Privacy Policy

We collect information you provide directly, information generated as you use the service, and information from third parties that help us operate.

Information you provide

• Account details such as name, work email, company, and role.
• Billing information processed by our payment provider.
• Content you submit, including URLs, keywords, and campaign briefs.
• Support requests and any correspondence you send us.

Information we collect automatically

• Usage data such as features accessed, audits run, and session duration.
• Device and log data including IP address, browser type, and timestamps.
• Cookies and similar technologies described in our Cookie Policy.

We use personal information to deliver, secure, and improve Distribution.studio.

• Provide audits, campaign recommendations, and other core features.
• Authenticate users, prevent fraud, and maintain platform security.
• Communicate about updates, billing, and support.
• Analyze aggregate usage to improve product performance and reliability.

Where the GDPR applies, we process personal data under one or more of the following bases: performance of a contract, our legitimate interests in operating the service, your consent, and compliance with legal obligations.

We do not sell personal information. We share it only in the following circumstances:

• With service providers that host, process, or support the platform under contract.
• With your organization's administrators who manage your account.
• When required by law, legal process, or to protect rights and safety.
• In connection with a merger, acquisition, or sale of assets, with notice.

We retain personal information for as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion at any time.

Depending on your location, you may have some or all of the following rights over the personal information we hold about you:

• Access — request a copy of the personal data we process about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data where there is no overriding reason to keep it.
• Portability — receive your data in a structured, machine-readable format.
• Restriction — ask us to limit how we process your data in certain cases.
• Objection — object to processing based on our legitimate interests or for direct marketing.
• Withdraw consent — where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, email privacy@distribution.studio. We will verify your identity before acting on a request and respond within the timeframe required by applicable law, normally within 30 days. There is no fee unless a request is manifestly unfounded or excessive.

If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority. We would, however, appreciate the chance to address your concerns first.

We maintain a layered security program designed to protect personal information against unauthorized access, disclosure, alteration, and loss. Our safeguards include:

• Encryption of data in transit (TLS) and at rest.
• Role-based access controls and the principle of least privilege.
• Multi-factor authentication for internal systems.
• Continuous monitoring, logging, and alerting on suspicious activity.
• Regular vulnerability scanning, patching, and third-party penetration testing.
• Vendor security reviews before granting access to data.

We restrict access to personal data to employees and contractors who need it to operate, develop, or improve the service, and who are bound by confidentiality obligations. In the event of a personal data breach that affects you, we will notify you and the relevant authorities as required by law.

No method of transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee its absolute security, and you also play a role by keeping your credentials confidential.

Distribution.studio operates globally, so your personal information may be transferred to, stored in, and processed in countries other than the one in which you are located. These countries may have data protection laws that differ from those in your jurisdiction.

Whenever we transfer personal data out of the European Economic Area, the United Kingdom, or Switzerland, we put appropriate safeguards in place, including:

• Standard Contractual Clauses approved by the European Commission.
• The UK International Data Transfer Addendum where applicable.
• Transfers to countries recognized as providing an adequate level of protection.

You can request more information about the specific safeguards applied to your data, or a copy of the relevant clauses, by contacting privacy@distribution.studio.

We may update this Privacy Policy from time to time. Material changes will be communicated through the service or by email, and the effective date above will be revised.