Privacy Policy

Last updated: October 30, 2026

Hide and Seek is a comment moderation service run by Kavanah Media, a Tennessee nonprofit (501(c)(3)). Organizations use it to read the public comments on their Facebook Pages, Instagram accounts and YouTube channels, hide abusive comments and reply to people who ask questions. This policy explains what information Hide and Seek handles, why, who else processes it, how long it is kept and how to have it deleted.

It covers two groups of people:

• Users: the staff and volunteers of organizations that sign in to Hide and Seek.
• Commenters: people who comment on an account an organization has connected. Commenters never sign in to Hide and Seek, but their comments pass through it.

Information we handle

About users

• Name, email address, an optional profile picture and a password (stored only as a one-way hash), or your Google sign-in identity if you use Google to sign in.
• Two-factor authentication secrets, if you turn it on (stored encrypted).
• The organization, workspaces and role you belong to, your notification preferences, and the date you accepted our terms.
• Sign-in sessions, including the device description and IP address of each session.
• An audit log of moderation actions: who hid, unhid, deleted or replied to a comment, connected or disconnected an account, or changed a rule, and when. The audit log does not contain comment text.

About commenters

When an organization connects an account, Hide and Seek copies the comments posted on it from Facebook, Instagram or YouTube. For each comment it stores:

• The comment text, and replies the organization writes to it.
• The commenter's display name, username or handle, a link to their profile picture, and the platform's ID for them.
• Platform IDs for the comment and the post or video it is on, and when it was posted.
• What moderators did with it (hidden, deleted, replied to, sent for review), internal notes they add, and the label our classifier gave it (whether it looks hostile, spam, a sincere question or neutral) with its language.

An organization can also put a commenter on its allowlist, for example its own staff, so that its rules and the classifier never act on their comments. The allowlist holds only the commenter's platform ID or username.

If a moderator bans someone from a Page or channel through Hide and Seek, the platform keeps the ban, and Hide and Seek keeps the person's platform ID (encrypted) with who banned them and when, so the team can see the ban and lift it.

If an organization connects Kavanah Chat, a moderator can send a commenter one private Messenger message about their Facebook comment, which Facebook allows within 7 days of the comment. It is sent through Kavanah Chat, Kavanah Media's separate messaging service, which keeps the conversation and receives the comment text, the commenter's name and a link back to the comment. Hide and Seek keeps only who sent it, when, and a link to the conversation, and deletes that with the comment.

We only collect public comments on accounts an organization has connected. Hide and Seek does not read private messages (answers to a private follow-up go to Kavanah Chat), and we do not collect anything about commenters from anywhere else.

About connected accounts

To read and moderate comments, Hide and Seek stores the access tokens Facebook, Instagram or Google issue when an organization connects an account, together with the account's name, handle and profile picture.

When an organization lets Hide and Seek read its ads, it also keeps the connecting person's Facebook token (it expires after about 60 days) to read which of the organization's ads run on which of its posts, with the ad and campaign names. That is how comments left on ads are collected and shown with their campaign. It reads no ad spend, audience or performance data.

How we use it

• To show an organization the comments on its own accounts and let its team hide, unhide, delete or reply to them.
• To apply the organization's own moderation rules, such as hiding comments that contain words it has listed.
• To label comments automatically (see "Automated labelling" below) so that harmful comments reach a person quickly and sincere questions are not missed.
• To send users notifications, such as a count of new comments or an alert that a connected account stopped working. Notifications never contain comment text or commenters' names.
• To keep the service secure, prevent abuse and keep a record of who did what.

We do not sell information, use it for advertising, build profiles of commenters, or use it to train artificial intelligence models.

Automated labelling

When an organization has the classifier turned on, the text of each new comment is sent to Anthropic, the maker of the Claude AI models, which returns a label, a language and a short reason. Only the comment text is sent: no name, handle, profile picture or link. Under Anthropic's commercial terms, content sent through its API is not used to train its models. The label helps the organization's team decide what to do. The classifier hides comments by itself only in languages that have passed our accuracy testing; in every other language a person decides. A person can always review and reverse what happened to a comment.

Who else processes information

• Amazon Web Services (United States, Oregon region) hosts Hide and Seek and its database, holds the encryption keys, stores backups and delivers email.
• Anthropic labels comment text, as described above.
• Kavanah Chat, Kavanah Media's messaging service, when an organization connects it: it sends private follow-ups and keeps those conversations under its own privacy policy and retention.
• Meta (Facebook and Instagram) and Google (YouTube) are where the comments come from. Moderation actions and replies are sent back to them through their official APIs.

We share information with others only when the law requires it or to protect people from harm.

Security

Comment text, commenter names, handles and profile picture links, replies, internal notes and classifier labels are encrypted in the database, and access tokens are encrypted with separate keys, all managed by Amazon's Key Management Service. Connections to Hide and Seek use HTTPS. Only invited people can create an account, and each organization sees only its own accounts and comments.

How long we keep it

• Comments and everything stored with them are permanently deleted 23 days after Hide and Seek copies them. Database backups expire after 7 days, so no copy of a comment is kept for more than 30 days.
• When an organization disconnects an account, its access token and every comment copied from it are deleted immediately.
• Allowlist entries are kept until the organization removes them, or until the commenter asks us to.
• A record of a ban is kept until the ban is lifted, the account is disconnected, or the person asks us to delete it. Deleting our record does not lift the ban on the platform.
• Audit log entries are kept while the organization uses Hide and Seek. When the comment they refer to is deleted, the link to it is removed.
• User account information is kept until the account is deleted. Users can delete their own account in Settings.

Cookies

Hide and Seek uses only the cookies it needs to work: a session cookie that keeps you signed in for up to 14 days and a security cookie that protects forms. There are no advertising or analytics cookies.

YouTube

Hide and Seek uses YouTube API Services to read and moderate comments on channels an organization connects. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's handling of your information is covered by the Google Privacy Policy. You can remove Hide and Seek's access to your Google account at any time from your Google account's security settings, and you can disconnect the channel in Hide and Seek, which deletes the data copied from it immediately. Hide and Seek's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your choices and rights

• Commenters can ask us to delete their comments or tell them what we hold about them. Comments are also deleted automatically after 23 days, including comments that were deleted on Facebook, Instagram or YouTube.
• Users can see and correct their details in Settings, delete their account there, or ask us to.
• Organizations can disconnect an account at any time, which deletes everything copied from it.

See Data deletion for step-by-step instructions. We answer requests within 30 days.

Children

Hide and Seek is a tool for organizations and is not directed at children. Commenters are whoever comments on a connected account; if you believe we hold comments from a child and want them removed, contact us and we will delete them.

Changes

If we change this policy, we will update the date at the top of this page. Significant changes will also be announced to users in Hide and Seek.

Contact

Kavanah Media
Email: privacy@kavanahanalytics.com