Back to home

Privacy Policy

Last updated: 26 April 2026

Your privacy matters. Here's a clear, plain-language explanation of what we collect, why we collect it, and the controls you have.

In short

  • We collect only what's needed to run your account and the service.
  • We never sell your personal data.
  • Payments are processed by Paddle — we don't see your card details.
  • You can access, export, or delete your data at any time.

Who we are

Seller legal entity name: Creator Discipline.

Business type: Individual.
Country: India.

CreatorDiscipline is a content creator platform owned and operated by Sundram Pandey. It allows users to connect their YouTube account, upload videos, and analyze performance. Users explicitly grant permission before any data is accessed.

Website: creatordiscipline.com · Contact: support@creatordiscipline.com

This Privacy Notice describes how Creator Discipline ("we", "us", "our") collects, uses, and protects your personal data when you use our website (creatordiscipline.com) and service.

Controller status: We act as the data controller for personal data collected through our platform. This means we decide what personal data is collected and for what purposes it is used.

For payment-related data (card details, billing address, tax info), our payment provider Paddle.com Market Limited acts as an independent controller as Merchant of Record. See Paddle's privacy notice at paddle.com/legal/privacy.

Data we collect

We collect the minimum data needed to provide a reliable, personalized service:

  • Account data

    Your email, password (securely hashed), display name, and avatar.

  • Usage data

    Pages visited, features used, and basic device info (IP, browser, OS) for security and improvements.

  • Connected accounts

    OAuth tokens for platforms you connect (Instagram, X, Pinterest, YouTube). Tokens stay encrypted and are used only to publish on your behalf.

  • Content you create

    Captions, hashtags, scheduled posts, AI prompts, and uploaded media.

  • Billing data

    Subscription status and plan info. Card details are handled by Paddle, not us.

How we use it & legal basis

We process your data for the following purposes. The legal basis for processing is stated clearly for each purpose under applicable data protection law:

  • Run the service — Contract

    Authenticate you, save your work, publish posts you schedule. Legal basis: performance of our contract with you.

  • Generate AI content — Contract

    Send your prompts to AI providers to return captions, hashtags, and ideas. Legal basis: performance of contract.

  • Improve the product — Legitimate interests

    Analyze aggregate usage to fix bugs, prioritize features, and improve performance. Legal basis: our legitimate interest in operating and improving the service.

  • Security & abuse prevention — Legitimate interests / Legal obligation

    Detect suspicious logins, fraud, and abuse. Legal basis: legitimate interest in protecting our service and users; legal obligations to prevent fraud.

  • Customer support — Contract / Legitimate interests

    Respond when you contact us. Legal basis: performance of contract or our legitimate interest in supporting users.

  • Service updates — Contract

    Email you about important account or service changes. Legal basis: performance of contract.

  • Marketing emails — Consent

    Send optional product news and tips. Legal basis: your consent — you can opt out anytime.

  • Tax, accounting & legal compliance — Legal obligation

    Retain transactional records as required by law.

Third-party integrations

We share only the data necessary for these trusted partners to do their jobs:

  • Paddle

    Our payment processor and Merchant of Record. Handles all card data, billing, refunds, and tax.

  • Cloud infrastructure

    Hosts the application, database, and file storage.

  • AI providers

    Process your prompts to generate content. They do not train on your data.

  • Social platforms

    Only the data you explicitly authorize via OAuth — we never post without your action.

  • Analytics

    Privacy-friendly product analytics to understand usage trends.

We do not sell or rent your personal data to advertisers.

CreatorDiscipline uses YouTube API Services and complies with the Google API Services User Data Policy.

Data retention periods

These are our data retention periods. We keep personal data only as long as needed for the purposes it was collected for:

  • Account data

    Kept while your account is active. Deleted within 30 days of account deletion.

  • Content & scheduled posts

    Kept while your account is active. Removed within 30 days of account deletion or earlier on request.

  • OAuth tokens for connected platforms

    Kept while the connection is active. Revoked and deleted immediately when you disconnect a platform or delete your account.

  • Usage & device logs

    Retained for up to 12 months for security, abuse prevention, and product improvement, then deleted or anonymised.

  • Support correspondence

    Retained for up to 24 months after the last interaction so we can provide consistent support.

  • Billing & transactional records

    Retained for up to 7 years to meet tax, accounting, and legal obligations (handled jointly with Paddle as Merchant of Record).

  • Marketing preferences

    Opt-out records kept indefinitely so we can honour your choice.

When the retention period ends, we delete the data or irreversibly anonymise it. Backups are purged on a rolling basis according to our backup rotation schedule.

Data protection

We take security seriously:

  • Encryption in transit

    All connections use HTTPS/TLS.

  • Encrypted storage

    Sensitive credentials like OAuth tokens are encrypted at rest.

  • Row-level security

    Database policies ensure you can only access your own data.

  • Access controls

    Strict role-based access for our team — only what's needed for support.

  • Monitoring

    Login events and suspicious activity are tracked for your safety.

No system is 100% secure. Please use a strong, unique password and enable 2FA where available.

Your rights

You're in control of your data. You can:

  • Access

    Request a copy of the personal data we hold about you.

  • Correct

    Update inaccurate or incomplete information directly in your account.

  • Delete

    Permanently delete your account and associated data at any time.

  • Export

    Download your content in a portable format.

  • Object or restrict

    Limit how we process your data in certain cases.

  • Withdraw consent

    Opt out of marketing emails or revoke connected platform permissions.

To exercise any right, email us at support@creatordiscipline.com. We respond within 30 days.

Cookies

We use essential cookies to keep you signed in and remember your preferences (like theme). We also use limited analytics cookies to understand product usage. You can manage cookies in your browser settings.

Contact us

Questions, requests, or concerns about this policy or your data?

Email us at support@creatordiscipline.com — we read every message.

We may update this policy occasionally. Material changes will be communicated via email or in-app notification.