Privacy Policy

1. What We Collect

Distill collects the minimum information necessary to provide the service:

• Email address — collected by Stripe at checkout. Used only to send order-related communications (e.g. refund notices).
• Document content — the text extracted from your uploaded PDF or DOCX. Processed temporarily to generate flashcards and deleted after your session expires (within 2 hours).
• Payment information — handled entirely by Stripe. Distill never sees or stores your card details.
• Basic usage data — standard server logs (IP address, timestamps, request paths) retained for security and debugging purposes.

2. How We Use Your Data

Your document content is sent to Anthropic's API to generate flashcards. It is not used to train AI models. Generated decks are stored on Vercel Blob for 24 hours to allow download, then automatically deleted.

3. Third-Party Services

Distill uses the following third-party services to operate:

• Stripe — payment processing (privacy policy)
• Anthropic — AI flashcard generation (privacy policy)
• Vercel — hosting and file storage (privacy policy)
• Upstash — session and rate-limit data storage (privacy policy)

4. Data Retention

Document content is deleted within 2 hours of upload. Generated deck files are deleted after 24 hours. Session tokens expire within 24 hours. We do not maintain a long-term database of user activity.

5. Cookies

Distill uses a single HttpOnly session cookie to authenticate your download. No tracking or advertising cookies are used.

6. Your Rights

Because we collect minimal data and most of it expires automatically, there is little persistent data to request or delete. If you have a specific concern, contact us at support@distillknowledge.app and we will respond within 30 days.

7. Changes to This Policy

We may update this policy at any time. Material changes will be noted with an updated date at the top of this page.

8. Contact

Questions about your data? Email support@distillknowledge.app.