Privacy Policy

Overview

All context processing happens locally on your machine. We never receive your code, prompts, or conversation content. Only token counts and cost deltas reach our servers.

Data We Collect

We collect the minimum data necessary to operate the service:

• Email address (account registration and billing)
• Token counts (number of tokens sent and received per request)
• Cost deltas (calculated savings per session, used for billing)
• Stripe billing data (payment method, invoices, subscription status)

We do not use analytics, tracking pixels, or third-party trackers. No cookies are set beyond those strictly required for authentication and billing.

How We Use Your Data

Your email address is used solely for account management: login, password reset, billing receipts, and service notifications. We do not send marketing emails without your explicit opt-in.

Token counts and cost deltas are used to calculate your monthly savings and apply the corresponding fee (if any) via Stripe. These figures are stored in your account dashboard so you can review your usage history.

We may use aggregate, anonymized usage statistics (e.g., total tokens optimized across all accounts) to improve the service and inform product decisions. No individual usage data is included in these statistics.

Legal Basis

Under the GDPR, we process your personal data on two legal bases. Account and billing data is processed on the basis of contract performance, as it is necessary to provide the service you have subscribed to. Aggregate usage analysis for service improvement is processed on the basis of legitimate interest, as it helps us maintain and enhance the product without affecting the privacy of individual users.

Data Retention

We retain your account data for as long as your account is active. If you cancel, we retain your data for up to 12 months after cancellation to comply with tax and audit obligations. Stripe billing records are retained for 7 years in accordance with Dutch tax law (Belastingdienst retention requirements). After these periods, your data is permanently deleted.

Your Rights

Under the GDPR, you have the right to access, rectification, erasure, and portability of your personal data. You may also object to processing or request that we restrict processing in certain circumstances. To exercise any of these rights, email us at privacy@thedistillery.dev and we will respond within 30 days.

Third-Party Services

Stripe handles all payment card data and billing on our behalf. We never store card numbers or sensitive payment details on our servers. No other third-party services receive your personal data. Stripe's own privacy policy governs how they process billing information.

Contact

For questions or concerns about this privacy policy or the handling of your personal data, contact us at privacy@thedistillery.dev. We take privacy inquiries seriously and aim to respond within 5 business days.