MatrixHubxPlatform review brief
Review brief · Last updated 2026-10-30

How MatrixHubx uses platform APIs

MatrixHubx is a content operations platform for brands and agencies. Teams prepare material, route it through human approval, publish it to accounts they own, and read back performance data. Every platform connection is an official OAuth authorization granted by the account owner.

No login required. This page and the homepage are public — reviewers can open them directly, with no account, invite or password. The privacy policy and terms of service are linked below and require no gate.
Official OAuth onlyNo password collection, no browser automation
Human approvalEach post is confirmed by a person before it goes out
Per-account consentConnect and revoke one account at a time
Deletion in 30 daysIn-app disconnect, email, or TikTok settings

1. What MatrixHubx is

MatrixHubx helps a brand or agency run content for the social accounts it manages. The workflow is: upload material → adapt it per platform → a human reviews and approves → the post is published through the platform's official API → results are read back for reporting.

Accounts are connected one by one by the person who controls them. There is no bulk account creation, no credential sharing between customers, and no attempt to bypass platform rate limits or review processes.

2. TikTok Login Kit — why we need it

Use case

A customer clicks Connect TikTok in MatrixHubx. TikTok Login Kit opens TikTok's own authorization screen. After the customer approves, we receive an access token and the basic profile data needed to show which account is connected and to attribute the posts and analytics that follow.

Without Login Kit we could not tell one TikTok account from another, could not show the customer which account a scheduled post belongs to, and could not display that account's own performance data.

Scopes requested

  • user.info.basic — OpenID and basic identity, to bind the account to the right workspace.
  • user.info.profile — avatar, display name and profile link, so the customer can recognize the account in the UI.
  • user.info.stats — follower and video counts, shown only inside the customer's own dashboard.
  • video.list — the account's public videos, to reconcile published posts and report results.

We request only the scopes needed for the features the customer switches on. Scopes are declared on TikTok's consent screen, and the customer can decline.

No password, no workaround. MatrixHubx never asks for a TikTok password and never automates the TikTok app or website. Login is TikTok's own OAuth flow; the token can be revoked by the customer at any time.

3. TikTok Share Kit — how we contribute content

Use case

When a creative has passed human review, the operator taps Share to TikTok. Share Kit opens TikTok's composer with the approved video preloaded. The operator can still edit the caption, cover and settings inside TikTok, then confirms the post in TikTok's own interface.

Share Kit is the path we use when the customer wants to hand a finished, human-approved asset to TikTok and let the creator finish the post in TikTok. It is a hand-off, not a background upload.

Content quality

  • Content is created or commissioned by the brand, then edited by a person before it reaches Share Kit.
  • AI-assisted drafts are labelled, and the operator is prompted to disclose AI-generated content where the platform requires it.
  • We do not repost other creators' videos, scrape TikToks, or generate variations purely to flood the feed.
  • One approved asset is shared once, to the account the customer selected; there is no fan-out to unconnected accounts.

4. Publishing boundary

Where a customer uses TikTok's Content Posting API instead of Share Kit, the same boundary applies:

  • User-initiated. A post is created only after the operator selects the asset, the account and the time, and confirms the action in MatrixHubx.
  • One post, one confirmation. Scheduling a post does not authorize an unlimited stream of posts; each item in the calendar is approved individually.
  • No bulk or unattended posting. We do not offer account farms, auto-generated posting loops, or "set it and forget it" mass publishing.
  • No retry after a policy rejection. Transient network or rate-limit errors may retry; a rejection by TikTok's review is shown to the operator and is never retried automatically.
  • Private until audited. If the TikTok client is not yet approved for public posting, posts remain private, as required by TikTok's API.

5. Data we access and why

DataSourcePurposeRetention
OpenID / UnionIDTikTok Login KitBind the TikTok account to the correct workspace; avoid duplicate connectionsUntil disconnect + 30 days
Avatar, display name, profile linkLogin Kit (user.info.profile)Show the operator which account is connectedUntil disconnect + 30 days
Follower / video countsLogin Kit (user.info.stats)Account dashboard for the customer onlyRolling 180 days
Public video listvideo.listReconcile published posts and report resultsRolling 180 days
Approved creative and captionsUploaded by the customerPublish through Share Kit or the Content Posting API30 days in production, 90 days in backups
Publish result / post IDTikTok API responseStatus tracking, audit log, failure refunds180 days

Tokens are encrypted at rest, scoped to one workspace, and never sold or shared with another customer. We do not use TikTok data to build profiles of people who are not our customers.

6. What we never do

  • No bulk or automated account creation, and no buying or renting accounts.
  • No scraping of TikTok profiles, videos, comments or follower lists.
  • No automated mass DMs, comment spam, follow/unfollow loops, or engagement buying.
  • No simulated human behaviour, fingerprint spoofing, or proxy rotation to evade detection.
  • No circumvention of rate limits, review queues or regional restrictions.
  • No resale or sublicensing of platform API access.

7. Brand assets

Where the product shows Log in with TikTok or Share to TikTok, it uses TikTok's official button assets and follows TikTok's brand guidelines: official icon, official colour, official wordmark, no recolouring, no added effects, and no alteration of proportions. Platform names and logos belong to their owners. MatrixHubx is not affiliated with, endorsed by, or sponsored by TikTok or any other platform.

8. Retention and deletion

A customer can remove TikTok data in three ways:

  1. Disconnect the account in MatrixHubx → Accounts & Authorization; the token is revoked and account data is deleted within 30 days.
  2. Revoke access in the TikTok app under Settings and privacy → Security and permissions → Manage app permissions.
  3. Email matrix@matrixhubx.com; we verify the request and delete within 30 days.

Backups roll off within 90 days. Aggregated numbers that no longer identify an account may be kept for reporting.

9. Meta and YouTube

The same model applies to other platforms:

PlatformAuthorizationTypical permissionsUse case
Facebook / InstagramMeta OAuth, business verification where requiredpages_manage_posts, instagram_content_publish, pages_read_engagementPublish approved posts to Pages and professional Instagram accounts; read back insights
ThreadsMeta OAuththreads_content_publishPublish approved text and media posts
YouTubeGoogle OAuth, Limited Useyoutube.upload, youtube.readonlyUpload approved videos; read own channel analytics

We follow the Meta Platform Terms and Google API Services User Data Policy, including Limited Use. Data is not used for advertising, profiling, or sale.

10. Contact

Questions from a platform review team, or a data request:

Privacy Policy (EN) Terms of Service (EN) 隐私政策（中文） 服务条款（中文） Back to home