Privacy Policy
Last updated 23 September 2026
Sills is a shared inbox for small businesses. It brings conversations from Facebook Messenger, Instagram, WhatsApp and email into one place so a business and its team can answer customers without switching between apps.
This policy explains what personal data we handle, why, who we share it with, and how you can ask us to delete it. It applies to sills.ai and to the Sills application.
1. Who we are
Sills is operated by Devel Codes LLC, trading as Sills, based in Texas, USA. For the purposes of this policy that person is the data controller. For questions about this policy or about your data, contact developer@sills.ai.
We are in the process of incorporating Devel Codes LLC. Once incorporated, Devel Codes LLC will take over as the data controller and this policy will be updated to name it. Your rights and how we handle your data will not change as a result.
2. Two kinds of data, two different roles
This distinction matters, because our obligations differ depending on whose data it is.
| Whose data | Our role | What it means |
|---|---|---|
| Business users — the people who sign up for a Sills account | Controller | We decide how this data is used, and this policy governs it. |
| End customers — people who message a business through a connected channel | Processor | We handle this data on the business's instructions, on their behalf. That business is the controller and its own privacy policy applies. |
3. Data we collect
From business users
- Account details: name, email address, password (stored hashed), profile photo.
- Team and workspace information, including which inboxes each member can access.
- Access tokens for the channels you connect, so we can send and receive messages on your behalf. These are stored encrypted.
- Technical logs: IP address, browser type and timestamps, used for security and troubleshooting.
From connected channels
When a business connects a channel, we receive the content needed to show that conversation in the inbox:
- Message content, attachments, and timestamps.
- The sender's public profile information as provided by the platform — typically name, username and profile picture.
- A platform-specific identifier used to thread replies back to the right person.
We do not receive your private messages with anyone other than the business you contacted, and we do not scan mailboxes or accounts beyond the conversations that belong to the connected inbox.
4. How we use data
- To deliver the core service: receiving, displaying, routing and sending messages.
- To authenticate users and keep accounts secure.
- To provide support when a business asks for help.
- To monitor reliability, diagnose faults and prevent abuse.
- To meet legal obligations.
We do not sell personal data. We do not use the content of customer conversations for advertising, and we do not use it to train machine learning models.
5. Legal bases
Where the GDPR applies, we rely on: contract, to provide the service a business has signed up for; legitimate interests, for security, abuse prevention and service improvement; consent, where you have given it, such as when authorising a channel connection; and legal obligation, where the law requires us to retain or disclose information.
6. Who we share data with
We share data only with providers that help us run the service:
- Meta Platforms — to send and receive messages on Messenger, Instagram and WhatsApp. Our use of this data follows the Meta Platform Terms and Developer Policies.
- Google — where a business connects a Gmail or Google Workspace mailbox, to read and send mail from that mailbox.
- Infrastructure and hosting providers — to store data and run the application.
We may also disclose data if required by law, or to protect the rights and safety of our users or the public.
7. International transfers
Data may be processed in countries other than your own. Where data leaves the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
8. How long we keep data
Conversation data is retained for as long as the business keeps its account open, because it is the record of their customer relationships. When an account is closed, we delete or irreversibly anonymise its data within 90 days, except where we are legally required to keep it longer. Backups are purged on a rolling cycle.
9. How to delete your data
You can ask us to delete your data at any time, and we will act on it without charge.
- Business users: delete your account from within Sills, or email developer@sills.ai from the address on the account.
- If you messaged a business using Sills: that business controls the conversation, so contact them first. You can also email developer@sills.ai and we will forward your request to them and help them action it.
- To disconnect Meta data: remove the Sills app from your Instagram or Facebook settings under Apps and websites. This revokes our access immediately. To also have data already received deleted, email us.
We confirm completion by email, normally within 30 days of verifying your identity.
10. Your rights
Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to processing, receive it in a portable format, and withdraw consent. To exercise any of these, email developer@sills.ai. You also have the right to complain to your local data protection authority.
11. Security
Traffic is encrypted in transit with TLS, and channel access tokens are encrypted at rest. Access to production data is limited to staff who need it. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant regulator as required by law.
12. Children
Sills is a business tool and is not directed at children under 16. We do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.
13. Cookies
The Sills application uses strictly necessary cookies to keep you signed in and to secure forms. This marketing site sets no advertising or analytics cookies.
14. Changes
If we make a material change we will update the date at the top of this page and, where the change significantly affects you, notify account holders by email.
15. Contact
Sills — operated by Devel Codes LLC
Texas, USA
developer@sills.ai