DistLoopPrivacy Policy
Last updated 11 October 2026
1Who we are
DistLoop (https://distloop.com) is run by Yarkey Limited, a company registered in England and Wales with company number 15875161. Our registered office is 91 Gordon Road, London, W5 2AL.
Yarkey Limited is the controller of the personal data this policy describes. "We" and "us" mean Yarkey Limited.
2What we collect
- Your account: your email address and a password, which our sign in provider stores as a hash. If you sign in with Google, we receive your name, email address and profile picture from Google.
- Your projects: what you type in setup, such as the project name, its link, what it is and your Instagram handle.
- Connected accounts: when you connect Google Ads, YouTube or Meta (Facebook, Instagram and Meta Ads) through OAuth, we receive an access or refresh token and the account id, name, email address and picture. We encrypt every token at rest with AES-256-GCM.
- Data we read through those connections when DistLoop needs it: ad accounts, campaigns and their numbers (impressions, clicks, cost, conversions), YouTube channel data and analytics, and the reach of your posts.
- Dists: the posts DistLoop makes for your projects, their files and text, your decisions and comments in the Queue, and the results of publishing.
- Assistant chat: the messages you send to the DistLoop assistant and its replies.
- Records and logs: a record of each action DistLoop takes on a connected account, admin sign in records, and the technical logs our hosts keep, such as IP address, browser and time.
3How we use it
We use this data to run DistLoop for you: to make Dists, show them in your Queue, publish the Dists you accept, read how many people saw them, answer you in the assistant, keep the service secure and send account emails such as email confirmation and password reset.
DistLoop publishes on a connected account only after you accept that Dist in your Queue.
We do not sell personal data. We do not use data from Google or Meta to build advertising profiles, and we do not use it to train AI models.
We use data from Google APIs only to give you the features you see in DistLoop, and we follow the Google API Services User Data Policy, including its Limited Use requirements.
4Legal bases
Under UK data protection law we rely on: the contract with you, to provide DistLoop; your consent when you connect an account, which you can withdraw at any time by disconnecting it; and our legitimate interests in keeping DistLoop secure and working.
5Who processes it for us
- Supabase: database, sign in and file storage, in the EU (Frankfurt).
- Vercel: hosting of the website and the API.
- Resend: account emails.
- AI model providers, currently Fireworks AI: they write Dist text and assistant replies from what DistLoop sends them.
- Google and Meta receive data when DistLoop acts on your connected accounts through their APIs.
Some of these providers process data outside the UK, for example in the United States, under the safeguards in their data processing terms.
6How long we keep it
We keep your data while your account exists. When you disconnect an account, we revoke its token with the provider and delete the token. When you delete your account, we delete your projects, Dists and their files, connections, chat and action records at once.
Our hosts keep technical logs and backups for a limited time on their own schedules, after which they expire.
7Your rights
You can ask to see, correct, export or delete your data, and you can object to or limit how we use it. You can delete your account and all its data yourself, as the data deletion page explains.
To use any other right, write to Yarkey Limited, 91 Gordon Road, London, W5 2AL. You can also complain to the Information Commissioner's Office at ico.org.uk.
8Age
DistLoop is for businesses and people aged 18 or over.
9Changes
We will post any change to this policy on this page and change the date at the top. If a change is significant, we will tell you by email before it applies.