Privacy Policy

Effective 18 August 2026

This Privacy Policy explains how Swiss Creative Global Sàrl (“Distrot”, “we”, “us”), a company registered in Switzerland, collects, uses and protects personal data in connection with the Distrot platform and the distrot.com website (together, the “Service”).

We act as a data controller in respect of information about our own users, and as a data processor in respect of data we access on our users’ behalf from third-party platforms they choose to connect.

1. Information we collect

Information you provide

Account details such as your name, email address and password credentials.
Business and billing information where you subscribe to a paid plan.
Content you upload, create or store within the Service.
Correspondence you send to us, including support requests.

Information from connected accounts

Where you choose to connect a third-party account — such as an advertising, social, analytics or distribution platform — we access data from that account using the credentials and permissions you grant. This may include account and campaign structure, performance and reporting metrics, creative assets and associated metadata.

We access a connected account only after you have explicitly authorised it, and only to provide the Service to you. You may withdraw that authorisation at any time.

Information collected automatically

Technical data such as IP address, browser type, device information and approximate location.
Usage data describing how you interact with the Service.
Cookies and similar technologies, as described in section 8.

2. How we use information

To provide, operate, maintain and improve the Service.
To create, manage and report on activity in the accounts you connect.
To authenticate you and secure your account.
To process payments and administer subscriptions.
To communicate with you about the Service, including service notices.
To detect, investigate and prevent fraud, abuse and security incidents.
To comply with legal and regulatory obligations.

We do not sell personal data. We do not share data obtained from your connected accounts with other users, and we do not combine one customer’s data with another’s. We do not use data from your connected accounts to train machine learning models.

3. Legal bases

Where the EU or UK General Data Protection Regulation applies, we rely on: performance of a contract with you; our legitimate interests in operating and securing the Service; your consent, where requested; and compliance with legal obligations. Where the Swiss Federal Act on Data Protection applies, we process personal data on equivalent grounds.

4. Sharing and disclosure

We may share information with:

Service providers who host, secure, support or operate parts of the Service on our behalf, bound by confidentiality obligations.
Third-party platforms you have connected, to the extent necessary to carry out actions you have requested.
Payment processors, to administer subscriptions and billing.
Authorities or advisers, where required by law or to establish, exercise or defend legal claims.
A successor entity, in connection with a merger, acquisition or reorganisation, subject to this Policy.

5. International transfers

We are established in Switzerland and our infrastructure is located in the European Union. Where personal data is transferred outside these jurisdictions, we implement appropriate safeguards, including standard contractual clauses or an equivalent recognised mechanism.

6. Retention

Account information is retained for as long as your account remains active.
Performance and reporting data is retained for up to 24 months to support historical comparison.
Data obtained from a connected account is deleted within 30 days of that account being disconnected, or of your account being closed.
We may retain limited records for longer where required for legal, accounting or security purposes.

7. Security

We apply technical and organisational measures appropriate to the risk, including encryption of credentials at rest, encryption in transit, access controls and logical separation of customer data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Cookies

We use cookies and similar technologies that are strictly necessary to operate the Service, together with limited analytics to understand usage. You can control cookies through your browser settings; disabling necessary cookies may affect functionality.

9. Your rights

Subject to applicable law, you may have the right to access, correct, delete, port or restrict processing of your personal data, to object to certain processing, and to withdraw consent. To exercise these rights, contact support@distrot.com. You also have the right to lodge a complaint with your supervisory authority, including the Swiss Federal Data Protection and Information Commissioner.

For deletion specifically, see our Data Deletion page.

10. Children

The Service is intended for business use and is not directed to children. We do not knowingly collect personal data from children.

11. Changes

We may update this Policy from time to time. Material changes will be notified through the Service or by email. The effective date above indicates when this version took effect.

12. Contact

Swiss Creative Global Sàrl
Fribourg, Switzerland
support@distrot.com