Privacy Notice

Information we handle

Account and sign-in information

When you create an account or sign in, DistroHound handles your email address, name when provided, account identifier, authentication provider, and session information. Neon provides DistroHound's authentication and database services.

If you choose Sign in with Google, Google provides an identity credential containing basic profile information used for authentication, including your name, email address, profile image when supplied, and a unique Google account identifier. DistroHound uses this information to create or link your account, sign you in, and maintain your session. DistroHound does not receive your Google password and does not request access to content in services such as Gmail, Google Drive, or Google Calendar.

Product, research, and report information

DistroHound handles the product URLs you submit and information generated from or associated with those submissions, including product names and descriptions, competitor selections, public research sources, research results, reports, and report activity such as saved, dismissed, or completed actions and any notes you add.

Billing information

Stripe hosts DistroHound's checkout and billing portal. Stripe handles the payment details you enter there. DistroHound receives and stores billing references and transaction records needed to provide access and reconcile purchases, including Stripe customer, checkout, payment, subscription, price, and invoice identifiers; transaction amounts and currency; and payment or subscription status. DistroHound does not receive full payment-card details from Stripe Checkout.

To create and manage billing customer records, DistroHound may send your account email address to Stripe.

Usage and security information

DistroHound uses Vercel for hosting and analytics. The application records page views and named product-funnel events, such as starting an analysis, beginning authentication or checkout, and viewing a report. Before analytics events are sent, DistroHound removes URL query parameters except bounded campaign-attribution labels and excludes authentication, administration, and API paths.

DistroHound also uses a derived, opaque identifier based on a network address to enforce request limits. The application database stores the derived rate-limit key rather than the network address used to produce it.

Email delivery information

DistroHound uses Resend to send account verification, password recovery, and report-delivery messages. The service processes the recipient email address and message content. DistroHound records delivery status and provider message identifiers.

How we use information

We use the information described above to:

• authenticate users and maintain account sessions;
• create, research, publish, deliver, and protect access to reports;
• process purchases, subscriptions, refunds, credits, and billing access;
• save report actions and account preferences;
• send transactional account and report emails;
• measure the product funnel and understand whether product features are working; and
• prevent abuse, enforce request limits, investigate failures, and protect the service.

How we disclose information

DistroHound uses the following service providers to operate the service:

• Neon provides authentication and database infrastructure and processes account, session, and application data.
• Google provides the identity credential used when you choose Sign in with Google.
• Stripe provides hosted checkout, payment processing, subscription management, and the billing portal and processes account email addresses used for billing customer records.
• Vercel provides application hosting and analytics.
• Resend delivers transactional account and report emails.
• OpenAI processes submitted product URLs and related public product and competitor information to generate research and reports. DistroHound configures these research requests with response storage disabled. DistroHound does not send your Google profile information to OpenAI for report generation.

These providers process information for the operational purposes described above and under their own applicable terms and privacy notices.

Google user data

DistroHound accesses only the basic identity information described in the Sign in with Google section. We use that information only to authenticate you, associate your activity and purchases with your DistroHound account, and maintain your account session. We store the resulting account record and account association through Neon Auth and DistroHound's Neon-hosted database. We disclose this information to Neon as needed to provide authentication and account storage. When needed to provide billing and transactional email, we also disclose your account email address to Stripe and Resend, respectively. We do not use Google user data to generate research reports.

Storage, protection, and retention

DistroHound stores account and application records in its Neon-hosted database. Private reports and account actions are associated with an authenticated account. DistroHound uses authentication and server-side access controls to protect the service and its records.

DistroHound does not apply one fixed retention period to every category of information. Account, report, billing, delivery, security, and audit records may be retained for different periods based on the operation of the service, transaction integrity, security, dispute resolution, and applicable legal obligations.

Your choices and requests

You can choose email and password sign-in instead of Sign in with Google. You can sign out of DistroHound at any time.

To request access to, correction of, or deletion of your DistroHound account information, email support@auroratechnologies.xyz. A deletion request may not remove records that must be retained for transaction integrity, security, dispute resolution, or applicable legal obligations.

Contact

Questions or requests about this notice or DistroHound's handling of information may be sent to: