Draft — pending legal review

Version 2026-10-17

Privacy Policy

In plain English

✓ For your account data, we are the controller.

✓ For recipient and contact data you send through us, we are a processor acting on your instructions.

✓ Open and click tracking happens only when a customer enables it.

Who We Are

DevelEmail is operated by Develemit LLC, an Arizona limited liability company. It is an email-sending platform for businesses.

Account Data (We Are the Controller)

We collect the data you give us to create and run your account: name, email address, password hash, organization details, billing information handled by our payment processor, and usage records. We use it to provide the service, secure accounts, bill you, and communicate with you. For this data we are the controller.

Access Requests

If you ask for access through our request form, we collect your name, work email, company, website (optional), intended use case, expected monthly volume, and how you heard about us. We also keep a coarse prefix of your IP address to rate-limit abuse of the form. We use this only to review your request, contact you about it, and prevent abuse. Our legal basis is our legitimate interest in vetting senders and protecting the service, and steps you ask us to take before entering a contract. We keep requests for as long as needed to decide and follow up, and delete them on request.

Recipient and Contact Data (We Are the Processor)

Customers send us recipient addresses, contact details, and message content. For this data the customer is the controller and we are a processor acting on the customer’s instructions. Our Data Processing Agreement applies. We do not use recipient data for our own purposes.

Email Content and Event Logs

We store message content and delivery events (sent, delivered, bounced, complained) to operate the service. Opens and clicks are recorded only when the customer has enabled tracking for that project; transactional mail is never tracked.

Retention

We keep account data while your account is active and for a limited period afterward as needed for legal, tax, and security purposes. Message content and event logs are kept for the retention period of your plan, then deleted. Deleted data may persist in backups for a short period.

Security

We use encryption in transit, access controls, encrypted backups, and monitoring. No system is perfectly secure, and we cannot guarantee absolute security.

International Transfers

Data is hosted in the European Union (Hetzner Online GmbH, Nuremberg, Germany), while Develemit LLC is based in the United States, so data may be accessed from the United States. We rely on appropriate safeguards where required.

Subprocessors

We use these subprocessors:

• Hetzner Online GmbH — Server hosting for the application, database, and mail servers

• Cloudflare, Inc. — DNS, CDN, and TLS termination

• Cloudflare R2 — Encrypted backups

• Stripe, Inc. — Payment processing, via Develemit's emit-billing service

• emit-vision — First-party error and usage telemetry, operated by Develemit LLC

Minimum Age

DevelEmail is not intended for anyone under 16. We do not knowingly collect data from them.

Your Rights

You may request access to, correction of, or deletion of your account data. If you are a recipient of a customer’s email, contact that customer; we will assist them as their processor.

Contact

Privacy questions: [email protected]