Privacy policy
Last updated 12 October 2026
Who we are
Distill AI Ltd ("Distill", "we", "us") runs the Distill website at distill.review and the Distill app at app.distill.review. We are registered in England and Wales, company number 17488331, at 36a Staines Road, Twickenham, TW2 5AH.
We are the controller for personal data we collect to run our website and your account. When your organisation connects its code, conversations and tools to Distill, your organisation is the controller of that content and we process it on its behalf.
Questions about this policy go to jamie@distill.review.
What we collect
- Account details. Your name, work email, profile picture and the organisations you belong to.
- Connected accounts. When you connect GitHub or Slack, we receive your account identifiers and the access your organisation grants us.
- Workspace content. Pull requests, code, commit history, comments and messages from the repositories and channels your organisation connects, and the Distills, decisions and discussions you create in Distill.
- Preferences. The profile you write so Distill can tailor what it shows you, and settings such as audio narration.
- Usage and device data. Pages you visit, actions you take, your IP address, browser type, logs and error reports.
- Things you send us. Your email when you sign up for updates, feedback, booking details and anything you write to us.
How we use it
- To provide Distill: signing you in, reading your changes, writing Distills, routing decisions to the right people and syncing discussions. Our basis is our contract with you or your organisation.
- To keep Distill secure and working, fix errors and understand how it is used so we can improve it. Our basis is our legitimate interest in running a reliable product.
- To send updates you asked for, and to reply when you contact us. Our basis is your consent, which you can withdraw at any time.
- To meet legal, tax and accounting obligations.
We do not sell personal data. We do not use your workspace content to train AI models.
AI processing
Distill sends the content of a change to AI model providers to write a Distill about it. It may run your code in an isolated sandbox to show the change working. Outputs can be wrong. A person on your team makes every decision Distill puts in front of them.
Who we share it with
We share personal data with the service providers below, only as needed to run Distill and under contracts that require them to protect it. We may also share data to comply with the law, or with a buyer if Distill is sold.
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare | Hosting, database and file storage | Global |
| Anthropic | AI models that write Distills from your changes | United States |
| E2B | Isolated sandboxes that run your code to show it working | United States |
| Deepgram | Spoken audio, only for people who turn it on | United States |
| Resend | Sign-in codes and product email | United States |
| Sentry | Error reports | United States |
| Axiom | Application logs and traces | United States |
| OpenPanel | Product and website analytics | European Union |
| Cal.com | Booking calls from our website | United States |
GitHub and Slack receive data when you or your organisation choose to connect them, under their own terms. When we transfer personal data outside the UK, we rely on adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
How long we keep it
We keep account and workspace data while your organisation uses Distill. When an organisation leaves, we delete its data within 90 days, apart from records we must keep by law. Logs and error reports expire within 90 days. Records of deletion requests are kept so we can show we handled them.
Security
We encrypt data in transit and at rest and limit who can access it. Read more in our trust centre.
Cookies
The app uses essential cookies to keep you signed in. Our analytics do not use cookies for tracking.
Your rights
Under UK and EU data protection law you can ask to access, correct, delete or export your personal data, and object to or restrict how we use it. Email jamie@distill.review for any of these. We reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office.
Delete your data
Use this form to ask us to delete the personal data we hold about you. We log every request, confirm it is you by email and tell you when it is done. If your organisation controls the data, we will let them know so they can act on it.
Children
Distill is for work and not intended for anyone under 16.
Changes
We will update this page when our practices change and email account holders about significant changes.