Privacy Policy
Last updated: November 2026
Disipln ("we", "us") helps content creators moderate comments and keep posting commitments across YouTube, Instagram and TikTok. This policy explains what we collect, how we use it, and your choices. By using Disipln you agree to this policy.
Information we collect
- Account you create: your email address (for sign-in via magic link or Google).
- Connected platforms: when you connect YouTube, Instagram or TikTok, we receive OAuth access tokens and your public account details (account id, name, avatar) under the minimum scopes needed. We never receive or store your platform passwords.
- Content we process: your videos/posts and the comments on them, which we fetch to classify and moderate on your behalf.
- Payments: commitment stakes are processed by our payment providers (Razorpay for India, Stripe elsewhere). We do not store your full card details; providers handle them under their own security standards.
- Usage: basic logs needed to operate and secure the service.
How we use it
- To fetch, classify and display your comments, and to perform the moderation actions you choose (hide/unhide, reply).
- To run posting commitments — detecting whether you posted by your deadline, and refunding or forfeiting your stake accordingly.
- To authenticate you and secure your account.
Google API Services — Limited Use
Disipln's use and transfer to any other app of information received from Google APIs (including the YouTube Data API) will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use YouTube data only to provide the features you see in Disipln, never to serve ads or for unrelated purposes, and we do not sell it. Disipln's functionality also relies on the YouTube API Services; by using it you agree to be bound by the YouTube Terms of Service.
Meta / Instagram data
Instagram data obtained through Meta's APIs is used solely to provide Disipln's moderation features for your own account. You can revoke access at any time from your Instagram settings, and request deletion of your data (see Data deletion).
How your data is protected
- Platform access and refresh tokens are encrypted (AES-256-GCM) at rest and never exposed to the browser or written to logs.
- We request the minimum scopes required for each feature.
- Moderation is reversible — Disipln does not perform silent irreversible deletions.
Sub-processors
We share data only with providers that help us run the service:
- Classification models (e.g. Anthropic, Google) to score comment text.
- Payment providers (Razorpay, Stripe) to process commitment stakes and refunds.
- Email delivery (Resend) for sign-in links.
- Hosting and database infrastructure (Vercel, Convex).
Retention & deletion
- Stored comment text is refreshed or purged on a rolling basis (within 30 days).
- When you disconnect a platform or delete your account, that platform's data is purged promptly.
- You can request deletion at any time — see Data deletion.
Your rights
You can access, correct, export or delete your data, and revoke platform access, at any time. Contact us at hello@disipln.com.
Changes
We'll update this page when our practices change and revise the date above.