Prepare before publishing your app

The Store is where customers discover, install, and manage all Oten and third‑party apps. Any developer can build an app and submit it for review. This page explains the end‑to‑end submission flow, what reviewers look for, and how to avoid common pitfalls.

All apps go through four phases: Prepare → Submit → Review → After approval. Expect an initial response within a few business days. Duration depends on the app’s scope, complexity, and how quickly feedback is addressed.

Submission phases at a glance

  1. Prepare for submission: verify requirements, quality, security, and assets

  2. Submit your app: complete the form in the Developer portal and send for review

  3. Review process: address feedback (if any) until approval

  4. After approval: monitor analytics, manage reviews, and ship updates via versions

What to prepare before you submit

Before you click Submit, make sure the essentials below are complete. This avoids back‑and‑forth during review.

Minimum setup:

  • Application Info: name, short/long descriptions, category/tags, logo, screenshots, website, support email/URL

  • Policies: Website, public privacy policy URL and terms of service URL

  • API access (if your app exposes APIs to others): define your resource server with permissions, features, and scopes. See how to declare resource server

  • Review materials: demo credentials or seed data (if needed) and brief reviewer instructions

Pre‑submit checklist (quick view):

Area
Must have
Where

App listing

Name, logo, short/long descriptions, category/tags, website, support

Application Info

Policies

Privacy Policy URL, Terms of service URL

Application Info

Auth

OAuth client with valid redirect URIs; flows tested (PKCE where applicable)

Configure resources & security → OAuth

Scopes/

Permissions

Least‑privilege scopes; if exposing APIs, permissions/features/scopes defined

Configure resources & security → resource server

Pricing

At least one plan or Free listing

Pricing & plans

Docs

Quick start, configuration, troubleshooting

Project docs/README

Review materials

Demo account/seed data and short test steps

Submission form

Submit and publish

Submit from the Developer portal once preparation is complete:

  1. Open Developer portal → App management → App listing.

  2. In application Info, confirm listing details and policies are complete (name, icon, descriptions, screenshots, category/tags, website, support, Privacy Policy URL, Terms of Service URL).

  3. Open resources & security and verify:

    • If your app exposes APIs for others: resource server has permissions, features, and scopes defined.

    • If your app uses roles: roles link the right features.

  4. Click Submit/Publish app to open the submission screen.

  5. Provide review inputted information and consent the terms and conditions.

  6. Submit.

You will see an on‑screen confirmation; the app status changes Pending approval.

Review process

What reviewers evaluate:

  • Product: core value, UX, stability, accessibility basics

  • Engineering: correctness of OAuth, scopes, APIs, and webhooks

  • Security: transport/security controls, dependency risk, secrets handling

  • Privacy: data minimization, policy clarity, user controls and data rights

  • Content and assets: accurate listing, compliant branding

  • Support and docs: supportability, troubleshooting, and completeness

  • Legal: terms acceptance, licensing/trademarks

If issues are found, you’ll receive feedback via email or a review board. Address the items and resubmit; the team will re‑evaluate. Initial responses typically arrive within 2–3 business days; total time depends on app complexity and iteration speed.

Phase 4 — After approval

Once approved, your app published onto Oten Store. Keep track on our Developer portal to:

  • Monitor analytics and adoption trends

  • Manage user reviews and respond to feedback

  • Track overall states

Ongoing maintenance is required to remain compliant and ensure a great user experience.

FAQ

How long does the review take?

Most apps receive an initial response within a few business days. Complex apps or apps requesting sensitive scopes can take longer.

Why was my app rejected?

Common reasons include missing essential information, over‑broad scopes, unstable auth/config flows, unclear privacy policy, or duplicating existing marketplace functionality without added value.

Do I need a privacy policy and terms?

Yes. End users are required to consent on these to complete Subscribe app request. Public URLs are required if your app collects or processes user data.

Can I submit a private or beta app?

This features will be supported.

What happens if I change scopes after approval?

Requesting new or more sensitive scopes typically requires a new version and trigger re‑review.

How should I handle user data deletion requests?

Document your deletion/export processes and provide a support contact. Implement automated deletion where feasible.

Last updated