Privacy Policy

Overview

All context optimization happens locally on your machine. We never receive your code, prompts, or conversation content. The only data that reaches our servers is per-session usage metadata: token counts, calculated savings, the model and provider used, timestamps, and the path of the project directory you were working in (used to group your savings by project).

Data We Collect

We collect the minimum data necessary to operate the service:

• Email address (account registration and billing)
• Token counts (number of tokens sent and received per request)
• Cost deltas (calculated savings per session, used for billing)
• Session metadata (the model and provider used, timestamps, and a session identifier)
• Project directory path (the working directory you ran in, used to group savings by project)
• Polar billing data (payment method, invoices, subscription status)

We do not use analytics, tracking pixels, or third party trackers. No cookies are set beyond those strictly required for authentication and billing.

How We Use Your Data

Your email address is used solely for account management: login, password reset, billing receipts, and service notifications. We do not send marketing emails without your explicit opt in.

Token counts and cost deltas are used to calculate your monthly savings and apply the corresponding fee (if any) via Polar. These figures are stored in your account dashboard so you can review your usage history.

We may use aggregate, anonymized usage statistics (e.g., total tokens optimized across all accounts) to improve the service and inform product decisions. No individual usage data is included in these statistics.

Legal Basis

Under the GDPR, we process your personal data on two legal bases. Account and billing data is processed on the basis of contract performance, as it is necessary to provide the service you have subscribed to. Aggregate usage analysis for service improvement is processed on the basis of legitimate interest, as it helps us maintain and enhance the product without affecting the privacy of individual users.

Data Retention

We retain your account data for as long as your account is active. Per-session usage metrics are retained in your dashboard for 30 days on the Free plan and 12 months on Pro and Teams. If you cancel, we retain your account data for up to 12 months after cancellation to comply with tax and audit obligations. Polar billing records are retained for 7 years in accordance with Dutch tax law (Belastingdienst retention requirements). After these periods, your data is permanently deleted.

Your Rights

Under the GDPR, you have the right to access, rectification, erasure, and portability of your personal data. You may also object to processing or request that we restrict processing in certain circumstances. To exercise any of these rights, email us at privacy@thedistillery.dev and we will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority (in the Netherlands, the Autoriteit Persoonsgegevens).

Third-Party Services

Polar acts as our Merchant of Record and billing subprocessor. As Merchant of Record, Polar is the seller of record for your subscription: it processes all payment card data, handles invoicing, and remits applicable taxes on our behalf. We never store card numbers or sensitive payment details on our servers. We use Resend to deliver transactional email (account sign-in, billing, and service notifications); Resend processes your email address only to send those messages. We do not sell your personal data or share it with any other third parties. Polar's own privacy policy governs how it processes billing information.

Contact

For questions or concerns about this privacy policy or the handling of your personal data, contact us at privacy@thedistillery.dev. We take privacy inquiries seriously and aim to respond within 5 business days.