Privacy Policy

Overview

Distro provides software that helps founders plan and execute distribution work. This Privacy Policy explains how Distro and the Distro Copilot browser extension collect, use, store, and protect data.

What We Collect

When you use Distro, we collect information you provide directly, such as your name, email address, business details, and any content you submit through the platform. We also collect usage data automatically, including pages visited, features used, browser type, device information, and IP address.

Distro Copilot Browser Extension

Distro Copilot is a Chrome extension that helps users run approval-based outreach missions on supported sites such as X, Twitter, and LinkedIn. The extension only works on supported pages and requires an active Distro account.

To provide this functionality, the extension may process account connection data, selected product or workspace settings, visible website content on supported pages, prospect names or profile details, user-approved draft replies or direct messages, and user activity related to reviewing, saving, approving, or dismissing outreach actions.

Distro Copilot does not collect social account passwords, does not read browser cookies, does not sell user data, and does not send outreach messages without user review or approval.

How We Use Your Data

We use the information we collect to provide, maintain, and improve the Distro platform, personalize your experience, find buyer intent and generate outreach and content tailored to your business, communicate with you about your account and product updates, and ensure the security and integrity of our services.

For the browser extension, data is used only to provide Distro Copilot's single purpose: helping users discover relevant conversations, score prospects, draft user-approved replies or direct messages, and save outreach activity back to the user's Distro account.

Chrome Extension Data Use Disclosures

Distro does not sell or transfer user data to third parties except as necessary to provide the service, comply with law, or protect the security of users and the platform. We do not use or transfer extension data for purposes unrelated to Distro Copilot's single purpose, and we do not use or transfer user data to determine creditworthiness or for lending purposes.

Gmail and Google User Data (Distro Outreach)

Distro Outreach lets you connect a Gmail or Google Workspace mailbox so you can send emails and campaigns you write, and see replies to them, inside Distro. Connecting is optional and only happens when you choose to connect a mailbox.

We request two Google permissions and use them only as follows:

• Send email on your behalf (gmail.send) — to send the emails, campaign steps and replies that you create, schedule or approve in Distro, from your own mailbox.
• View your email messages and settings (gmail.readonly) — to read your mailbox address and send-as aliases so you can choose a sender, and to detect replies, bounces and out-of-office responses to emails you sent through Distro, so your follow-ups stop when someone replies and those replies appear in your Distro inbox.

When Distro checks your mailbox for replies, messages that are not part of a conversation you started through Distro are discarded immediately and are not stored. For conversations you started through Distro, we store the replies (sender, recipients, subject, message text and attachment names) so you can read and answer them in Distro. Your Google access credentials are stored encrypted and are never shown to anyone.

AI reply drafts. If you click “Draft reply with AI” on a conversation in your Distro inbox — or if you choose to turn on the optional AI auto-reply or AI follow-up features for a campaign — Distro sends the text of that one conversation (the recent messages in a thread you started through Distro) together with your campaign's offer details to our AI provider, OpenAI, through its API, to write a suggested reply. Nothing from your mailbox is sent to OpenAI unless you use one of these features, and messages from other conversations are never sent. OpenAI does not use data sent through its API to train its models. Unless you have turned on auto-replies for a campaign, every AI draft is shown to you to review and edit before anything is sent.

We do not use Gmail data for advertising, we do not sell it, and we do not use it to train, develop or improve any AI or machine-learning models — ours or anyone else's. Apart from the AI reply drafts described above, Gmail data is not sent to AI providers. Distro staff do not read your Gmail data except with your explicit permission for a specific message, when needed for security purposes, to comply with applicable law, or when the data has been aggregated and anonymized for internal operations.

Distro's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect your mailbox at any time from Outreach → Senders in Distro, and revoke Distro's access from your Google Account permissions. Deleting your Distro account deletes your stored Outreach data, including stored messages and attachments.

Third-Party Services

Distro integrates with the following third-party services to operate the platform:

• Supabase — authentication and database hosting
• OpenAI — AI-powered analysis and content generation, including AI reply drafts you request in Distro Outreach (see “Gmail and Google User Data” above)
• Resend — transactional email delivery
• Polar — subscription billing and payments
• Vercel — application hosting and analytics
• Google (Gmail API) — sending email and detecting replies for mailboxes you connect to Distro Outreach

Each third-party service has its own privacy policy governing how it handles your data. We encourage you to review their respective policies.

Data Storage and Security

Your data is stored securely using industry-standard encryption and access controls. We use HTTPS for all data transmission and restrict access to personal data to authorized personnel only. While no system is completely secure, we take reasonable measures to protect your information from unauthorized access, disclosure, or destruction.

Distro Copilot stores limited connection state and settings in Chrome extension storage so it can stay connected to your Distro account. You can disconnect the extension at any time from the extension interface.

Your Rights

You have the right to access, correct, or delete your personal data at any time. You may also request a copy of the data we hold about you or ask us to restrict its processing. To exercise any of these rights, please contact us at the address below.

Cookies

Distro uses essential cookies to keep you signed in and remember your preferences. We may also use analytics cookies to understand how the platform is used so we can improve it. You can manage cookie preferences through your browser settings.

Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@usedistro.com.