Tuyaho

Privacy Policy

Last updated: October 13, 2026

This Privacy Policy explains what data Tuyaho processes when you use Tuyaho at https://tuyaho.com, why we use it, who receives it, and how you can access, correct, or delete it. It covers the public website, sign-in, the panel, and social connections, including TikTok.

1. Who is responsible

Tuyaho operates Tuyaho. For privacy and deletion requests email support@tuyaho.com. You can also use the data deletion page and the support form.

2. Who this covers

The panel is invite-only for creators and teams connecting their own accounts. It is not directed at children under 13, or under the minimum age required by their country or by the platform they connect. If we learn that we collected a child's data without the legal basis required, we delete it.

3. Data we collect

3.1 Panel account

  • Name, email address, user id, and, if an administrator sets it, role or invite.
  • A password stored as a hash. We do not store the password in plain text.
  • Interface language and session data needed to keep you signed in.

3.2 Content you submit

  • Videos, thumbnails, titles, descriptions, tags, and the network or networks you choose for publishing or scheduling.
  • Status logs for each send (queued, sent, error) so you can see what happened.

3.3 Network connections

When you click Connect we send you to that platform's official login. We receive only what the platform returns after you accept the permissions: account identifiers, display name, access tokens, and, when the platform provides one, a refresh token. We never ask for your TikTok, YouTube, Instagram, Facebook, X, or other network password.

3.4 TikTok

The TikTok integration uses the official TikTok for Developers API. The permissions we request are shown on TikTok's consent screen. The current set is:

  • user.info.basic: the account's open id, display name, and avatar, so we know which account was connected.
  • video.upload: send to your TikTok inbox the video you choose in the panel. TikTok does not post that video to your profile until you review and post it inside TikTok, unless you later approve an additional permission on TikTok's own screen.

We do not request your contacts, private messages, advertising data, or your TikTok password. If you later enable another permission, you will see it on TikTok's screen before you accept it, and we will use that permission only for the feature you just authorized.

3.5 Technical data

  • IP address, browser type, and access time, for security, diagnostics, and abuse prevention.
  • Strictly necessary session cookies. We do not use advertising cookies or cross-site tracking cookies.

4. Why we use the data

  • To create and protect your account and to show you the panel.
  • To connect the accounts you authorize and to publish or schedule only the content you submit.
  • To refresh access when a token expires, while the connection stays active.
  • To show you the result of each post and to report errors.
  • To handle support, comply with the law, and detect unauthorized use.

We do not sell personal data. We do not use your content or tokens to train our own models or for third-party advertising.

5. Legal bases

  • Contract: to provide the service you request when you register, sign in, and publish.
  • Consent: each network connection, which you give on that platform's screen and can withdraw by disconnecting.
  • Legitimate interests: account security, technical logs, and keeping the service running.
  • Legal obligation: when a competent authority requires us to keep or disclose data.

6. Who receives data

  • The network you choose. When you publish to TikTok, the video and the metadata you wrote are sent to TikTok under TikTok's own terms and privacy policy.
  • Providers that run the service: website hosting, support email, and, if you configure one, the proxy you attach to an account. They receive only what that function needs.
  • Authorities: when the law requires it, or to protect rights, safety, or the integrity of the service.

The site may be hosted outside your country. When that happens we take reasonable measures so access stays limited to providing the service.

7. How long we keep data

  • The account and panel content, while the account stays active.
  • Network tokens, until you disconnect that account, revoke access on the platform, or ask us to delete them.
  • Security and publishing logs, for as long as needed for support, billing where it applies, and security, and then deleted or anonymized.

8. Your rights

Depending on your country you may request access, correction, deletion, restriction, objection, or a copy of your data, and you may withdraw consent for a connection. For TikTok you can also:

  • Disconnect the account inside the panel.
  • Remove the app's access in TikTok Settings → Security and permissions → App permissions.
  • Email support@tuyaho.com or use Data deletion.

We reply within a reasonable time and, where the law sets a deadline, within that deadline. If you are not satisfied, you may complain to the data protection authority in your country.

9. Security

Panel access uses HTTPS. Passwords are stored as hashes and network tokens are used only for the account that authorized them. No method of transmission or storage is perfect. If you notice unexpected access, change your password and contact us.

10. Changes

If we make a material change to this policy, we update the date on this page. When a change affects a permission you already granted, we will ask for it again on the relevant platform. Continued use after the new version is published means you accept it, unless the law requires a separate consent.

11. Contact

Tuyaho · https://tuyaho.com · support@tuyaho.com