Privacy Policy

22 June 2026

This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit our website, create an account, use Distiq or Rankvia, contact us, connect integrations, or otherwise interact with our services.

Distiq and Rankvia are operated by Vitaleo Naturals SL, trading as Distiq and Rankvia. For the purposes of applicable data protection laws, Vitaleo Naturals SL is the data controller for the processing described in this Privacy Policy, unless otherwise stated.

• Legal name: Vitaleo Naturals SL
• Trading names: Distiq and Rankvia
• Tax ID / VAT number: B10573012
• Registered address: C/ Perú, 186 bis, 08020 Barcelona, Spain
• Contact email: info@distiq.ai
• Website: https://distiq.ai

This Privacy Policy applies to Distiq, Rankvia, our public website, account dashboard, contact forms, support and feedback forms, website analysis features, integrations, content workflow tools, and related communications.

Rankvia is Distiq's search and AI visibility product. It helps businesses analyze their website, create a business profile, identify SEO and AI-search content opportunities, and generate briefs, drafts, and related recommendations.

Depending on how you use the service, we may collect:

• Account data: name, email address, login details, account identifiers, workspace membership, preferences, and authentication information.
• Business and website data: website URL, company or product name, business description, audience, positioning, competitors, products, offers, content strategy, language, target market, and related business profile information.
• Website analysis data: publicly accessible website pages, page titles, meta descriptions, headings, visible page text, schema types, page summaries, product signals, conversion signals, internal links, and other information needed to analyze your website.
• Generated content and workflow data: content opportunities, target queries, briefs, drafts, metadata, scheduled content items, article/page generation settings, and content workflow preferences.
• Integration data: connection status and selected data from integrations you authorize, such as Google Search Console properties, search performance data, or future CMS/publishing integrations.
• Billing data: plan, subscription status, billing identifiers, payment status, invoices, VAT/tax information, and related transaction data. Payment card details are processed by our payment provider and are not stored directly by us.
• Support and feedback data: contact requests, support messages, feedback, feature requests, category, subject, message content, page URL, workspace context, website context, and related diagnostic information.
• Usage and analytics data: pages visited, product actions, events, feature usage, timestamps, device/browser information, approximate location, referrer, and performance data.
• Technical and security data: IP address, session identifiers, logs, error reports, device information, browser type, operating system, authentication events, and fraud/security signals.
• Communications data: emails, messages, responses, product updates, transactional communications, and preferences.

You should not submit highly sensitive information unless it is necessary for your use of the service and you have the right to provide it.

Do not submit passwords, secret keys, payment card numbers, health records, government identification documents, confidential legal documents, or other highly sensitive data through prompts, website analysis inputs, support forms, feedback forms, or generated content workflows.

We collect personal data:

• directly from you when you create an account or use the service;
• from websites or URLs you ask Rankvia to analyze;
• from integrations you choose to connect;
• from payment, authentication, email, analytics, and infrastructure providers;
• automatically through cookies, logs, analytics, and similar technologies.

We use personal data to:

• provide, operate, secure, and maintain Distiq and Rankvia;
• create and manage accounts, sessions, and workspaces;
• analyze websites and generate business profiles;
• identify content opportunities and create briefs, drafts, and recommendations;
• connect and operate integrations such as Google Search Console;
• process subscriptions, billing, taxes, invoices, and payment-related records;
• respond to support requests, contact forms, and feedback;
• send transactional emails, account notices, and service communications;
• improve product quality, reliability, security, and user experience;
• monitor usage, diagnose errors, prevent abuse, and protect the service;
• comply with legal, tax, accounting, regulatory, and security obligations;
• send marketing or product communications where legally permitted or where you have consented.

We process personal data under the following legal bases, depending on the context:

• Contract performance: to provide the service, manage accounts, process subscriptions, and deliver features you request.
• Legitimate interests: to improve the product, prevent abuse, secure the service, understand product usage, respond to non-contractual inquiries, and operate a reliable SaaS business.
• Consent: where required for marketing communications, optional cookies, certain integrations, or optional processing.
• Legal obligation: to comply with tax, accounting, billing, consumer, security, and regulatory requirements.

Distiq and Rankvia may use AI providers to process website content, business profile data, prompts, instructions, search/content signals, and related information in order to generate summaries, recommendations, content opportunities, briefs, drafts, and other AI-assisted outputs.

We aim to send only the information reasonably necessary to provide the requested functionality. You are responsible for reviewing all AI-assisted outputs before relying on them or publishing them.

