Privacy Policy

We collect information in three main ways: directly from you, automatically, and from third parties you connect.

• Account & Profile. Name, email, password (hashed), organization, role, settings, and preferences.
• Usage. App actions (e.g., projects created, sources/destinations configured), feature interactions, timestamps, and diagnostics/logs.
• Device/Technical. IP address, approximate location (derived from IP), device/browser type, OS, referral URLs, language, crash data, performance metrics.
• Payment. If you purchase a plan, our payment processor (e.g., Stripe) collects and processes payment data. We store plan, status, and last4/brand tokens—not full card numbers.
• Content You Provide. Lead criteria, prompts, saved threads, destinations, notes, and any files or links you upload or paste.
• Third-Party Accounts You Connect. If you link Reddit, X (Twitter), LinkedIn, or others, we receive tokens/permissions and data those platforms make available per your authorization (e.g., subreddit lists, hashtags, posts, public profile/IDs). What we can access depends on the scopes you approve and each platform’s policies.
• Communications. Emails, support chats, and survey responses.
• Cookies & Similar Tech. Cookies, local storage, and SDKs to remember settings, keep you signed in, measure performance, and improve the experience.

We use information to:

• Provide, operate, and maintain the Service (including account auth and session management).
• Find, rank, and deliver relevant threads/leads based on your project criteria and sources.
• Improve and develop features, including analytics, debugging, and research.
• Personalize content and recommendations (e.g., suggested subreddits/hashtags, sources).
• Process payments, prevent fraud/abuse, and enforce policies.
• Send transactional messages (e.g., receipts, critical notices) and, where permitted, product updates/marketing (you can opt out).
• Comply with legal obligations and respond to lawful requests.

If you’re in the EEA/UK, our legal bases include: Contract (to provide the Service), Legitimate Interests (e.g., security, product improvement, insights), Consent (e.g., certain cookies/marketing), and Legal Obligation (e.g., tax/records).

We keep information as long as needed to provide the Service and for legitimate business/legal purposes. Retention varies by data type (e.g., logs have shorter windows). We also consider your deletion requests and platform rules for connected accounts. When data is no longer needed, we delete or de-identify it.

We do not sell personal information. We share information in these scenarios:

• Service Providers. Vendors that help us run the Service (hosting, analytics, email, payments, error monitoring, customer support). They’re bound by confidentiality and only use data per our instructions.
• Third-Party Platforms You Connect. When you connect Reddit/X/LinkedIn, we use tokens and share data as needed to fetch or post content per your settings/commands.
• Business Transfers. In a merger, acquisition, financing, or sale of assets, data may be transferred with appropriate safeguards.
• Legal. To comply with law, protect rights, safety, and the integrity of the Service, or respond to lawful requests.
• Aggregated/De-identified Data. We may share insights that do not identify you.

Your use of third-party platforms is governed by their terms and privacy policies. Data available through their APIs can change or be revoked at any time. If you disconnect a platform in Destall, we stop using the token; we may retain minimal records (e.g., which integrations were connected and when) for security, billing, and audit purposes.

We use cookies/SDKs for authentication, preferences, analytics, and performance. You can manage cookies in your browser and opt out of certain analytics/ads where offered. Blocking cookies may break some features. We honor applicable “Do Not Sell/Share” signals where required and provide in-app controls where relevant.

Depending on your location, you may have rights to access, correct, delete, or port your data; object to or restrict certain processing; and withdraw consent. You can also opt out of marketing emails. To exercise rights, contact us at support@destall.app. We may verify your request and respond within the time required by law.

If you’re in the EEA/UK, you can complain to your data protection authority. We’d appreciate a chance to resolve issues first.

We use administrative, technical, and organizational measures designed to protect information (e.g., encryption in transit, access controls, least-privilege practices). No system is perfectly secure; please keep your credentials safe and tell us right away if you suspect unauthorized activity.

We may transfer, store, and process information outside your country, including in the United States. When we do, we use appropriate safeguards (e.g., Standard Contractual Clauses) where required by law.

The Service isn’t directed to children under 16 and we don’t knowingly collect personal information from them. If you believe a child has provided us personal information, contact us to request deletion.

Some features may use automation/AI (including large language models) to analyze inputs you provide (e.g., project descriptions, lead criteria, and public posts) to suggest sources, rank threads, or generate outreach templates. We apply access controls and usage policies to protect your data. We do not allow providers to train on your identifiable data for their own models. If we ever change that, we’ll ask for your explicit consent.

We may update this Policy from time to time. If we make material changes, we’ll provide reasonable notice (e.g., by posting to the site or emailing you). Your continued use of the Service after the effective date means you accept the updated Policy.

Questions or requests? Email support@destall.app. If you need a Data Processing Addendum (DPA), you can review it at /dpa and see our sub-processors at /subprocessors.

If you’re a resident of California (CPRA) or other US states with similar laws (e.g., CO/CT/VA), you may have additional rights regarding access, deletion, correction, portability, and limiting certain data uses. We do not “sell” personal information as defined by CPRA, nor do we “share” it for cross-context behavioral advertising. You can send a rights request to support@destall.app. If you use an authorized agent, we may require proof of authorization and your verification.