Privacy Policy

At Diskovah, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our platform or use our services.

1. Information We Collect

We may collect information about you in a variety of ways. The information we may collect includes:

• Personal Data: Name, email address, phone number, and demographic information.
• Financial Data: Mobile Money (MoMo) numbers, bank account details, and payment details held by our payment processors (Paystack and Spotflow) for executing payouts.
• Social Media Data: Public profile information, follower/subscriber counts, and post engagement metrics retrieved via the official Meta (Instagram), TikTok, and Google (YouTube Data API) APIs. For YouTube, we read your channel's public statistics (subscribers, views) and your own videos' public metrics. All social access is read-only - we never post, comment, message, follow, upload, edit, or delete anything on your connected accounts.

2. How We Use Your Information

We use the information we collect to:

• Facilitate account creation and authentication.
• Match creators with relevant brand campaigns.
• Verify campaign performance (views, engagement) to calculate accurate payouts.
• Process payments and escrow transactions securely.

3. Data Security & Storage

We use administrative, technical, and physical security measures to help protect your personal information. Sensitive data like social media access tokens and financial routing numbers are securely encrypted using AES-256-GCM.

4. Third-Party Access

We do not sell your personal data. We only share necessary data with trusted third-party providers (Paystack and Spotflow for payments) solely for the purpose of operating the Diskovah platform.

5. Data Retention & Deletion

We retain your personal data only for as long as your account is active or as needed to provide our services. You can withdraw consent and delete your data at any time:

• Removing the app from your Instagram, Facebook, TikTok, or Google/YouTube settings automatically revokes our access and triggers deletion of the data tied to that connection.
• Requesting deletion directly via our data deletion page or by emailing privacy@diskovah.com. We permanently delete your personal data within 30 days.

Social media access tokens are revoked immediately on disconnection. Where we are legally required to retain financial transaction records for completed payouts, those records are anonymized so they no longer identify you or reference your social accounts.

6. RankBoard: Public Creator Data

RankBoard is our public creator leaderboard. It lists creator accounts that are public, including creators who have not signed up to Diskovah. This section explains where that data comes from, what we keep, for how long, and how to be removed.

Sources.

• Official APIs: Instagram (Meta's Business Discovery, for professional accounts) and YouTube (the YouTube Data API), plus the accounts creators connect themselves.
• Public profile pages: for TikTok, Facebook Pages and Threads we read the profile page each platform shows to any visitor without logging in. Where we cannot read a page ourselves we may use a data-collection service (Apify) to read the same public page on our behalf. These rows are labelled "Public data · not connected" until the creator connects their account.
• Search results (Exa and Brave web search) to find public creator profiles by country and topic.

What we store about a listed creator. The handle and the platform's account id, display name, a copy of the public profile photo, follower count (marked as approximate where the platform only shows a rounded number), public engagement figures where the platform provides them, and the country, city and content category we assign. To decide whether an account is an individual creator and which country it belongs to, we send its public bio and recent public captions to an AI model provider; we do not keep the bio text on the board. Where a bio links another of the creator's accounts, we keep that link with a short snippet of the bio around it (up to 160 characters) while the link waits to be confirmed. We also keep a short record that an account was checked (handle, outcome, follower count), so we do not check it again.

Retention. Public figures are refreshed regularly. A row whose public data has not been refreshed in 30 days - for example because the account became private or unavailable - stops being shown, but the stored row is not deleted automatically: it is kept until the creator claims and manages it or asks us to remove it. Removal requests themselves (the platform, handle, code, optional contact email and outcome) are kept as the record of the removal.

Removal - no account needed. UseRemove me from RankBoard. You prove the account is yours by adding a one-time code to its public bio (or, for a Facebook Page, by email reviewed by our team). We then delete your RankBoard listing and add the account (platform, account id and handle only) to a suppression list so that it is never added again. A creator who has claimed their profile can hide it from their RankBoard settings at any time.

7. Google API Services & Limited Use

Diskovah's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the user-facing features described above (showing your YouTube stats on your profile and ranking you on the public leaderboard). We do not transfer or sell this data, and we do not use it for advertising, ad targeting or retargeting, credit assessment or lending, data brokering, or to train generalised AI/ML models.

Our access to and use of YouTube data is also governed by the YouTube Terms of Service and the Google Privacy Policy. By connecting your YouTube channel you agree to the YouTube Terms of Service. You can revoke Diskovah's access at any time via your Google security settings or our data deletion page.