Privacy policy — Brevo Transactional Email

Cited by

Facts read from this source

• Entity details Report an error

  “The parent company of the Brevo group,a French société par actions simplifiée, whose registered office is located at 17 rue Salneuve, 75017 Paris, France, registered in the Paris Trade and Companies Register under number 498 019 298.”

• Data controller entities Report an error

  “Depending on your location, the data controller may be Brevo France (SAS), Brevo Inc., North America (Inc.) or Brevo Germany (GmbH).”

• UK representative Report an error

  “For UK based data subjects, processors, controllers, and the ICO: The representative for the UK according to Article 27 of the UK GPDR can be reached by email: dpo@brevo.com.”

• Dpf certification Report an error

  “Brevo, Inc. (dba Brevo USA) complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce”

• Ftc enforcement Report an error

  “Brevo, Inc. is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).”

• GDPR applicability Report an error

  “This Policy aims to inform you in a clear and comprehensive manner of the processing of your personal data carried out in accordance with the privacy laws that apply to us, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”) and any applicable domestic privacy legislations.”

• DPA available Report an error

  “If you want to know about how we process personal data as a data processor, please refer to our Data Processing Agreement.”

• International transfer Report an error

  “IYour personal data may be transferred to countries which do not offer an adequate level of protection and have not been recognized as adequate country by an adequacy decision from the European Commission (list available here) and more precisely, in particular to the United States of America and India.”

• Sales of personal data Report an error

  “Brevo does not sell Personal Data.”

• Children minimum age Report an error

  “Brevo does not knowingly collect Personal Data from children under 16.”

• Account deletion Report an error

  “A Customer can delete all of their Personal Data on Brevo by closing the account.”

• Retention customer data Report an error

  “5 years from the end of the agreement entered into with the Customer.”

• Retention invoices Report an error

  “10 years from the end of the fiscal year.”

• Retention newsletter Report an error

  “2 years from the last contact with you.”

• Retention security logs Report an error

  “1 year starting from the event”

• Payment processor pci Report an error

  “If you place an order with us, we will use a PCI-compliant payment processor to collect and process your payment information.”

• Listed in DPA Report an error

  “All Brevo Subprocessors are listed as part of the Data Processing Agreement.”

• Optional third party features Report an error

  “Brevo proposes optional specific apps/features through its Software (WhatsApp Messages, Facebook Ad, Google Fonts & Google ReCAPTCHA, Cloudflare Turnstile, OpenAI…)”

• Chatbot AI provider Report an error

  “The AI Systems used to power the AI chatbot relies on the AI System of the third party provider OpenAI”

• US state privacy laws Report an error

  “the California Consumer Privacy Act (“CCPA”) as well as state laws of Colorado, Iowa, Montana, Nevada, Nebraska, Oregon, Texas, Utah, and several other states provide comprehensive consumer privacy laws applicable to residents of those states.”

• Do not track Report an error

  “Currently, our systems do not recognize browser “do-not-track” requests.”

• Policy last updated Report an error

  “Last update: October 1st 2025”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Agency Lead Message data, retention & security
• The Agency Lead European sovereignty
• The Data Protection Officer European sovereignty
• The Shop Operator Message data, retention & security
• The Shop Operator European sovereignty
• The Platform Engineer European sovereignty
• The SaaS Developer European sovereignty
• The Skeptic European sovereignty