Privacy policy
Last updated 4 November 2026
This policy explains what information Distilry collects when you use distilry.com, why we collect it, who helps us process it, and how you can see or delete it.
What we collect
- Account details. Your name, email address and profile picture when you sign up, including when you sign in with Google. From Google we receive only your name, email address and profile picture.
- Review data you give us. Files you upload and reviews we read from stores you connect, such as review text, ratings, dates, reviewer display names and product names.
- Store connection details. Your store address and, where a review app needs one, its API token. Tokens are encrypted before they are saved and are only used to read your reviews.
- Reports and settings. The analyses and reports you create, your branding choices and your monitoring schedules.
- Billing. Your plan and payment history. Card details are handled by Stripe and never reach our servers.
- Usage. Basic records of activity in your account, such as when an analysis ran, used to run the service, fix problems and prevent misuse.
How we use it
- To sign you in and keep your account secure.
- To analyse the reviews you provide and produce your reports.
- To run the monitors you set up, reading only new reviews from your connected stores.
- To send emails about your account, such as a finished analysis or a billing receipt.
- To take payment for paid plans.
We do not sell your information, and we do not use your review data to advertise to you or anyone else.
Access to your stores
Distilry only reads reviews from the stores you connect. It cannot post, change or delete reviews, products or orders. You can remove a connection at any time, and its saved token is deleted with it.
Who processes your information
We use trusted service providers to run Distilry. Each receives only what it needs for its part of the service:
- Clerk, for sign-in and account management.
- Convex, for our database and background jobs.
- Cloudflare, for hosting the website.
- Stripe, for payments.
- Resend, for sending email.
- AI model providers, accessed through OpenRouter and OpenAI, to read and summarise review text. Review text is sent to them only to produce your analysis.
Some of these providers process data outside your country. Where they do, they are bound by their own data protection terms.
Sharing reports
Your reports are private to your account. If you create a share link, anyone with that link can view that report until you remove the link.
How long we keep it
We keep your information while your account is open. When you delete an upload, a store connection or a report, it is removed. When you close your account, we delete your data, except records we must keep for tax or legal reasons.
Your choices
You can ask to see, correct, export or delete your information at any time by emailing hello@distilry.com. If you signed in with Google, you can also remove Distilry’s access from your Google account settings.
Changes and contact
If we change this policy in a way that matters, we will update the date above and let account holders know by email. Questions are welcome at hello@distilry.com.