Privacy policy

Who we are

Distrove helps businesses find customers. This policy explains what personal information we collect, why, who we share it with, and the choices you have. It covers our customers and visitors, and the people whose business contact details Distrove finds for our customers.

The person in charge of the protection of personal information at Distrove is its founder. You can reach them at hello@distrove.app.

What we collect

Your account: your name, email address and password, stored only as a secure hash. If you sign in with Google, we receive your name and email address from Google, never your Google password.

Your business: what you tell us and what Distrove reads from your public website.

Your workspace: plans, channels, drafts, the people Distrove finds for you, results you record and your settings.

Billing: Stripe handles your payment details. We keep your plan, its status and your Stripe customer number, never your card number.

Usage and security: the AI and research requests your account makes and their estimated cost, and technical data such as IP addresses, used to keep the service secure, to apply limits and to see what each feature costs. We also note, on our own servers, which steps toward choosing a plan your account reached (for example, that it opened the payment page), to improve them. We also count the days your account opens Distrove, how many drafts, listings and emails it approves or publishes, and how many channels it runs and of which kinds, with how much of what Distrove made for each one it used, so we notice when Distrove stops being useful to you and learn which channels to improve: numbers only, never the drafts, people or emails themselves. No outside analytics are used.

Your mailbox, if you connect one: see “Your mailbox, if you connect it” below.

People you add: see “People you add” below.

Previews: the website address a visitor enters and what Distrove reads from that public site.

Where you came from: the link or site that brought you to Distrove (for example “tiktok” or “google.com”). Your browser keeps it for 30 days, and it is saved with a preview and with a new account. We also count visits to the site by day and by that source, with nothing about the visitor.

ChatGPT, Claude, Muse and other AI assistants, if you use Distrove there: the website or business name the assistant passes to Distrove’s tools, and which assistant asked. Distrove never receives your conversation. A report is kept for up to a week, as previews are.

Messages: what you write to us.

Why we use it

To provide Distrove: research your market, prepare your channels and drafts, find people to contact, and send your account emails, your weekly email and short emails when something needs you (you can turn both off). If the free previews are full and you leave your email, it is used only to send you that preview, and deleted within 3 days. To bill your plan. To keep the service secure, prevent abuse and apply plan limits. To answer you. To meet our legal obligations.

Where the GDPR applies, we rely on the contract with you, on our legitimate interests (security, preventing abuse, improving Distrove) and on legal obligations. We do not sell your data, share it for cross-context behavioral advertising, or use your workspace to advertise to you.

AI

Distrove uses an AI provider’s API to analyze websites and write drafts. Our AI provider does not use the data we send to train its models, and keeps it only for a limited time to detect abuse. We do not use your workspace to train any AI model.

Distrove does not make decisions with legal or similarly significant effects about anyone. Its suggestions, such as which people fit your business, are recommendations you review.

Your mailbox, if you connect it

You can connect your own mailbox so that Distrove sends the emails you approve (cold emails, partner and creator introductions, emails to your customers) from your own address. We then keep its address, the name people see, your email provider and its server names, and the password you give us (an app password or, with some providers, the mailbox password). The password is encrypted before it is stored and is never shown again, not even to you.

Sending: Distrove sends only the emails you approved, and the follow-ups that come with them unless the person replies, at the pace and hours shown in Distrove. It also sends, at once, the replies you write in Distrove when you press Send reply. It saves a copy in your Sent folder and keeps each email it sent (recipient, subject, text and time) in your workspace.

Reading: every 5 minutes for 2 days after an email goes out, then about every 30 minutes, while emails Distrove sent are less than 14 days old, it reads the header lines of new messages in your inbox (with Gmail, All Mail, so replies you archived are found too): sender, subject, date and the references that link a reply to an email. It opens only messages that answer an email it sent, or that say one could not be delivered, and reads only their first few thousand characters, without marking them as read. It does not read, copy or keep any other message.

For each reply, Distrove keeps who replied, when, the kind of reply (for example interested, not interested or away) and a short excerpt, and sends the text of the reply to our AI provider to sort it. When an email could not be delivered, Distrove stops emailing that address.

You can cut access at any time: disconnect the mailbox in Settings, or delete the app password in your email account. When you disconnect, we delete the password and the mailbox settings at once, stop sending and reading, and cancel the emails not yet sent. The emails already sent and the replies found stay in your workspace as its history, and are deleted with it.

