Privacy Policy.

Devlo is operated by Waseem Amjad, a sole proprietor based in Pakistan (“Devlo”, “we”, “us”, “our”). This policy covers the Devlo app (app.devlo.co.uk), this website (devlo.co.uk) and our studio services. Contact us about privacy at [email protected].

Controller — for your own account data (your name, email, billing and how you use Devlo), we decide how it is used, as described here.

Processor — for the contact lists you upload and email, you are the controller and we process that data only on your instructions, to run your campaigns, inbox and reports.

If you received an email sent through Devlo, use its unsubscribe link or contact the sender — the sender controls that list.

• Account details — name, email, company, and your password (stored hashed). If you sign in with Google, we receive your name and email from Google.
• Billing — your plan and payment history. Card details are handled by our payment provider; we never see or store them.
• Your content — contact lists, campaigns, emails in connected inboxes, WordPress posts, designs, chat messages, notes and files you upload.
• Connected accounts — the details you give us to connect your mailboxes, WordPress sites, social accounts or AI key, stored encrypted and used only for the actions you ask for.
• Campaign activity — opens, clicks, approximate location (from IP address), device and email app, unsubscribes and bounces of the emails you send.
• Technical data — log data such as IP address, browser and times of access, to keep the Service secure and working.
• Messages to us — what you write when you email us or use the contact form.

• To provide the Service and your studio project — contract.
• To bill your plan through our payment provider — contract.
• To send account emails such as sign-up, security and billing notices — contract.
• To prevent abuse and spam and keep the Service secure — legitimate interests.
• To answer your messages and support requests — legitimate interests.
• To send you product news, only if you asked for it — consent, which you can withdraw at any time.

AI features send only the text needed for the task (for example, the description of an email you want drafted) to the AI provider you chose, using your own API key, under that provider’s terms. Nothing is sent to an AI provider unless you use an AI feature.

We do not sell personal information. We share it only with:

• service providers who help us run Devlo — hosting, cloud storage, content delivery and security (such as Cloudflare), email delivery and our payment provider — each bound to protect it;
• services you connect yourself, to carry out what you ask;
• authorities, where the law requires it;
• a buyer of the business, if that ever happens — you would be told first.

Devlo is run from Pakistan and our servers and providers are in other countries, including the United States. Where personal data leaves the UK or EEA, we rely on safeguards the law recognises, such as standard contractual clauses.

We keep your account data while your account is open. When you close it, we delete or anonymise your personal data within a reasonable time, except what we must keep for legal, tax or accounting reasons. Backups roll over and are removed on their normal schedule.

Traffic is encrypted with HTTPS, passwords are hashed, and connected-account secrets and contact email addresses are encrypted at rest. Access is limited to people who need it. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

Depending on where you live (for example under UK GDPR), you can ask to access, correct, delete, restrict or move your data, and object to some uses. Most details can be changed in your account; for anything else, email [email protected]. You can also complain to your data protection authority — in the UK, the Information Commissioner’s Office (ico.org.uk).

Residents of California have the right to know, delete and opt out of the “sale” of personal information. We do not sell personal information.

This website sets no cookies of its own and uses no analytics or advertising trackers. The app uses essential cookies to keep you signed in and secure. See the Cookie Policy.

Devlo is a business service and is not meant for anyone under 16. We do not knowingly collect their data; if you think we have, contact us and we will delete it.

We may update this policy. The date at the top shows the latest version; for important changes we will also tell account holders by email.

Questions about this policy: [email protected].