Privacy policy

Last updated: 28 October 2026

This policy explains how Devigo Digital Limited ("Devigo", "we", "us") collects and uses personal data when you visit devigo.studio, sign up for or use Devigo Studio, or contact us. We are the controller of that data under UK data protection law (the UK GDPR and the Data Protection Act 2018).

It doesn't cover the websites our customers build with Devigo. For those, the business that runs the site is the controller and we process data on their behalf, under our data processing agreement. If you've used a form, shop or booking on a site built with Devigo, please contact that business.

Who we are

Devigo Digital Limited, a company registered in England and Wales (company number 16571975), registered office C/O The Accountancy Partnership, Suite 5, 5th Floor, City Reach, 5 Greenwich View Place, London, E14 9NN. For anything about your data, email support@devigo.co.uk.

What we collect

Account details: your name, email address, password (stored only as a secure hash), business name, and two-factor authentication settings.
Billing details: your billing name and address, plan and payment history. Card details are taken and held by Stripe; we never see your full card number.
Your content: what you put into Studio to build your sites, and the prompts and instructions you give our AI.
Usage and device data: your IP address, browser, device, the pages and features you use, and logs of sign-ins and changes, which we keep for security and to fix problems. We use your IP address to estimate your country.
Messages: what you send us by email, support chat or forms on this website.
Visit counts: if you accept cookies, which pages of this website you visited, roughly where from, and on what kind of device. See our cookie policy.

How we use it, and why we're allowed to

To create and run your account, host your sites, take payments and provide support. This is necessary to perform our contract with you.
To keep Devigo secure, prevent fraud and abuse, and fix faults. This is in our legitimate interests, and yours.
To understand how Devigo is used and improve it. This is in our legitimate interests; for visit counts on this website, we rely on your consent.
To email you about your account, billing and important changes. This is necessary for our contract with you.
To send you product news and offers, if you've opted in or are an existing customer, with an unsubscribe link in every email. You can opt out at any time.
To keep records for tax and accounting, and to respond to lawful requests. This is a legal obligation.

We don't sell your personal data, and we don't use your content to train AI models.

Who we share it with

We use trusted service providers who process data for us under contract:

Amazon Web Services, for hosting, databases, storage and site builds, in the EU (Stockholm).
Stripe, for subscriptions and payments.
Anthropic and OpenAI, for AI features, when you use them.
Our email delivery provider, for account and support emails.

We may also share data with our professional advisers, with a buyer if our business is sold, or with authorities where the law requires it.

International transfers

Some of our providers are based in, or access data from, the United States and other countries outside the UK. Where they do, we protect the data with the UK's adequacy regulations (including the UK–US data bridge) or the UK International Data Transfer Agreement or Addendum.

How long we keep it

We keep your account data for as long as your account is open. When you close it, we delete your content after 30 days and your account details shortly after, apart from billing records, which we keep for six years for tax purposes, and security logs, which we keep for up to 12 months. Messages to support are kept for up to two years. Visit counts are kept only in summary.

Your rights

You have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time. Email support@devigo.co.uk and we'll reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk, though we'd appreciate the chance to sort it out first.

Security

Data is encrypted in transit and at rest, access is limited to staff who need it, and you can protect your account with two-factor authentication. If a breach puts your data at risk, we'll tell you and the ICO as the law requires.

Children

Devigo isn't for people under 18, and we don't knowingly collect their data.

Photographs

Some of the photographs on this website come from Pexels and are used under the Pexels licence. Each photographer is credited in our records.

Changes

If we change this policy in a way that matters, we'll tell account holders by email before it takes effect. The date at the top shows when it last changed.