Privacy Policy

We collect the following categories of personal data:

• Account data: name, email address, company name, role — provided when you register.
• Usage data: pages visited, searches performed, reports generated — collected automatically via server logs.
• Billing data: payment method details are processed directly by Stripe and never stored on our servers.
• Business contact data: names, titles, and professional email addresses of pharma distributor personnel sourced from public regulatory registries, company websites, and professional directories.

• To provide, operate, and improve the Distrolens platform.
• To process payments and manage subscriptions via Stripe.
• To send transactional emails (password reset, billing receipts).
• To compile and maintain our distributor database from public sources.
• To comply with legal obligations.

We do not sell your personal data to third parties.

For users in the European Economic Area, our legal bases are:

• Contract performance — to deliver the service you subscribed to.
• Legitimate interests — to improve the platform and prevent fraud.
• Legal obligation — to comply with applicable law.
• Consent — where we ask for it explicitly (e.g. marketing emails).

We share data only with:

• Stripe — payment processing.
• Resend / Amazon SES — transactional email delivery.
• Vercel / Neon — hosting and database infrastructure.
• Sentry — error monitoring (anonymized stack traces only).

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion ("right to be forgotten").
• Object to or restrict processing.
• Data portability (receive your data in a machine-readable format).
• Lodge a complaint with your local data protection authority.