Kandiantong: Buttons for a category can be turned off when the license expires
Before a WeChat mini program goes live, code review and category-qualification checks must be finished. Choosing the wrong category, missing qualifications, or falling short on privacy compliance are common reasons a private-domain mall project gets stuck in review. This article walks through the review flow, material preparation, and a rejection self-check, so merchants and implementation teams can get it right the first time as far as possible before submission.
Review flow and version types
Disclaimer: this page summarizes engineering practice. It is not legal advice. Specific compliance requirements follow the latest laws and official platform rules. WeChat Open Platform rules keep changing, so also refer to the official operating guidelines and the prompts in the admin. Where industry qualifications and permits are involved, consult a legal professional when needed.
Versions are usually divided into development, experience, review, and live. Mall features on the merchant side should be fully regression-tested on the experience version before the review version is submitted. Capabilities such as payment, livestreaming, and user-generated content often also need to be enabled separately on the Official Accounts Platform and bound to the matching category.
Code review checks whether pages violate rules, whether sensitive interfaces are used without being declared, and whether privacy collection is displayed in a compliant way. Category review checks whether the business category matches the business-license scope and any special-industry permits. The name and introduction must not pass off a well-known brand, and must not contain a misleading word such as official.
Companies are commonly used for brand malls and chain stores. Materials include the business license and a corporate account. Food, medical, and similar lines need industry permits. Individual businesses are common for single stores and small retail. Materials are the license and the legal person's information. Some categories are limited to companies. When media, government, or another entity provides content or a public service, provide the registration or authorization documents the platform requires.
If the mini program sells physical goods, the category generally falls under merchant self-operated or e-commerce platform entries. If it also sells paid knowledge or booking services, several categories may need to be combined, and the page must clearly separate the different transaction types.
Privacy protection and frequent rejections
WeChat requires a mini program that collects user information to provide a user agreement and a privacy policy on the first screen or in a prominent place, and to declare collected items, purposes, and third-party sharing in the user privacy protection guide in the admin. Kandiantong can configure agreement links in mall settings. Operations must keep the copy consistent with the actual functions. See personal-information protection compliance.
List the fields actually collected, and whether a phone number, address, photo album, or location is necessary. Turn off unused sensitive interfaces, so review does not find a contradiction between a declared-but-unused interface and a call. Goods related to minors need extra attention to age checks and notices.
Category mismatch: the license business scope does not cover the goods, or the second-level category is wrong. Adjust the category or change the license scope, then submit again. Missing qualifications: food, beauty, medical devices, and similar lines have not uploaded a permit. Add scans of the approvals and make sure they are within the validity period. Privacy non-compliance: there is no popup notice, or the privacy guide is not configured. Align the front-end popup with the fields declared in the admin. Content violations: test data contains sensitive words or false medical effects. Clear test products and copy, then submit. Payment not enabled: the checkout flow is complete but no merchant account is bound. Complete payment onboarding first, or hide the payment entry.
Pre-submission self-check: no product title, detail, or main image uses absolute language or prohibited claims (check against advertising compliance). The customer-service entry, return rules, and shipping-fee notes are visible on the order path. Share cards and Moments assets do not contain induced sharing or multi-level distribution wording that violates the rules. The experience-version path covers browsing, add to cart, checkout, refunds, the member center, and coupons. If livestreaming or short video is connected, complete livestream commerce compliance training at the same time.
Category changes and submission pace
During implementation, use four steps: a compliance walkthrough, experience-version acceptance, submission, and a gradual release. A Kandiantong delivery usually includes a basic agreement template and a note on permission configuration. The merchant must confirm industry qualifications and the brand-authorization chain itself. After review passes, a complaint or a spot check can still take the mini program down. Set up content risk control and a quarterly review. If it is rejected more than once, locate the problem from the specific page path and screenshots in the rejection notice, rather than changing code blindly. Engineering can export the submitted version number and a configuration snapshot, so the symptom can be described accurately when talking to platform support.
After a project has run for a while, two kinds of change are common. When adding a business category, first confirm the business-license scope already covers it. Otherwise change the license first. A new category usually needs qualifications resubmitted and another wait for review. Existing functions are generally unaffected during that wait. If a function for the new category is already live while the qualification has not passed, there is a risk of being told to correct it. Use a feature switch to control the launch pace. An entity change (for example from an individual business to a limited company, or a company rename or an equity restructuring) has a wider effect. Migrating a mini program entity involves the platform's migration process and notarized materials. The WeChat Pay merchant account usually needs a new application or a change filing. Member data and order ownership need a migration plan in advance. Leave enough time for this kind of change, and avoid a major promotion during the change window.
The following are materials that, in practice, are often asked for as supplements. The specific requirement follows the prompt on the platform review page and the rules of the competent authority. Selling prepackaged food usually needs qualifications related to a food-business permit. Health food and formula food for special medical purposes have separate requirements. Cosmetics need attention to filing or registration information for imported products. Medical devices map to different qualifications by management class. Books and audiovisual products, tobacco products, alcohol, and pet food each have matching permit or filing requirements. Paid knowledge and online education involve course content and teaching qualifications. Booking a registration, or a medical consultation, is reviewed especially strictly. The shared advice is to work backward from the actual product list to the qualifications required, then choose the category, rather than choosing the category and then filling in materials. Record the validity of every license on the operations calendar, and start renewal one month before expiry.
A few points about review are often misunderstood. First, review duration has no promised value. It moves with submission volume and content complexity, so a version before a major promotion should be submitted early. Do not schedule the release for the day before the event starts. The platform usually offers an expedited quota, but the number is limited and should be kept for a real emergency fix. Second, passing review is not permanent safety. After launch, a user complaint, a platform spot check, or a rule update can still require a correction. Content risk control and a quarterly review have to continue. Third, review is a version mechanism for mini programs. Official accounts, including service accounts and subscription accounts, do not have this step. Their capability boundary is set by WeChat verification and business-category qualifications. Do not mix the two launch flows. Fourth, test data must be cleared. In practice, a substantial share of rejections comes from leftover test products, placeholder copy, or an internal debug entry.
Splitting submission work across named owners cuts a lot of back and forth. The merchant is responsible for the business license, industry permits, the brand-authorization chain, and whether the goods are genuine. Operations is responsible for product copy, main images, agreement text, and the customer-service entry. Engineering and implementation are responsible for interface declarations, privacy-guide configuration, experience-version regression, and the submission itself. Legal is responsible for reviewing the agreement and privacy policy, and for checking promotional wording. Keep a record of every submission: submit time, version number, what changed, the review result, and the correction items. That record is useful when the same rejection repeats or when you need to appeal to the platform, and it lets a new member take over quickly.
Changes related to qualifications, payment, or personal information should be told to legal and finance at the same time, so technology is not live while the qualification status is still old. Each quarter, sample four areas and keep the record: operating assets, mini program pages, admin permissions, and data-export logs. When platform rules change suddenly, freeze non-essential releases first, finish an impact assessment, then restore functions in batches. If you use a Kandiantong custom delivery, the project group provides field notes and sample messages that match this page. The actual implementation follows the delivery document.
Source: https://www.kandiantong.com/support/compliance/miniprogram-audit.html