If you connect Google Search Console or another integration, we process the information made available through that integration to provide the service. For Google Search Console, this may include selected property information, query data, page data, impressions, clicks, CTR, positions, dates, and related search performance signals.

You can disconnect integrations where the product provides that option. Disconnecting an integration may limit functionality or reduce the quality of recommendations.

We may use Stripe or another payment provider to process payments, subscriptions, invoices, tax IDs, VAT, receipts, and billing details. Payment card data is processed by the payment provider and is not stored directly by us.

We may store payment provider identifiers, subscription status, plan, billing period, invoice references, tax status, and related billing information in order to manage access, plan limits, accounting, and legal obligations.

We may use analytics and monitoring tools such as Google Analytics, PostHog, and Sentry to understand how users use Distiq and Rankvia, improve onboarding, diagnose errors, measure product performance, and identify reliability or security issues.

Google Analytics may process information such as pages visited, approximate location, browser and device information, traffic source, interactions, and event data. Google Analytics acts as a processor for Google Analytics customers under GDPR. We configure analytics tools to avoid intentionally sending sensitive data such as raw website text, generated content, AI prompts and responses, secrets, authentication headers, cookies, or payment card data.

We may use cookies and similar technologies to operate the website, maintain sessions, secure accounts, remember preferences, measure usage, and improve the service.

Where required, we will ask for consent before using non-essential cookies or similar technologies. More information may be provided in a separate Cookie Policy or cookie notice.

We use third-party service providers to operate and improve Distiq and Rankvia. These providers may process personal data on our behalf or as independent controllers, depending on the service and context.

Current or planned providers may include:

• Supabase: authentication, database, storage, and backend services.
• Vercel or hosting provider: website and application hosting, deployment, and infrastructure.
• Stripe: payments, subscriptions, invoices, tax ID collection, and tax calculation.
• Resend: transactional email delivery.
• OpenAI and/or Anthropic: AI-assisted analysis, summarization, recommendations, briefs, drafts, and related outputs.
• Google: Google OAuth, Google Search Console, and related integration services where authorized by the user.
• Google Analytics: website and product analytics, traffic measurement, page views, acquisition reporting, and conversion measurement where analytics consent is given or where legally permitted.
• PostHog: product analytics and product usage insights.
• Sentry: error monitoring, reliability, and debugging.

We may update our providers as the service evolves. Where required, we will use appropriate agreements and safeguards with processors.

Some providers may process personal data outside the European Economic Area. Where required, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, additional technical and organizational measures, or other lawful transfer mechanisms.

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the service, complying with legal obligations, resolving disputes, enforcing agreements, maintaining security, and improving the product.

• Account data: retained while your account is active and for a reasonable period afterwards where needed for legal, security, or operational purposes.
• Billing and tax records: retained for the period required by applicable tax, accounting, and legal obligations.
• Support and feedback: retained as needed to respond to requests, improve the product, and maintain records of support interactions.
• Website analysis and generated content: retained as needed to provide Rankvia functionality, unless deleted or removed according to product capabilities or legal requirements.
• Logs and security data: retained for a limited period unless needed for security, fraud prevention, abuse investigation, or legal compliance.

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, authentication, encryption in transit, provider security controls, monitoring, logging, and internal data minimization practices.

No online service can be guaranteed completely secure. You are responsible for keeping your account credentials secure and for using strong passwords and appropriate access controls.

Subject to the conditions and limits under applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• request data portability where applicable;
• withdraw consent where processing is based on consent;
• not be subject to certain solely automated decisions where applicable;
• lodge a complaint with a supervisory authority.

In Spain, the supervisory authority is the Spanish Data Protection Agency, Agencia Española de Protección de Datos (AEPD).

To exercise your rights or ask privacy questions, contact us at info@distiq.ai.

We may ask you to provide information needed to verify your identity and process your request. We will respond within the timeframe required by applicable law.

We may send product updates, onboarding emails, educational content, or marketing communications where legally permitted or where you have consented. You can unsubscribe from marketing communications using the unsubscribe link in the email or by contacting us.

We may still send transactional or service-related messages, such as account, billing, security, support, and product-operation notices.

Distiq and Rankvia are not directed to children and are intended for business and professional users. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify users, such as through the website, dashboard, email, or other appropriate channels.

The updated version will be indicated by the "Last updated" date at the top of this page.

For privacy questions or requests, contact us at info@distiq.ai.