Privacy Policy

Distillic turns videos, podcasts, and documents into searchable, actionable knowledge. This policy explains what we collect, why, where it lives, and the choices you have. It is written to be read, not to pad out a lawyer's word count — if anything here is unclear, email us and we'll explain it plainly.

Who we are

Distillic is an independent product operated from the United Kingdom. For any privacy question — access, correction, deletion, or anything else in this policy — contact reisstrowbridge18@gmail.com.

What we collect

• Account details. Your email address and display name, either from Google when you sign in with Google, or from the email and name you enter when you create an account directly.
• Content you submit. The links you paste (YouTube and other video or podcast URLs), transcripts, and documents you upload for processing, plus the tactics, playbooks, and notes produced from them.
• Usage events. A deliberately small set of product events — when you submit and complete a distill, view a tactic, tick a playbook step, call a connected tool, sign up, and sign in — along with page views. We do not use session recording, and we do not auto-capture clicks or scrape the page, so the text of your content is never swept into analytics.
• Error reports. When something breaks, we log the error to help us fix it. Before an error report leaves the server it is run through a scrubber that strips out your content, and we tell our error tool not to attach IP addresses, cookies, or request bodies.

Where your data lives

Your account and content are stored in a Postgres database hosted by Supabase in the EU. The app itself runs on Railway. Product analytics is handled by PostHog (EU) and error reporting by Sentry (EU). We chose EU-region infrastructure deliberately.

AI processing

To extract tactics and make your content searchable, we send the content you submit to third-party AI providers. Today those are Anthropic (extracting tactics from your sources), OpenAI (generating the search embeddings that make your vault searchable), and Groq (transcribing audio when a source has no existing transcript). Some extraction work may additionally be routed through OpenRouter to other model providers; when we do this we require that the request is not retained or used for training. The specific providers and models may change over time as we improve quality and cost.

Content processed through your personal vault is always sent to Anthropic and is never routed elsewhere. Under our agreements with these providers, they do not use your content to train their models.

YouTube

When you distill a YouTube link, Distillic uses YouTube API Services. By using that feature you are also subject to Google's Privacy Policy. You can review and revoke Distillic's access to your Google account at any time through your Google security settings.

Email

We send transactional email only — things like confirming your address and password resets — via Resend, from auth@distillic.com. We do not send marketing email.

Cookies and analytics

We use essential cookies to keep you signed in (your Supabase session). For analytics, PostHog stores an anonymous device identifier in your browser's local storage and a cookie so we can count distinct visits — it is tied to your account only after you sign in, and it is not used for advertising. We do not use third-party advertising or tracking cookies.

Who we share it with

We do not sell your data, and we never will. The providers named above — Supabase, Railway, PostHog, Sentry, Anthropic, OpenAI, Groq, OpenRouter, Google (YouTube), and Resend — process data on our behalf so the product can function. We may also disclose information if the law requires it.

Keeping and deleting your data

We keep your account and content for as long as your account exists. You can ask us to delete your account and its data at any time by emailing reisstrowbridge18@gmail.com. To be honest about where we are: self-serve, one-click deletion is not built yet, so for now we handle deletion requests manually — we'll action yours and confirm when it is done. Our database is backed up daily, and backups are kept for seven days, so deleted data may persist in a backup for up to a week before it rolls off.

Your rights

If you are in the UK or EU, you have the right to access the personal data we hold about you, correct it, delete it, and receive a copy in a portable format. Exercise any of these by emailing reisstrowbridge18@gmail.comand we'll respond promptly.

Changes to this policy

We may update this policy as the product develops. If we make a material change, we'll flag it inside the app rather than quietly editing the page. The date at the top always reflects the current version.