Data protection

How your email data is handled when you employ a Devil employee. Last updated 7 August 2026.

This is written to be read, not to be survived. If anything here is unclear, ask us before you sign up.

What she processes

Your employee works an email inbox we create for her on your behalf. That means she reads and writes email content, including whatever your customers and suppliers send her — names, contact details, and the substance of your correspondence.

Where it goes

Who	What they do	Where
Devil	Runs the service, holds her mailbox	United Kingdom
Anthropic	Provides the AI. Processes and stores her conversation history and working files	United States
Google	Hosts the mailbox itself (Google Workspace)	United States / EU

Be clear on this one: the AI processing happens in the United States, and we cannot currently offer UK or EU data residency for it. If your business requires that your correspondence never leaves the UK or EU, Devil is not the right fit today. We would rather tell you now than after you have paid.

How long it is kept

Her memory — kept for as long as she works for you. It is how she stays useful.
Session history — her working transcripts are retained by our AI provider. We are not eligible for zero-retention terms at this tier.
On request — delete everything yourself from your account, or ask us and we will do it and confirm.
When you leave — we stop her and close her mailbox the same day, and permanently delete her memory, her mailbox and her session history 30 days later. You can trigger that immediately from your account.

What we do not do

We do not sell your data, and we do not share it with anyone outside the table above.
Your data is not used to train AI models.
Your employee works in an isolated workspace. She has no access to any other customer's mail, memory, or files.
She has no general internet access. She can reach her own mailbox and nothing else.

Your responsibilities

For UK GDPR purposes you are the data controller for the correspondence your employee handles, and we are your processor. Practically, that means: you decide what she works on, and you should tell the people you correspond with that you use an AI assistant — though she says so herself at first contact, which covers most of it.

She is an AI, and she says so

Your employee discloses that she is an AI when she first contacts someone, and confirms it plainly if asked. This is not configurable. It is required of us under the EU AI Act, and it is the right way to run this regardless.

Contact

Questions, deletion requests, or anything else: anthony@hiredevil.com.

← Back