Privacy Notice

1. Who we are

Distro is a sole proprietorship operated by Adnan Khan, operating at distr0.app. For the personal data described in this notice, Distro is the data controller.

2. Data we collect

• Account data: name, email address, hashed password (or OAuth identifier from your provider).
• Profile and product data: the company, channels, posts, briefs, and notes you create in Distro.
• Usage and telemetry: pages visited, features used, AI-action counts, timestamps, error logs, device and browser type, approximate location derived from IP.
• Support communications: messages you send us by email or in-product.
• Payment-adjacent data: subscription status, plan, billing email. Full payment details (card numbers, billing address) are collected and stored by our Merchant of Record, Paddle, not by us.

3. Why we use it (purposes and legal bases)

• Provide the Service (account creation, drafting, scheduling, AI features) — performance of the contract with you.
• Security and fraud prevention (rate limiting, abuse detection, audit logs) — legitimate interest in operating a safe service.
• Customer support — performance of the contract and legitimate interest.
• Product improvement (aggregated analytics, debugging) — legitimate interest in improving the Service.
• Billing and tax compliance — performance of the contract and legal obligation; handled through Paddle.
• Service emails (receipts, security notices, plan changes) — performance of the contract.
• Marketing emails — only with your consent, which you can withdraw at any time.

4. AI processing

When you use AI features, the prompts and context you provide are sent to large-language-model providers (currently routed through the Lovable AI Gateway) to generate the response. We do not use your private content to train foundation models. Providers may temporarily retain prompts to detect abuse, per their own policies.

5. Who we share data with

• Infrastructure and subprocessors: hosting, database, authentication, and email delivery providers.
• Merchant of Record (Paddle): for checkout, subscription management, payments, tax compliance, invoicing, and refund handling.
• AI providers: via the Lovable AI Gateway, to generate AI outputs you request.
• Analytics and error monitoring: to understand product usage and diagnose issues.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law or to protect rights, property, or safety.

We do not sell your personal data.

6. International transfers

Our subprocessors operate in multiple regions, including the United States and the EU. Where we transfer personal data outside your country, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions, as applicable.

7. Retention

We keep account and product data for as long as your account is active. If you delete your account, we delete or anonymise personal data within 90 days, except where we are required to retain certain records (for example, billing records for tax purposes, typically 7 years).

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent where processing is based on consent. EU/UK users also have the right to lodge a complaint with their local supervisory authority. We will respond to verified requests within one month.

To exercise any of these rights, contact us at the address below.

9. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, row-level access controls in the database, and least-privilege access for administrators. No system is perfectly secure; please use a strong, unique password.

10. Cookies

We use a small number of essential cookies to keep you signed in and to protect against abuse. We may use privacy-respecting analytics to understand aggregate usage. We do not use advertising or cross-site tracking cookies. You can manage cookies through your browser settings.

11. Changes

We may update this notice from time to time. Material changes will be highlighted in-product or by email.

12. Contact

Distro — distr0.app.