Your footage. Your privacy.

Who is responsible

We are responsible for the personal information used to operate Disto, manage accounts and respond to customers. If you upload recordings of other people, make sure you have permission and an appropriate legal basis to share them. Contact us before using Disto for regulated or highly sensitive material.

What we process and why

• Account details: your email address, account ID and sign-in/session information, to authenticate you and provide your account.
• Editing content: recordings, audio, transcripts, sampled frames, reference URLs and reference media, editing notes, and finished videos, to perform the edit you request.
• Job and usage records: file names and sizes, edit status, errors, credits and API-key metadata, to deliver the service, resolve failures and prevent abuse.
• Payments: purchase identifiers, credit quantities and payment status. Stripe handles card entry and payment processing; Disto does not receive your full card number.
• Support: the name, email, order/edit reference and message you submit, including privacy or cancellation requests. We also use a hashed network identifier to limit abusive submissions.
• Technical information: IP addresses, device/browser information and service logs processed by our hosting and authentication providers for delivery and security.

We process account, payment and editing information to provide the service you request and perform our contract. Security and troubleshooting rely on our legitimate interests in operating a safe service. We keep records required by law to meet legal obligations. If we introduce optional marketing or tracking that requires consent, we will ask first.

Scripts and camera recording

Ideas, batch names, reference links and previews, transcripts, revised scripts, filming plans and uploaded takes are stored privately in your account and available across devices. Earlier drafts may remain in this browser’s local storage until you clear site data. Camera and microphone access starts only when you enable it. New recordings stay on your device until you save the take; saving uploads it to your private account. Reference preparation runs in E2B and sends transcript and sampled frames to OpenAI to create filming guidance. Automatic Instagram Saves syncing is not connected.

If you choose Google sign-in, Google provides basic account information such as your email and profile. Disto does not request access to your Gmail, Drive or Instagram account.

Where your content goes

Disto stores recordings and outputs in private Supabase storage. An isolated E2B environment downloads the recording and reference, creates a transcript and frames, and runs Codex to generate editing instructions and code. Relevant content is sent to OpenAI for AI processing. A finished file returns to private storage; the temporary editing environment is stopped after completion or timeout. Authorized operators may access relevant records to investigate issues or respond to your request.

The current Supabase project is hosted in Singapore. Other providers may process data in the United States and other countries. Cross-border processing and any applicable transfer safeguards depend on the relevant provider agreements. Ask us for information about safeguards applicable to your data. Disto does not operate its own model-training pipeline; provider handling is governed by the applicable service terms and account settings. We do not sell your recordings or publish them in a public gallery.

Storage and retention

Your recordings, renders and edit records currently remain in your account until you request deletion; there is no automatic file-expiry schedule. Download files you want to keep. Account information is retained while needed to provide your account. Support records are retained as needed to resolve the request and related disputes. Billing, fraud-prevention and legal records may need to remain after an account is closed. Provider logs and backups follow their own retention schedules and may not disappear immediately after deletion from the active service.

Your choices and rights

You can request access, correction, deletion, restriction or a portable copy of your information, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it. Use the privacy request form; we may need to verify your identity before sharing or deleting information. We aim to respond within one month and will explain any legally permitted extension. You can complain to your local data-protection authority, including the Dutch Autoriteit Persoonsgegevens.

AI makes creative editing choices. Disto does not use those choices to decide your eligibility for employment, credit or similarly significant matters. Review captions and the finished video before publication.

Cookies and changes

See our cookie notice for essential sign-in storage. We update this notice when the service changes and show the revision date above. Material changes will be communicated through the service or your account contact details where appropriate.