Privacy Policy
How we collect, use, and protect your data.
Last updated: March 1, 2026
1. Overview
This Privacy Policy explains how Discuse ("we", "us", "our") collects, uses, and protects information when you use our content moderation API and related services ("Services"). We are committed to protecting your privacy and handling your data with transparency and care.
2. Information We Collect
We collect the following categories of information: Account Information: When you create an account, we collect your name, email address, and authentication credentials (via OAuth providers such as GitHub or Google). If you subscribe to a paid plan, we collect billing information through our payment processor. Usage Data: We collect aggregated API usage statistics including request counts, response times, and error rates. This data is used to monitor service health, enforce usage limits, and improve performance. Content Submitted for Analysis: Text and image content submitted to our API endpoints is processed in real-time to generate moderation results. We do not persistently store the content you submit. Content is held in memory only for the duration of processing (typically under 100 milliseconds). Technical Data: We collect standard technical information such as IP addresses, browser type, and device information when you access the dashboard or documentation.
3. How We Use Your Information
We use the information we collect to: (a) provide, maintain, and improve the Services; (b) process transactions and send related information; (c) send technical notices, security alerts, and support messages; (d) monitor and analyze usage trends to improve the Services; (e) detect, prevent, and address technical issues, fraud, and abuse; (f) comply with legal obligations. We do not sell your personal information to third parties. We do not use the content you submit for analysis to train our models unless you explicitly opt in to a data improvement program.
4. Data Retention
Content submitted for analysis is not stored beyond the processing window. Account information is retained as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law. Aggregated, anonymized usage data may be retained indefinitely for analytics purposes.
5. Data Sharing
We may share information with: (a) service providers who assist in operating the Services (payment processors, hosting providers), subject to confidentiality agreements; (b) law enforcement or government agencies when required by law; (c) other parties in connection with a merger, acquisition, or sale of assets, with prior notice to you. We use industry-standard sub-processors for infrastructure and payment processing. A list of current sub-processors is available upon request.
6. Data Security
We implement appropriate technical and organizational measures to protect your information, including: encryption in transit (TLS 1.3) and at rest; access controls and authentication; regular security audits and penetration testing; infrastructure monitoring and intrusion detection. While we strive to protect your information, no method of transmission over the Internet is 100% secure.
7. Your Rights (GDPR)
If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR): the right to access your personal data; the right to rectification of inaccurate data; the right to erasure ("right to be forgotten"); the right to restrict processing; the right to data portability; the right to object to processing; the right to withdraw consent at any time. To exercise any of these rights, please contact us at privacy@discuse.com. We will respond to your request within 30 days.
9. Children's Privacy
The Services are not directed to children under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.
10. International Data Transfers
Your information may be processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses (SCCs) where required by GDPR.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Services at least 30 days before changes take effect. Your continued use of the Services after changes become effective constitutes acceptance of the revised policy.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at privacy@discuse.com.