Platform review information

TikTok reviewer information

How YennayApps Social Publisher connects an authorised TikTok account, verifies account identity and sends approved media to TikTok as a draft for completion in the TikTok application.

Review information date: 4 September 2026

Current production integration boundary

The current supported TikTok workflow is draft upload through TikTok's Content Posting API. YennayApps sends approved content to the authorised creator's TikTok draft workflow. The creator then completes editing and posting inside TikTok.

A successful draft delivery is not a successful public TikTok publication. Direct Post is not currently enabled and would require a separate product decision, TikTok permission and approval process.

Reviewer credentials, environment-specific access instructions and any non-public test information are supplied privately through TikTok's review channel where required. No private credentials are published on this public site.

Product and application locations

The private operator application is authenticated. It is the operational workspace used by authorised operators, not the public product website.

The TikTok OAuth callback is https://publisher.yennayapps.com/api/publishing/tiktok/oauth/callback. Client secrets, OAuth tokens and internal account identifiers are not exposed here.

Requested TikTok permissions

user.info.basic

Used for basic TikTok account identity, including the open ID and basic profile information returned with the authorised account.

user.info.profile

Used to retrieve the authorised TikTok username/profile identity so YennayApps can verify that the operator connected the intended configured destination.

video.upload

Used to send approved media to the authorised creator's TikTok draft workflow for further editing and posting in TikTok.

The production review request should include only permissions actually required and demonstrated by this draft-upload workflow.

End-to-end reviewer flow

  1. 1
    Open the operator application

    Reviewer or operator opens publisher.yennayapps.com.

  2. 2
    Sign in

    Operator signs in using authorised credentials supplied privately where review access is required.

  3. 3
    Open Publishing > Connections

    Operator opens the connected-account management area.

  4. 4
    Select a configured TikTok destination

    Operator selects the TikTok destination they are authorised to manage.

  5. 5
    Choose Connect or Reconnect

    The application starts the TikTok connection flow for that configured destination.

  6. 6
    TikTok OAuth opens

    The operator is redirected to TikTok's authorisation experience.

  7. 7
    Authorise the intended TikTok account

    The operator grants the requested production permissions to the correct TikTok account.

  8. 8
    Verify authorised account identity

    The application displays returned account identity so the operator can confirm the intended destination was connected.

  9. 9
    Review prepared content

    The operator opens the prepared item intended for TikTok.

  10. 10
    Select the correct TikTok destination

    The operator confirms the configured TikTok account for this output.

  11. 11
    Generate or review the TikTok output

    The platform-specific output is prepared for operator review.

  12. 12
    Review media and caption

    The operator checks the final media and caption before submission.

  13. 13
    Send as a TikTok draft

    The operator explicitly initiates the approved draft upload through TikTok's Content Posting API.

  14. 14
    Open the TikTok creator workflow

    TikTok delivers the uploaded content to the creator workflow or inbox.

  15. 15
    Complete the post in TikTok

    The creator completes editing/posting inside TikTok. This is the step that turns the draft into a TikTok post.

Connected-account and data controls

  • Connected TikTok accounts are shown under Publishing > Connections in the authenticated operator application.
  • An authorised operator can disconnect the stored TikTok connection from that area.
  • After disconnection, reconnecting requires the TikTok OAuth flow again.
  • A TikTok user can also revoke YennayApps access using TikTok's own application/account controls where available.
  • Requests to delete YennayApps-held account-related data follow the public deletion and support guidance.

Reviewer checklist

  • Public product page is accessible without login.
  • Privacy Policy is accessible without login.
  • Terms of Service are accessible without login.
  • Support guidance is accessible without login.
  • TikTok OAuth connection flow can be reproduced using the private review access supplied through TikTok's review channel.
  • The authorised TikTok account identity can be verified after authorisation.
  • Disconnect and reconnect behavior can be reviewed in the authenticated operator application.
  • The operator can reproduce the explicit TikTok draft-upload workflow described above.
  • The creator completes editing/posting inside TikTok; the public site does not claim Direct Post authority.
  • No passwords, tokens, client secrets or reviewer credentials are published publicly.
  • Public pages remain usable on desktop and mobile.

URL verification readiness

The public site is static and can serve a TikTok-provided verification artifact from the exact public path required by TikTok. No verification token or signature is invented by YennayApps.

If TikTok supplies a verification file or value, it must be added exactly as provided, validated over HTTPS, and only then used in the Developer Portal verification step.