Privacy Policy

Distil (“Distil”, “we”, “us”) is operated by BNT Technologies, 5 Square de Roncevaux, 78180 Montigny-le-Bretonneux, France. We are the data controller for the personal data described in this policy, within the meaning of the EU General Data Protection Regulation (GDPR).

For anything related to privacy — questions, requests, complaints — write to hello@ondistil.com.

Please do not upload personal data about other people that you have no right to share, and avoid uploading special-category data (health, biometrics, political or religious views, and the like). If you do, you are responsible for having a lawful basis to do so.

We keep the stack small and disclose all of it. Each provider below acts as our processor under a data processing agreement and may only use the data to provide its service to us.

Our own infrastructure is in the European Union (Paris). Anthropic, OpenAI and Google process data in the United States. Those transfers are covered by the European Commission’s Standard Contractual Clauses and the data processing agreements we have in place with each provider, with the supplementary measures they describe in their documentation. You can ask us for details at hello@ondistil.com.

• Documents, knowledge and generated sites are kept as long as the app exists. Deleting an app removes its files, chunks, entities, relations, generated source and published site. Deleting your account removes all of your apps.
• Chat conversations are kept with the site they belong to and are deleted when that app or your account is deleted.
• Account data is kept until you delete your account, after which it is removed from our live systems.
• Usage and cost analytics are deleted with the app they relate to; aggregated figures that no longer identify you or your content may be retained.
• Server and trace logs are short-lived and rotate automatically.
• Encrypted backups and object storage may keep copies of deleted content for a short period before they are purged on their own rotation.

Under the GDPR you can, at any time:

• Access the personal data we hold about you, and get a copy of it.
• Rectify data that is inaccurate or incomplete.
• Erase your data — the account deletion described below does this immediately and irreversibly.
• Restrict or object to processing based on our legitimate interests.
• Port your data: receive it in a machine-readable format and have it sent to another provider where technically feasible.
• Complain to a supervisory authority — in France, the CNIL (cnil.fr).

There is no automated decision-making with legal or similarly significant effects on you.

The fastest route for erasure is in the product: Dashboard → Account → Delete account. It permanently deletes every app you own — documents, knowledge chunks, entities, relations, generated site source, published site, conversations and usage records — then your session and your account. It cannot be undone.

For anything else, email hello@ondistil.com from the address on your account. We answer within one month, as the GDPR requires.

Distil sets strictly necessary cookies only. Two HttpOnly cookies keep you signed in — a short-lived access token and a refresh token. They carry no advertising or profiling identifier, and there is no third-party analytics or tracking script on this site, so there is no cookie banner to click through.

Signing in with Google loads Google’s sign-in library, which may set cookies on Google’s own domains under Google’s privacy policy. Sites you publish with Distil serve only the assets we generate for them.

When someone chats with a site you published, you are the controller for that conversation and we process it on your behalf. You are responsible for telling your visitors what you collect and for having a lawful basis to do so. We store those messages so you can review them, and delete them when you delete the app or your account.

Data is encrypted in transit, access is restricted to what the service needs to function, and every record is scoped to the account that owns it. Distil is a small operation in public beta: we do our best, but no service can promise perfect security. Tell us at hello@ondistil.com if you spot a vulnerability, and we will not pursue anyone who reports one in good faith.

Distil is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a minor has created an account, write to us and we will delete it.

We may update this policy as the product changes. The “Last updated” date at the top always reflects the current version, and we will notify account holders by email before any change that materially reduces your protections.

BNT Technologies — Société par actions simplifiée à associé unique (SASU)
RCS Versailles 101 353 076 (SIREN 101 353 076) — EUID FR7803.101353076
Registered office: 5 Square de Roncevaux, 78180 Montigny-le-Bretonneux, France
Publication director: Anh Tuan Kieu
hello@ondistil.com

See also our Terms of Service.