Privacy Policy

DSTIL is committed to protecting the privacy and data of Business Owners using our platform. This Privacy Policy outlines how DSTIL collects, uses, stores, protects, and shares personal and business information in accordance with the General Data Protection Regulation (GDPR) and French data protection laws (Loi Informatique et Libertés).

Who This Policy Applies To

This policy applies to all Business Owners and users who engage with DSTIL, including by registering, listing a business, uploading documents, or interacting with our tools and features.

What Data We Collect

Personal Data

Full name, contact details, professional role
Credentials used for secure login

Business Data

Legal entity information
Financial and operational records (e.g., revenue, EBITDA)
Deal preferences and sale-related objectives

Document-Based Data

Documents uploaded by the Business Owner (PDF, Excel, image)
Data extracted via Optical Character Recognition (OCR)

Third-Party and AI-Derived Data

Enrichment from public sources (e.g., EDGAR)
Data identified or suggested by our AI assistant, EDGAR, which helps assess Deal Readiness and prompts for missing information

Behavioral and Technical Data

Browser type, IP address, session time, device type
Navigation patterns within DSTIL, including clicked features, time spent per screen, and usage frequency, to improve the overall platform experience

How We Collect Your Data

Through our Business Owner questionnaire
From uploaded documents, which are scanned and structured with OCR
Via EDGAR, which surfaces insights and data gaps
From your interactions and navigation behavior on the platform
From third-party sources such as public business registries

Why We Collect Your Data

DSTIL uses your data to:

Create and maintain an accurate business listing
Assess and display your Deal Readiness Score
Recommend missing or incomplete inputs via EDGAR
Match you with potential buyers more effectively
Personalize your user experience
Analyze user navigation to optimize usability and interface design
Provide support and ensure secure platform operation
Comply with applicable legal obligations

Data Anonymization and Confidentiality

Business profiles are anonymized before any buyer interaction. Personally identifiable business data is disclosed only after mutual opt-in between you and a buyer. All data transfers are securely controlled.

Data Retention

Your data is retained:

While your account remains active
As necessary for legal or operational purposes (e.g., financial audits)
Until you explicitly request data deletion, unless otherwise required by law

Data Protection Measures

We secure your data through:

AES-256 encryption at rest and TLS in transit
Document access control with time-based and user-specific restrictions
Multi-layer authentication and session management
Secure hosting in GDPR-compliant environments
Continuous monitoring and periodic penetration testing

DSTIL does not sell your data.

We may share it with:

Verified buyers (only with your consent)
Trusted third-party service providers under strict contracts
Legal or regulatory authorities, if required

All data sharing respects the purpose limitation and data minimization principles.

Your Data Rights

You have the right to:

Access and receive a copy of your stored data
Request correction of inaccurate data
Request data deletion or restrict processing
Object to processing based on legitimate interests
Withdraw consent at any time
Request data portability to another provider

To exercise these rights, email us at privacy@dstil.com.

International Transfers

Data is stored and processed in the EU. If transferred internationally, DSTIL uses standard contractual clauses and ensures equivalent protection.

Policy Updates

We may revise this Privacy Policy periodically. Significant changes will be communicated via the platform or email. Continued use after the update date indicates acceptance.

Contact Us

Email: privacy@dstil.com

Address: DSTIL SAS, 12 Rue de l’Innovation, 75003 Paris, France