Legal
Privacy policy
This policy explains what DevQueue collects when you use Dispatch, why we use it, and your choices.
Last updated 2026-10-03 · Effective 2026-10-03
Contracting entity: DevQueue
What we collect
In short. Your account details. Mailbox logins you connect (encrypted at rest, write-only in the app). Files and leads you upload. Emails sent and received through Dispatch and related events. Basic product usage data.
Account data
Name, email address, password hash, workspace name, and teammates you invite.
Mailbox credentials
Mailbox address, SMTP/IMAP settings, and password or app password. Stored encrypted at rest with AES-256-GCM. Write-only in the product: once saved, the password cannot be viewed again in the app.
Files and leads you upload
Documents, spreadsheets, pasted text, and lead fields extracted from them (names, emails, companies, custom fields).
Email content and events
Outbound campaign emails, Unibox replies, and events such as send, bounce, reply, unsubscribe, and (only if you enable tracking) open and click events.
Usage data
Server logs, approximate IP, user agent, and which app pages or actions you use, needed to operate and secure the service.
Why we use it
In short. To run Dispatch for you: send email, sync replies, stop sequences, show timelines. Also to keep the service safe, and to answer support requests. We don't sell your data or use your leads for anyone else's outreach.
Providing the service
Scheduling and sending, reading replies, stopping sequences, analytics, and the Unibox.
Safety and abuse prevention
Daily caps, pacing, bounce and complaint monitoring, and enforcing the Acceptable Use Policy.
Support and service messages
Responding to you and notifying you about account, security, or product changes.
Legal bases
Where GDPR-style bases apply: performance of our contract with you, legitimate interests in running a secure B2B product, consent where you enable optional tracking, and legal obligation when required.
AI processing
In short. Uploaded files and some email content are processed by Google Gemini to extract campaigns, draft when asked, and suggest reply labels. Nothing AI produces is sent until you review it.
What the AI reads
Uploaded files, pasted text, lead fields, email bodies, and replies you ask us to label.
What it produces
Extracted emails and gaps, optional drafts (marked until approved), and suggested reply labels.
AI provider, retention and training
AI requests go to Google Gemini. Retention and training are governed by Google's API terms. We do not use your content to train our own models.
Tracking pixels and links
In short. Open and click tracking is optional per domain. When off, we don't inject pixels or rewrite links. When on, machine-looking opens are labelled so you don't treat them as interest.
When tracking is on
We may add a 1×1 open pixel and rewrite http(s) links through your tracking host. mailto and unsubscribe links are never rewritten.
Bot and proxy opens
We mark likely machine opens (too-fast, scanner UAs, Apple MPP-style patterns) so they don't look like human interest.
Recipients and tracking
If you enable tracking, recipients' mail clients may load images or hit rewritten links. You are responsible for disclosing tracking where your laws require it.
Retention
In short. We keep account and campaign data while your workspace is active. After deletion we purge within a reasonable window; backups may lag briefly.
While your account is active
We retain workspace data needed to operate campaigns, Unibox, and audit history.
After deletion
When you delete a workspace or account, we delete primary data promptly. Encrypted backups may retain copies for up to 14 days before rotation completes.
Logs
Operational logs are retained for a short period for security and debugging, then discarded.
Your rights
In short. You can export leads and request deletion of your account. Write to hello@devqueue.co and we'll answer.
Export
Lead lists can be exported as CSV from the product. For broader exports, contact us.
Access and correction
You can update account and workspace settings in the app. For other access requests, email us.
Deletion
Request account or workspace deletion by emailing us from your account address. We will confirm when primary data is removed.
Regional rights
If you are in a region with additional privacy rights, contact us and we will honor applicable requests.
Security
In short. Passwords hashed; mailbox secrets encrypted; access limited to what the product needs to run.
How we protect data
Account passwords use argon2id. Mailbox credentials use AES-256-GCM. Transport uses TLS. Admin access to production is restricted.
Incidents
If we become aware of a breach affecting your personal data, we will notify you as required by applicable law.
Your responsibilities
Protect your login, use strong passwords, and only invite people who should see your workspace.
Children
In short. Dispatch is a B2B product not directed at children under 16.
Not for children
We do not knowingly collect personal data from children under 16. Contact us if you believe we have, and we will delete it.
Changes
In short. If we change this policy in a material way, we will update the date and notify you when appropriate.
Updates
We may update this policy. The “Last updated” date at the top reflects the current version.
Contact
In short. Questions about your data go to hello@devqueue.co.
How to reach us
hello@devqueue.co · DevQueue · DevQueue — contact via email for mailing address
Data protection contact
For privacy requests email hello@devqueue.co. If you are in the EEA/UK you may also contact your local supervisory authority.
Plain-English draft. Contact us with questions.
Questions? hello@devqueue.co
Back to Dispatch