Privacy Policy

Effective date: 2026-09-27 · Last updated: 2026-09-27

This Privacy Policy explains how Hunan Weiyan Machinery Technology Co., Ltd. ("we", "us") collects, uses, shares and protects personal information when you use OPC Console (the "Service"), available at https://weiyancn.com and its sub-domains. If you do not agree with this policy, please do not use the Service.

1. Who we are

The Service is operated by Hunan Weiyan Machinery Technology Co., Ltd., Shanghuang Group, Daping Community, High-tech Zone, Shuangfeng County, Loudi, Hunan Province, China. For any privacy question or request, contact us at support@weiyancn.com.

2. Information we collect

2.1 Information you give us

Account information: name, work email, username, role, password (stored only as a salted hash) and two-factor authentication secret (encrypted).
Business content: product information, brand guidelines, knowledge-base documents, images, videos, captions and other material your team uploads or creates in the Service.
Communications: messages you send us, such as support requests.

2.2 Information from connected platforms (including TikTok)

When you choose to connect a TikTok account through TikTok's official authorization (Login Kit), and only for the permissions you approve on TikTok's consent screen, we receive:

Data	Permission (scope)	Why we need it
Open ID, union ID, display name, avatar	`user.info.basic`	To identify the connected account and show your team which account content will be posted to.
Profile details and statistics (e.g. follower count, video count)	`user.info.profile`, `user.info.stats`	To display the account overview in the dashboard.
Your public videos and their metrics (views, likes, comments, shares)	`video.list`	To show how your own posts perform.
Access token and refresh token	(issued by TikTok)	To publish content and read data on your behalf, only after you approve each post.
Upload and publish status of content you send	`video.upload`, `video.publish`	To upload approved content and tell you whether publishing succeeded.

We request only the permissions needed for the features you use. Other platforms you connect (for example Shopify or Amazon) are handled in the same way: we receive only the data those platforms send under the permissions you grant.

2.3 Information collected automatically

Log and security data: IP address, browser type, time of access, pages and actions, and sign-in events. We use this to keep the Service secure (e.g. detecting brute-force attacks) and to maintain an audit trail of who approved and published what.
Cookies and local storage: only those strictly necessary to keep you signed in and remember your interface settings. We do not use advertising or cross-site tracking cookies.

3. How we use information

To provide the Service: store your catalog, generate content drafts, run safety checks, route drafts for human approval and publish approved content to the accounts you connected.
To show analytics about your own accounts and content.
To secure the Service, prevent abuse and keep audit records.
To communicate with you about the Service, including support and important changes.
To comply with legal obligations.

We do not sell personal information. We do not use data received from TikTok for advertising, profiling, or to train artificial-intelligence models. Data from TikTok is used only to provide the features you requested for the account you connected.

4. AI processing

To draft captions and other text, the Service sends your business content (such as product descriptions and brand guidelines) to AI model providers acting as our processors. We do not send TikTok access tokens, passwords, or TikTok user data other than what you place in a draft yourself. We use providers that commit not to train their models on data submitted through their business APIs.

5. How we share information

We share information only as follows:

With the platforms you connect — e.g. when you approve a post, the video and caption are sent to TikTok to be published on your account.
With service providers who process data on our behalf under contract: cloud hosting (Alibaba Cloud, Singapore region), AI model providers, and email delivery. They may use the data only to provide services to us.
For legal reasons — if required by law, or to protect the rights, safety and security of users, the public or us.
In a business transfer — if we are involved in a merger or acquisition, subject to this policy.

6. Data retention and deletion

Connected-account tokens are deleted immediately when you disconnect the account in the Service, or when we detect the authorization has been revoked in TikTok.
Data received from TikTok (profile and video metrics) is kept only while the account stays connected, and deleted within 30 days after disconnection.
Account and business content is kept for as long as your organization's account is active, and deleted within 30 days after the account is closed, unless we must keep it longer by law.
Security and audit logs are kept for up to 180 days.
Backups are overwritten on a rolling basis within 30 days.

7. Your choices and rights

Disconnect TikTok: use "Disconnect" on the channel settings page of the Service, or in the TikTok app go to Settings and privacy → Security → Apps and services permissions and remove OPC Console.
Access, correct, export or delete your personal information: email support@weiyancn.com. We will respond within 30 days.
Depending on where you live (for example the EU/UK under the GDPR, California under the CCPA/CPRA, or mainland China under the PIPL), you may have additional rights, such as objecting to or restricting processing, withdrawing consent, and lodging a complaint with a data-protection authority. We honor these rights as required by applicable law.

8. Security

We protect information with encryption in transit (HTTPS/TLS), encryption of tokens and secrets at rest, mandatory two-factor authentication for all users, role-based access control, rate limiting, firewalling, regular security checks and audit logging. No system is perfectly secure, but we will notify affected users and authorities of a data breach as required by law.

9. International transfers

The Service is hosted in Singapore. Your information may be processed in other countries where our service providers operate. Where required, we use appropriate safeguards such as standard contractual clauses.

10. Children

The Service is a business tool and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date and, for material changes, notify users by email or in the Service before the change takes effect.

12. Contact

Hunan Weiyan Machinery Technology Co., Ltd.
Shanghuang Group, Daping Community, High-tech Zone, Shuangfeng County, Loudi, Hunan Province, China
Email: support@weiyancn.com