.png)
TikTok Integration
1What NK AI Studio is
NK AI Studio is a web-based content production and brand management platform for individual creators and small brand owners. It runs entirely in the browser at nkstudio.org.
Inside the editor a user plans a campaign, generates the script, images, video and voice-over with AI, and reviews the finished asset. Only after the user explicitly approves that exact asset on screen is it published to the user's own connected social accounts. After publishing, the user can see how each post performed and use that to plan the next one.
TikTok is one of the supported destinations, alongside YouTube, Instagram, Facebook, Threads and X. Connecting a TikTok account is entirely optional — the rest of the product works without it.
Human approval is mandatory. Nothing is ever posted automatically, on a schedule, or in bulk. Every single post requires a confirmation step in which the caption, the media, the audience setting and the content disclosures are shown before the post is sent.
2How the TikTok integration works
Four steps, in this order. Every step that touches TikTok is shown below with a screenshot of the actual product UI.
1
Connect
user.info.basic
The user opens Settings > SNS Connections and presses Connect TikTok. They are redirected to TikTok's own authorization page, grant consent there, and return to
https://nkstudio.org/auth/tiktok/callback. We then call TikTok's user info endpoint exactly once and read only open_id, display_name and username, so the connected account name is visible on the screen from that point on.
2
Create
no TikTok data used
The user produces the content inside NK AI Studio — scenario, images, video, narration and caption. This step uses no TikTok data and calls no TikTok API. The finished asset is stored in that user's own private storage.
3
Review & Approve
video.publish
Pressing Publish to TikTok does not publish anything. We first query TikTok's
creator_info endpoint and build a confirmation dialog from the response. In that dialog the user sees the creator nickname and a preview of the media and caption, and must:
- choose who can view this video from the privacy levels the account allows — no option is pre-selected, and the Post button stays disabled until one is chosen;
- set the Comment / Duet / Stitch toggles, with any interaction the creator has disabled shown as unavailable;
- declare whether the post is commercial content — "Your brand" and/or "Branded content" — and confirm the resulting "Promotional content" / "Paid partnership" label, next to links to TikTok's Branded Content Policy and Music Usage Confirmation.
4
Publish & Measure
video.publish · video.list
We show posting progress while TikTok processes the upload, then a link to the published post. Later, on the Analytics dashboard, the user can sync their recent TikTok videos and see view, like, comment and share counts for their own posts, so they can compare what worked and plan the next piece of content.
3Permissions we request
We request three scopes. We do not request video.upload.
| Scope | What we access | Why | What we store |
|---|---|---|---|
user.info.basicLogin Kit |
A single call to the user info endpoint immediately after the OAuth token exchange, requesting only open_id, display_name, username. |
display_name and username are shown on the SNS Connections screen and again in the publish confirmation dialog, so that before approving a post the user can visually confirm which TikTok account the content will be sent to. Our users often manage more than one brand account. open_id is the internal key that binds the stored token and the performance data to the correct account. |
open_id, display_name, username, and the access/refresh tokens. Nothing else — no followers, following, likes, bio or avatar. |
video.publishContent Posting API — Direct Post |
creator_info/query for the creator nickname, allowed privacy levels, max duration and comment/duet/stitch availability; then video/init or content/init to send the approved post; then status/fetch to follow its progress. |
This is the core feature of the product and the reason we integrate with TikTok at all: publishing the asset the user created and approved inside NK AI Studio to their own TikTok account, with the audience and disclosure settings they chose on screen. | The returned publish_id and the resulting post id and URL, so the user can open their own post from our interface and so performance data can be matched to it. |
video.listDisplay API |
For up to 20 of the user's most recent videos: id, title, video_description, duration, cover_image_url, embed_link, create_time, like_count, comment_count, share_count, view_count. |
Shown to that same user as a performance table and charts, so they can compare how content published through NK AI Studio performed against their other posts. cover_image_url renders the thumbnail and embed_link sends the user back to the original video on TikTok. The aggregate counts feed our planning tool, which suggests what to produce next. |
The listed metrics plus the video id and embed link, in that user's private record, refreshed on each sync. We never download or re-host TikTok video files. |
Media delivery: videos are sent with FILE_UPLOAD — our server reads the file from the user's private storage and uploads it straight to TikTok, so the video is never exposed on a public URL. Photo posts must use PULL_FROM_URL, which requires a verified domain, so those images are served through https://nkstudio.org/api/sns/tiktok-media, a proxy on our own verified domain that streams the user's file only when accompanied by a short-lived HMAC-SHA256 signed token generated at publish time.
Before app approval: until this app passes TikTok's review, our server forces
privacy_level to SELF_ONLY regardless of what the user selects, so that no post created through our app can become publicly visible before review is complete.
4What we never do
- No automatic or unattended posting. There is no scheduler, no bulk poster and no bot. Every post passes through the confirmation dialog described above.
- No exposure to other users. One user's TikTok data is never shown to any other NK AI Studio user, and never aggregated across accounts.
- No selling and no model training. TikTok data is never sold, never used for advertising, and never used to train any AI model.
- No re-hosting of TikTok videos. We store metrics and links only. Video files stay on TikTok, and thumbnails and embed links send traffic back there.
- No use of TikTok as a login provider. Users sign in to NK AI Studio with their own NK AI Studio account. TikTok authorization is used solely to establish the publishing connection.
- No posting of content the user has not seen. The media is content the user created inside NK AI Studio and approved on screen.
5Data retention & deletion
- All TikTok data is scoped to the single NK AI Studio user who authorized it.
- Tokens and TikTok data are kept in a private per-user object in Google Cloud Storage, encrypted at rest. Access tokens are refreshed through TikTok's token endpoint using the refresh token.
- Disconnecting: the user can disconnect TikTok at any time from Settings > SNS Connections. This immediately deletes the stored tokens and all cached TikTok data.
- Account deletion: deleting the NK AI Studio account deletes everything, including all TikTok tokens and cached metrics.
- You may also request deletion by email at any time — see the contact section below.
Full details are in our Privacy Policy and Terms of Service.
6Contact
Support Email
[email protected]
Response Time
Within 3 business days
Operator
NK Studio
Help Center
nkstudio.org/support