Privacy Policy

Last updated October 4, 2026

Deberli processes two kinds of personal data: information about our customers, and information about the people our customers want to reach. This page explains both, because the second one matters just as much and most tools stay quiet about it.

Who we are

Deberli is operated by EL YOUNSI Consulting, 10 rue des Morillons, 75015 Paris, France, which is the data controller for customer account data.

For questions or requests, write to privacy@deberli.com.

Data about you, our customer

Account details you give us: name, email address, and the authentication identity you sign in with (Google or an email link).

Configuration you create: what you sell, your sending limits, your sample messages, and the sequences you approve.

Connected accounts: when you connect LinkedIn or an inbox, our provider holds the credentials and returns an account identifier to us. We never see or store your LinkedIn password.

Usage and diagnostic information: which features you use and technical logs we need to keep the service reliable and secure.

Billing details are handled by our payment processor. We store a customer reference and subscription status, never your card number.

Data about the people you contact

To build a prospect list we collect professional contact data about people who are not our customers: name, job title, employer, location, public profile URL, and where available a work email address.

This data comes from specialised providers and from publicly available professional sources. We do not buy consumer data and we do not enrich personal, non-professional profiles.

We store the messages exchanged with those people and any reply they send, so that a campaign can stop when someone answers and so you can read the conversation in one place.

Our legal basis for this processing is legitimate interest in business-to-business communication. That interest is balanced against the rights of the people concerned: sending is rate limited, sequences stop on reply, and anyone can ask to be removed.

Anyone contacted through Deberli can email privacy@deberli.com to see what we hold, correct it, or have it erased and suppressed from future campaigns. We action those requests whether or not the person is a customer.

Where you upload or target contacts yourself, you are the controller for that data and we process it on your behalf under the terms of service.

Your Gmail inbox

If you connect a Gmail inbox, Deberli asks for two permissions: send email and read email. It uses them for two things: sending the email steps you wrote to the prospects you approved, one at a time from your own address, with an opt-out line when you switch it on, and detecting replies to those emails so the sequence stops and the reply reaches your Deberli inbox.

To detect replies, Deberli checks the sender and subject of new messages in your inbox every few minutes. It opens only messages from prospects it has emailed and bounce notices from mail delivery daemons, and stores only those. Every other message is skipped and never stored. The replies it keeps are sent to an AI model provider, under a data processing agreement, only to classify them as interested, not now or closed. Nothing from your mailbox is used to train models, to build profiles, or for advertising, and nobody at Deberli reads your email unless you ask us to for support, or security or the law requires it.

Your access token is stored encrypted on Deberli's servers and is never shown to anyone. Disconnect the inbox in Settings and the token is deleted; you can also revoke Deberli at any time from your Google account security page.

Deberli's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Deberli in AI assistants (Claude, ChatGPT)

Deberli offers a connector that AI assistants such as Claude and ChatGPT can call to estimate how many people fit what you sell. When you use it, your assistant sends Deberli the brief, website or country you gave it. Deberli does not receive your conversation, your name or your email address.

To answer, the brief is sent to an AI model provider to plan the search and to a prospect data provider to count and sample matching people. The people shown are business profiles with their names blurred and their company names left out.

Deberli stores the brief, website and country you sent, a one-way hash of your IP address to apply the daily limit, the estimate it returned, and a random link token. The link stops working after 30 days. You can ask for these records to be deleted at privacy@deberli.com.

If you sign up from the link, the estimate is attached to your new account and is then covered by the rest of this policy.

Who processes data with us

Cloud hosting and database providers, for running the service and storing your account and campaign data.

Messaging and account integration providers, to connect your LinkedIn account and deliver LinkedIn messages. Gmail is connected to Deberli directly.

AI model providers, to draft and rank message content. Your instructions and prospect context are sent to generate that output.

Prospect data providers, for sourcing and contact discovery.

A payment processor, for subscriptions. We store a customer reference and subscription status, never your card number.

Each acts on our instructions under a data processing agreement. Some are based outside the European Economic Area; those transfers rely on the European Commission's standard contractual clauses.

We will name every provider we use on request. Write to privacy@deberli.com and we will send the current list.

How long we keep it

Customer account data: for as long as your account is open, then up to 90 days after closure, except records we must keep for tax and accounting purposes.

Prospect data and message history: while the campaign is active and for 12 months afterward, unless you delete it sooner or the person asks to be erased.

Suppression records: we keep a minimal record of erasure and opt-out requests indefinitely, because that is the only way to guarantee someone is not contacted again.

Diagnostic logs: 30 days.

How we protect it

Data is encrypted in transit. Access to production systems is restricted and authenticated.

Every request to our API is verified against your session; your workspace is not readable by other customers.

No service can promise perfect security. If a breach affects your personal data we will notify you, and the relevant supervisory authority, within the timeframes the law requires.

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or receive it in a portable format.

Where processing relies on legitimate interest, you can object at any time and we will stop unless we have compelling grounds not to.

Email privacy@deberli.com and we will respond within one month.

If you are in the European Economic Area or the United Kingdom and you are unhappy with our response, you may complain to your local data protection authority.

What we do not do

We do not sell personal data.

We do not use your prospect lists, your messages, or your replies to train models for anyone else.

We do not use your data to build advertising profiles, and we run no advertising trackers on this site.

Children

Deberli is a business tool and is not intended for anyone under 16. We do not knowingly collect data from children.

Changes

We may update this policy. The date above changes when we do, and we will email you before any change that materially affects your rights.

Deberli. Reach clients already looking for what you sell.