Devy Agency ("Devy", "we", "us", "our") is a social media management and digital marketing agency based in Auckland, New Zealand. We operate the website at devyagency.com and a client management platform used to deliver our services.
This Privacy Policy explains how we collect, use, share, and protect personal information when you interact with our website, contact form, or client platform. It applies to prospective clients, active clients, and authorised users of our systems.
By using our services you agree to the practices described in this policy. If you do not agree, please do not use our services.
When you connect your Instagram or Facebook account to our platform, we access:
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and delivering the free brand audit | Legitimate interest / pre-contractual steps |
| Delivering social media management and content creation services | Performance of contract |
| Sending invoices and processing payments | Performance of contract |
| Publishing content to your social accounts on your behalf | Performance of contract |
| AI-assisted content creation and brand audits | Performance of contract |
| Sending transactional emails (invoices, account invitations, password resets) | Performance of contract |
| Analytics and performance reporting | Performance of contract |
| Improving our services (aggregated, anonymised data only) | Legitimate interest |
We do not sell your personal data to third parties. We do not use your data for unsolicited marketing without your consent.
We share data with trusted third-party service providers strictly as needed to operate our services. These providers are contractually required to handle data in accordance with applicable privacy laws.
| Category | Purpose | Data shared |
|---|---|---|
| Cloud database & hosting | Secure storage of all account and client data | User accounts, client profiles, content, billing records |
| Website hosting | Serving our website and processing form submissions | Form submissions, IP addresses |
| Payment processing (Stripe) | Credit and debit card payments | Payment amount, email. Card details never touch our servers |
| Payment processing (PayPal) | Alternative payment method | Payment amount, invoice reference |
| Email delivery | Sending transactional emails | Name, email address, email content |
| AI content generation | Assisting with content creation and brand audits | Brand profile, content context (see Section 6) |
| Meta (Facebook / Instagram) | Social media publishing and analytics | Account connections, post content (see Section 5) |
We do not use advertising networks or data brokers. We do not share your data with any party not listed above without your explicit consent.
Our platform integrates with the Meta Graph API to manage Instagram and Facebook content for our clients. When you authorise Devy Agency to connect to your Meta account, we request the following permissions:
Data retrieved from Meta is used solely to manage your accounts and generate performance reports. It is not shared with any other party or used for advertising purposes beyond managing your campaigns.
You can revoke Devy Agency's access at any time via your Facebook App Settings.
Devy Agency complies with the Meta Platform Terms and Meta Developer Policies.
We use AI tools to assist our team with content creation, brand strategy, and account management. When our team uses these features on your behalf:
All AI-generated content is reviewed and approved by our team before delivery or publication. We do not represent AI-generated output as fact without verification.
By engaging our services, you consent to your brand information being used as context in AI-assisted workflows.
Our marketing website (devyagency.com) does not use tracking cookies or analytics tools. Standard browser caching may occur via our hosting CDN.
Our client platform uses browser local storage to maintain your session, remember your display preferences, and temporarily cache performance data to reduce unnecessary network requests. This data is stored on your device only and is cleared when you log out or clear your browser data.
We do not use advertising cookies, Google Analytics, or any behavioural tracking on our marketing website.
We retain personal data for as long as necessary to deliver our services and comply with legal obligations:
To request early deletion of your data, visit our Data Deletion page.
Under the New Zealand Privacy Act 2020 and, where applicable, the EU General Data Protection Regulation (GDPR), you have the right to:
To exercise any of these rights, email contact@devyagency.com or use our Data Deletion Request form. We will respond within 20 working days.
If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner (NZ) or your local data protection authority.
We take reasonable technical and organisational measures to protect your personal data, including:
Despite these measures, no system is completely secure. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant authority in accordance with applicable law.
Our services are intended for business use and are not directed at individuals under 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately at contact@devyagency.com.
We may update this Privacy Policy from time to time. We will notify active clients of material changes by email. The "Last updated" date at the top reflects the most recent revision. Continued use of our services after changes take effect constitutes acceptance.
For any privacy-related questions, requests, or concerns:
Devy Agency
Auckland, New Zealand
Email: contact@devyagency.com
Instagram: @devyagencynz
For data deletion requests, visit our Data Deletion page.