DISTILL MARKETS PTY LTD (ACN 699 294 490, ABN 36 699 294 490) is committed to handling your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). This policy explains what we collect and how we use it.
What we collect
Email address and name, supplied when you register or, if you sign in with Google or Microsoft, by that provider; subscription and billing details; for a Commercial subscription, the entity name and the confirmation that you are authorised to bind it, given at checkout; for a free trial, the fingerprint of the payment card used, supplied by Stripe (an identifier derived from the card number, not the number itself); product usage records, including per-endpoint request counts, the channel each request came through (an API key, your browser session, or a connected MCP client) and when each of your API keys was last used; how you arrived at sign-up (the landing page, the referring site and any campaign tags in the address), recorded once at registration; security logs of sign-in, registration and key-management events, each recording the IP address and browser identifier of the request; application logs; and technical data such as IP address and browser identifier. We do not collect financial account credentials, brokerage logins, or trading history. Values you supply to a calculation endpoint, such as a price for a valuation, are used to compute that response and are not stored.
Cookies
We use essential cookies to sign you in and keep your session secure. We set these ourselves; they are necessary for the service to function, and we do not use them for third-party advertising or analytics.
Third-party processors
We share limited data with service providers who process it on our behalf: Google and Microsoft (sign-in, only if you choose to sign in with one of them; the provider shares your email address and name with us), Stripe (payments), Resend (email delivery), Microsoft Azure (API hosting and database storage, Sydney region), Cloudflare (hosting for our website and MCP server, content delivery, bot protection on sign-in and registration, security, and cookieless web analytics that count page views by page, referrer, browser and country without identifying you or tracking you across sites; it processes your IP address and stores the authorisation tokens issued when you connect an MCP client), and OpenAI (automated analysis of public filing and news data). Each processes data under its own terms.
How we use it
To provide and secure the service, process payments, limit free trials to one per payment card, send service and account emails, and improve the product. We may also send an occasional product email about the service; every such email carries an unsubscribe link, and you can turn them off at any time under Settings. Account emails, such as verification and password resets, are part of running your account and are not optional. Usage records, sign-up source and security logs are also viewed in aggregate and per account by our own staff, to understand how people find and use the service and to investigate abuse; they are not sold or shared for advertising. Our legal basis is performance of our contract with you and our legitimate interests in operating the service.
Retention
We retain personal information for as long as your account is active and as needed to meet legal and operational requirements, then delete or de-identify it. Security logs are kept for 90 days.
A card fingerprint recorded for a free trial is kept, together with the account it was used on, for as long as we offer free trials, including after that account is deleted. This is what allows each card to start only one trial.
Cross-border disclosure
Our primary database is hosted in Australia (Microsoft Azure, Sydney region). Some of our other processors are located overseas (including the United States), so some of your data may be processed outside Australia. We take reasonable steps to ensure it is handled consistently with the APPs.
Data breaches
If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.
Your rights
You may request access to, or correction of, your personal information, and you may request deletion of your account and associated data. Contact us at support@distillmarkets.com.
Complaints
If you have a privacy concern, contact us at support@distillmarkets.com and we will respond. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Changes to this policy
We may update this policy from time to time. The current version is always available here, with the “last updated” date shown above; where a change is material we will take reasonable steps to notify you.
Who we are
DISTILL MARKETS PTY LTD · ACN 699 294 490 · ABN 36 699 294 490. Privacy contact: support@distillmarkets.com.