- We collect what we need to run your account and deliver your email. We never sell personal data.
- For the people you email, you are in control. We process their data only on your instructions.
- Email content is kept for 30 days, then deleted.
- You can access, correct, export or delete your data at any time.
This summary is for convenience. The full text below is what applies.
01Who we are
South Circle, which operates Delivrie, is the controller of personal data about our customers and website visitors. For data inside your account, such as your recipients and contacts, you are the controller and Delivrie is your processor.
Our privacy team can be reached at privacy@delivrie.io.
02Data we collect
- Account data: name, email address, team name, password hash, and your Google or GitHub account id if you sign in with them.
- Billing data: billing address, tax ID, and your card brand and last four digits. Full card numbers are handled by Paystack, our payment processor.
- Usage data: API requests, IP addresses, browser details, and how you use the dashboard.
- Customer Data: email content, recipients, contacts and attachments you send or receive through Delivrie.
- Communications: support requests and feedback you send us.
03How we use it
- Provide, secure and improve the service, including detecting abuse and spam.
- Process payments, send receipts and prevent fraud.
- Send service emails, such as sign-in codes, security alerts and billing notices.
- Comply with legal obligations and respond to lawful requests.
We do not use Customer Data to train AI models.
04Legal bases
Under the NDPA and GDPR we rely on: performance of our contract with you; legitimate interests such as keeping the platform secure and preventing spam; your consent where we ask for it; and legal obligations such as tax and accounting rules.
05Data we process for you
When you send or receive email through Delivrie, we process recipient addresses, message content and engagement events on your behalf and only on your instructions. You are responsible for having a lawful basis to email your recipients. Our Data Processing Addendum sets out the details and is part of our Terms.
06AI assistants and connected apps
You can connect Delivrie to AI assistants such as ChatGPT and Claude through our MCP server. You sign in to Delivrie and approve the access the assistant gets: send email, read data, or make changes. We give the assistant an access token for your team only, and nothing else about your account.
- What the assistant can see: only what its tools return when you ask, such as your domains, usage, metrics, contacts, email logs and inbox conversations, within the access you approved.
- What we receive from the assistant: the tool requests it makes for you, such as the recipients, subject and content of an email you ask it to send. We handle these like any other request through our API, under the retention rules below.
- What we don't receive: your chat history or anything else you say to the assistant. We don't share your data with the assistant's provider for any other purpose, and we don't use it to train AI models.
- What the AI provider does with your conversation is covered by their own privacy policy, such as OpenAI's or Anthropic's.
You can disconnect an assistant at any time in Settings → Connected apps, which revokes its tokens at once. You can also remove it in the assistant's own settings.
07Sharing and subprocessors
We share personal data only with service providers who help us run Delivrie, such as cloud hosting, email infrastructure and payment processing, under contracts that protect it. The current list is on our Subprocessors page. We may disclose data if required by law, or as part of a merger or acquisition with notice to you.
08International transfers
Our database and email sending run in the EU (Ireland). When personal data leaves Nigeria, the EEA or the UK we use safeguards recognised by the regulator, such as Standard Contractual Clauses, and assess the destination as required by the NDPA.
09Retention
- Email content and attachments, sent and received: 30 days on every plan (longer on Enterprise by agreement), then deleted. Recipients, status and timestamps stay so your logs, metrics and suppressions keep working.
- API request logs: up to 30 days.
- Account and billing records: for the life of the account and up to 6 years after for tax and legal reasons.
- Suppression list entries: kept until you remove them, so we never email someone who opted out.
10Security
We encrypt data in transit with TLS, rely on encryption at rest from our hosting providers, isolate each team’s data at the database level and limit who can access production. Details are on our Security page. If a breach affects your personal data we will notify you and the relevant regulator within the time the law requires, which under the NDPA is 72 hours for the NDPC.
11Your rights
Depending on where you live, you can ask to access, correct, delete, restrict or port your personal data, object to processing, and withdraw consent. Many of these you can do yourself in the dashboard. For anything else email privacy@delivrie.io and we will reply within 30 days. You can also complain to the Nigeria Data Protection Commission or your local regulator.
12Cookies
We do not use advertising or analytics cookies. The dashboard keeps a few items in your browser to keep you signed in and remember your choices. See the Cookie Policy for the full list.
13Children
Delivrie is not for anyone under 18 and we do not knowingly collect their data.
14Changes
We will post updates here and email you about material changes before they take effect.