Privacy policy clauses for Brevo (Sendinblue)
Brevo (formerly Sendinblue) is a cloud-based email marketing and transactional email platform that websites use to send newsletters, promotional campaigns, and automated emails to subscribers. We use Brevo to manage our email communications and track engagement metrics.
Free scan · No signup · Results in 60 seconds
What data Brevo (Sendinblue) collects
Your privacy policy must disclose each of the following data types when you use Brevo (Sendinblue).
When does Brevo (Sendinblue) trigger privacy obligations?
Installation and data flows
The moment you embed Brevo (Sendinblue) on your site or integrate its API—whether for email capture forms, transactional emails, or contact syncing—you begin collecting and transmitting email addresses, form field data, and (if you use Brevo's tracking features) browsing behavior to Brevo's servers in France.
Regulatory thresholds
GDPR (if any user is in the EU/EEA): Applies immediately. Brevo is a data processor under GDPR Article 28. You are the controller. You must have a lawful basis (consent under Article 6(1)(a), legitimate interest under 6(1)(f), or contract) *before* collecting email or form data. You must provide a privacy notice under Article 13 or 14.
CCPA (if any user is in California): Applies if you collect personal information from California residents. Email and form data qualify. You must disclose categories of data collected, purposes, and third-party sharing under CCPA § 1798.100.