Your website, if you connect it

You can connect your WordPress or Webflow site so that Distrove publishes the guides you approve there. We keep the site’s address and name, the WordPress username, and the application password or Webflow token you give us, encrypted, never shown again and used only to create the posts you ask for, on that site.

Distrove creates a post only when you press Publish or Save as a draft, and never changes or reads anything else on your site. Disconnect in Settings, or revoke the application password or token on your site, to cut access; disconnecting deletes what we kept at once.

People you add

You can add people you already know, such as past customers, partners or contacts, by pasting a list or importing a file. We keep what you add: name, email address, company, phone number, the date of their last job or purchase, what they bought and how many times, a note, whether you marked them happy, and when they were added. Before adding them, you confirm that you know these people or have done business with them and may contact them; bought lists are not allowed.

Distrove uses this list only to write and send your own emails, after your approval, and to show you what it did with each person. It is never used for another customer, never shared and never sold. Only the details needed to write an email to a person are sent to our AI provider, for that email.

Do not email: when someone says no or asks to stop, on any channel, Distrove adds their address to your do-not-email list and never emails it again from your account. You can add or remove addresses yourself.

You can edit, export or remove anyone at any time. The list is deleted with your workspace.

Who we share it with

We share only what each task needs with service providers, who may use it only to provide their service to us: an AI provider (analysis and writing, United States); web search providers (research, United States); a public ad library service (competitors’ ads, United States); a work email lookup service (finding and checking work email addresses, European Union); Stripe (payments, United States and elsewhere); Google, only if you sign in with Google; our hosting provider; our email delivery provider (account and weekly emails, United States); your own email provider, only if you connect your mailbox; and X, only if you connect your account. For the current list of our providers, write to hello@distrove.app.

We may also share information when the law requires it, to protect people or Distrove, or with a buyer if Distrove is sold, under this policy.

Where it is processed

Your information may be processed outside your country, including in the United States, Canada and the European Union. Before sending personal information outside Québec, we assess whether it will be adequately protected, and we use providers that offer contractual safeguards such as standard contractual clauses.

People Distrove finds for our customers

When a customer uses Find people, Distrove gathers business contact details about people who may be interested in that customer’s offer: name, role, company, work email address, business website and short excerpts of public pages. These come from public websites, public search results and a work email lookup service.

We use them only so our customer can contact you about something related to your work. Our customer decides whether to contact you and is responsible for doing so lawfully; for this information, Distrove acts as its service provider.

If you reply to an email a customer sent you through Distrove, Distrove keeps in that customer’s workspace that you replied, when, the kind of reply and a short excerpt, so that no more follow-ups go to you once you have answered.

You can ask us at any time to remove your details. Write to hello@distrove.app: we will delete them from Distrove, including from our customers’ workspaces, and keep only what is needed to stop finding you again.

How long we keep it

We keep your workspace while your account is open. When you close your account or ask us to delete it, we delete your information within 30 days, except records we must keep by law, such as invoices, which we keep as long as tax law requires. Security records are kept for a short time, then deleted.

Your rights

Depending on where you live, you can ask to access your information, correct it, delete it, receive a copy in a portable format, restrict or object to some uses, and withdraw consent you gave. You can already export your workspace and edit your business details in Distrove.

To make a request, write to hello@distrove.app. We may ask you to confirm your identity and we answer within 30 days. Exercising your rights will never affect the service or price you get. You can also complain to a privacy authority, such as the Commission d’accès à l’information du Québec, the Office of the Privacy Commissioner of Canada or your local data protection authority.

Cookies

We use one essential cookie, to keep you logged in. We do not use advertising or analytics cookies or trackers. Your browser may also keep a few preferences, a preview you started, and the link or site that brought you here (for 30 days), on your device.

Security

Connections are encrypted, passwords are hashed, provider keys and mailbox passwords you add are encrypted before they are stored, and access to your information is limited to what running Distrove requires. We look at the content of your workspace only when you ask us for help, or when security or the law requires it. We keep a register of security incidents; if an incident puts you at risk of serious harm, we will tell you and the authorities as the law requires.

Children

Distrove is for businesses and is not meant for anyone under 18. We do not knowingly collect information about children.

Changes

If we change this policy in a way that matters, we will tell you by email or in Distrove before it applies. The date at the top shows the latest version.