Privacy policy

This Privacy Policy explains how DIST (“DIST,” “we,” “us,” or “our”) handles personal information when you visit distintel.com, create an account, subscribe, or use our crypto-market intelligence features.

Information we collect

We collect information you provide and limited information generated when you use the service:

• Account information: email address, an internal account identifier, email-verification status, and authentication/session records. Passwords are handled by our authentication provider; DIST does not receive or store your readable password.
• Subscription information: membership tier and status, Stripe customer and subscription identifiers, and payment status. DIST does not store complete payment-card numbers.
• Portfolio and preferences: watchlist assets and portfolio information you choose to enter, including asset, quantity, and average cost. Do not enter wallet seed phrases, private keys, exchange passwords, or government identifiers.
• Product analytics: a pseudonymous session identifier, pages viewed, feature interactions, account/onboarding events, and timestamps. We also use Cloudflare Web Analytics to measure aggregate traffic and real-user site performance, including page-load timing and Core Web Vitals. Cloudflare states that this service does not use cookies or local storage for usage measurement and does not track individual users across sites.
• Technical and security information: IP address, browser/device information, request metadata, and security events may be processed by our hosting and service providers to deliver the site, prevent fraud, diagnose failures, and enforce rate limits. DIST stores only a keyed, shortened hash of a network identifier for its own rate-limit counters—not the raw address in that counter.
• Communications: information included when you contact support or submit a privacy request.

How we use information

We use information to authenticate users; provide personalized watchlists, portfolios, alerts, summaries, and market context; manage subscriptions; secure and troubleshoot the service; respond to support requests; measure product performance; comply with law; and enforce our terms. We do not sell personal information and do not use it for cross-context behavioral advertising.

Artificial intelligence

DIST may use artificial-intelligence service providers to generate news summaries, explain possible market catalysts, answer user questions, or personalize a brief. When you use an AI feature, the prompt and the minimum relevant DIST context—such as selected assets, watchlist items, portfolio symbols, market data, or retrieved news—may be sent to an AI provider to produce the response. Do not submit secrets or highly sensitive personal information to AI features. AI output can be inaccurate and is not financial advice. We will update this policy if our AI processing or providers materially change.

Service providers and third-party data

We share information only as needed to operate DIST, complete a transaction, follow your instructions, or comply with law. Providers may include Cloudflare and OpenAI Sites for hosting, databases, private object storage, security, site operation, aggregate web analytics, and performance measurement; Supabase for authentication and account emails; Stripe for checkout, subscription management, fraud prevention, and payment processing; and AI providers when an AI feature is used. Market and intelligence features retrieve information from sources that may include X, CoinMarketCal, CoinPaprika, CoinGecko, and CoinLore. Those sources can independently collect information when you visit their sites or open a source link, under their own privacy policies.

Cookies and similar technologies

DIST uses essential, HttpOnly cookies for authentication, account access, session security, and sign-out. The product-analytics session identifier is kept in browser session storage and expires when that browser session ends. Stripe and linked third-party sites may use their own cookies when you visit them.

Storage, security, and access controls

Account records are stored in non-public databases and are encrypted in transit and at rest by the hosting platform. File storage is configured as a private bucket with no public object URL. Authentication state is stored in Secure, HttpOnly cookies, and DIST’s fast session record is encrypted and authenticated. Portfolio and watchlist requests obtain the user identity from the server-side session and always filter database operations by that identity; a user ID supplied in a URL is not accepted as authority. We also use request-size limits, same-origin controls, rate limits, security headers, and signature verification for configured Stripe webhooks. No system can guarantee absolute security.

Retention

We retain account, subscription, watchlist, and portfolio information while your account is active and as reasonably necessary to provide the service, handle disputes, prevent abuse, satisfy financial or legal obligations, and maintain security. Short-lived rate-limit records expire automatically. Analytics records are retained only as reasonably needed for product and security analysis. We may de-identify information so it can no longer reasonably be linked to you.

Your choices and rights

You may remove watchlist and portfolio entries within DIST. Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection, or to appeal a privacy decision. You may also withdraw consent where consent is the legal basis. We may need to verify your identity before fulfilling a request. You may complain to your local data-protection authority.

International processing

DIST and its providers may process information in the United States and other countries. Data-protection laws may differ from those where you live, and providers may use legally recognized transfer safeguards where required.

Children

DIST is not directed to children under 18, and we do not knowingly collect personal information from children. Contact us if you believe a child has provided information.

Changes

We may update this policy as DIST evolves. We will change the effective date and provide additional notice when required by law.

Contact

For privacy questions or requests, email support@distintel.com.