Privacy Policy

Igor Kosovskiy (Iggy Kos) is responsible for the processing described in this policy. Contact iggykoswork@gmail.com with a privacy question, rights request or complaint. You can also use our legal-request page.

This policy describes Logopack’s use of information. Payment, sign-in and hosting providers also process information under their own terms and privacy notices. Which privacy rights apply depends on the relevant law and the circumstances of the processing.

• Account information: your email address, account identifier and profile details used for email/password or Google sign-in. Google sign-in supplies the information authorised in that sign-in flow.
• Billing information: Stripe customer, checkout and subscription identifiers, the selected plan, billing interval, payment status and related transaction information. Card details are collected through Stripe’s payment interface.
• Logo and project information: submitted SVGs, brand names, colours, export options, file links and saved generation-session records.
• Support and legal requests: contact information, the request and the information needed to identify and resolve it.
• Operational information: information needed to deliver the website, authenticate access, investigate faults, prevent abuse and administer subscriptions. Hosting and payment providers may also receive technical connection information.
• Optional first-party analytics, only after the relevant opt-in: visitor and session identifiers, page paths, referrer origin, returning-visitor indicators and an account identifier when you are signed in. These events are not described as anonymous.

Logopack performs logo conversion and ZIP generation in your browser. This does not mean that all information stays on your device. Each successful export while signed in also creates a saved generation-session record and uploads source SVG files to Base44 file storage.

The uploaded file links are accessible to anyone holding the URL; they are not protected as private account-only files. Deleting a saved-session record in the interface currently removes that record, but does not by itself delete the underlying uploaded files. Contact us to request removal of those files so that we can review and act on the request with our providers.

To restore work across sign-in or payment redirects, the browser may temporarily store logo text and export settings in session storage. Avoid processing confidential or sensitive personal information unless you have the necessary authority and the disclosed handling is suitable for it.

We use account, project and subscription information to provide the service you request, restore your work, manage access and handle support. Where a contractual legal basis applies, these activities support that contract. Information necessary for payment, account access or a requested cloud feature may be required for that feature to work.

We use proportionate operational information for security, fraud prevention, troubleshooting and the administration of the business, relying on legitimate interests where that basis is available and appropriate. We retain or disclose records when necessary to comply with applicable law or establish, exercise or defend legal claims.

Our optional first-party analytics use your consent to help us understand use of Logopack. You can refuse or withdraw that choice through Cookie settings. Refusing analytics does not prevent you from using Free or purchasing Pro. Accepting these terms or buying a subscription is not treated as consent to optional analytics.

We use Base44 for application infrastructure, authentication, records and file storage, Google when you choose its sign-in option, and Stripe for payments and subscription management. Information may be handled by their relevant suppliers. Stripe may act as a processor for some activities and an independent controller for others, including its own security, fraud-prevention and legal obligations.

Base44’s published documentation states that workspace data may be used to train models on non-Enterprise plans, while Enterprise workspaces have a training exclusion. We do not make a blanket promise that supplier-held information is excluded from model training. Review Base44’s current documentation before submitting information for which that use would be unsuitable.

We may disclose information where reasonably necessary to comply with a valid legal obligation, protect rights and safety, resolve a dispute, or arrange a lawful business transfer subject to appropriate safeguards. We do not grant another customer access to your account records merely because they use Logopack.

Our providers operate internationally, and information may be processed outside your country, including in the United States. Base44 identifies the US as its default storage region and offers certain regional options subject to plan and application eligibility. We do not promise that all Logopack information is stored in your country or exclusively in Europe.

Where international-transfer safeguards are required, the relevant arrangements may include an applicable adequacy decision, standard contractual clauses or another lawful mechanism. Their use depends on the provider, location and processing concerned. You may contact us for information about the safeguards relevant to your information and how to obtain a copy, subject to necessary protections for confidential information.

Retention depends on the purpose and type of information. Account and saved-session information support your account and history; billing records support subscriptions, accounting and legal duties; support records allow us to resolve and document issues. Analytics records support usage analysis. We assess continued retention against those purposes, applicable obligations and valid deletion requests rather than applying one period to every category.

Saved sessions and uploaded files do not currently have a fixed automatic expiry. Removing a visible session is different from removing its source files. Request deletion if you want us to review removal of account-linked records or uploaded material. Submitting a request records it for review; it does not instantly erase data.

Some information may remain where needed for a legal obligation, dispute or permitted security purpose. Copies in supplier backups may remain until the relevant backup cycle completes. Stripe may independently retain transaction information for its legal and financial obligations. We will explain a relevant limitation when responding rather than promise immediate deletion everywhere.

Depending on applicable law, you may request access, a copy, correction, deletion, restriction or portability of your personal information, object to certain processing, or withdraw consent. These rights can depend on the purpose and legal basis. Withdrawing consent does not invalidate processing already carried out lawfully.

Send a request to iggykoswork@gmail.com or use the legal-request page. Provide enough information to identify your account and request, but do not send passwords or full card details. We may reasonably verify identity before disclosing or deleting information. Requests are reviewed by the operator, with supplier assistance where necessary.

We respond within the period required by applicable law. For requests governed by EU GDPR, this is normally one month; a permitted extension will be explained within that initial period. We will explain any lawful refusal or partial response. You may also complain to the competent data-protection authority.

If UK data-protection complaint rules apply, we will acknowledge your complaint within 30 days, investigate appropriately, keep you informed and communicate the outcome without undue delay. This complaint process does not replace the separate deadlines for exercising privacy rights.

We use measures appropriate to the information and service, but cannot guarantee absolute security. Public file-link access remains as explained above. Contact us promptly about suspected unauthorised access. Logopack is intended for adults; do not use it to submit children’s personal information.

We may update this policy when processing changes. Material changes will be brought to your attention as required, and we will obtain a new choice where the law requires it. A policy update alone does not authorise a new consent-based use.