized again.

Revoking access

Remove the app from the TikTok account's connected apps settings. That invalidates the stored token on TikTok's side, whatever is left on disk. The token file can then be deleted from the operator's computer.

Children

The tool is not directed at children and is not usable by anyone other than the operator who installed and authorized it.

Changes

This policy may be updated. The date at the top of this page is the date of the current version.

Contact

Questions or requests: jiotte-ai@googlegroups.com