Legal

Privacy Policy

Last updated: March 1, 2025

Welcome to Theevy ("we", "our", or "us"). We operate the email marketing and delivery platform available at emails.theevy.com (the "Service"). This Privacy Policy explains how we collect, use, store, and share information about you when you use our Service. By accessing or using Theevy, you agree to this policy.

1. Information We Collect

We collect information you provide directly to us, information we collect automatically when you use the Service, and information from third-party sources. This includes:

  • Account information: When you register, we collect your name, email address, password (hashed), company name, and billing details.
  • Campaign data: Email content, recipient lists, templates, and campaign configurations you upload or create.
  • Usage data: Pages visited, features used, clicks, session duration, IP address, browser type, and device information.
  • Communication data: Messages you send to our support team or feedback submitted through the platform.
  • Email engagement data: Open rates, click-through rates, bounce events, and unsubscribe actions associated with campaigns sent through our Service.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, operate, and improve the Theevy platform and its features.
  • To process transactions and manage your subscription or account.
  • To send you service-related notices, security alerts, and administrative messages.
  • To respond to your support requests, questions, and feedback.
  • To analyse usage patterns and improve user experience.
  • To detect, prevent, and address fraud, abuse, and security incidents.
  • To comply with applicable laws, regulations, and legal obligations.
  • To send you marketing communications (only where you have opted in, and always with an easy unsubscribe mechanism).

3. Data Storage & Security

Your data is stored on servers located in the European Union and/or the United States, depending on your account region. We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits.

We retain your account data for as long as your account is active or as necessary to provide the Service. Campaign data and recipient lists are retained according to your chosen plan settings and can be deleted at any time through your account dashboard. Aggregate, anonymised analytics data may be retained indefinitely.

While we take all reasonable steps to protect your information, no system is completely secure. We encourage you to use a strong, unique password and to notify us immediately of any suspected unauthorised access at security@theevy.com.

4. Cookies & Tracking Technologies

We use cookies and similar technologies to operate the Service, remember your preferences, and gather analytics. The types of cookies we use include:

  • Essential cookies: Required for the platform to function (session management, authentication). These cannot be disabled.
  • Analytics cookies: Help us understand how you interact with the Service so we can improve it. These are only set with your consent.
  • Preference cookies: Store your settings such as timezone, language, and display preferences.

You can manage or disable non-essential cookies through your browser settings or our cookie preference centre. Note that disabling certain cookies may affect the functionality of the Service.

5. Third-Party Services

We work with trusted third-party providers to deliver parts of our Service. These partners are bound by their own privacy policies and data processing agreements with us. They include:

  • Cloud infrastructure and hosting providers
  • Payment processors (we do not store full card details)
  • Analytics and error-monitoring services
  • Customer support tooling

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share aggregated, non-identifiable data for research or industry benchmarking.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Ask us to correct inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data, subject to legal requirements.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to certain types of processing, including direct marketing.
  • Restriction: Ask us to limit how we process your data in certain circumstances.
  • Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at privacy@theevy.com. We will respond within 30 days. If you are located in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority.

7. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out:

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where appropriate, notify you by email or via an in-app notice. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.