TikTok tokens are encrypted at rest. Newgate Publisher reads the connected account's basic profile and public video metrics and uses upload permissions only after explicit approval. Tokens are never exposed in logs.