Legal
Last updated: March 2026
When you sign in with Google OAuth, we receive your email address, display name, and profile picture URL. We store your email and name in our database to identify your account and communicate with you.
During onboarding, we collect your company name and country, which are used to personalise your holiday calendar and generation prompt. You may update these at any time from the Settings page.
You may upload a logo file to Logo365. This file is stored on UploadThing CDN and referenced in our database. Generated holiday logo images are also stored on UploadThing and linked to your account.
We collect usage data such as generation job status, credit transactions, and subscription history to operate the service and resolve disputes.
Your email is used to send transactional notifications including generation completion alerts, billing receipts, and important account updates via Resend. You cannot opt out of transactional emails while your account is active.
If you opt in to text alerts, your mobile number is used solely to deliver upcoming-holiday alert messages you requested. SMS consent is collected via an unticked checkbox in your account Settings, is not a condition of purchase, and is never shared with or sold to third parties. Message and data rates may apply; reply STOP at any time to cancel, and your number and consent record are removed.
Your company name, country, and uploaded logo are passed to the Replicate AI generation pipeline to produce holiday logo variants. No other personal data is included in generation prompts.
Subscription and billing data is shared with Stripe to process payments and manage your subscription. We do not store your card details — Stripe handles all payment data.
We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.
Google OAuth — used for authentication. Google may collect data as described in their Privacy Policy.
Stripe — used for payment processing. Stripe may collect billing data as described in their Privacy Policy.
Replicate — used to run the Flux Kontext Pro AI generation model. Your logo file URL and prompt are sent to Replicate for processing.
UploadThing — used for CDN file storage of uploaded logos and generated images.
Resend — used for transactional email delivery.
Sentry — used for error monitoring. Anonymised error reports may be sent to Sentry in the event of application errors.
Your account data (name, email, company, country) is retained while your account is active. If you delete your account, your personal data is removed within 30 days.
Generated images and uploaded logo files are retained for the lifetime of your account. On account deletion, associated files are removed from UploadThing storage.
Billing records and credit transaction logs may be retained for up to 7 years to comply with financial recordkeeping requirements, even after account deletion.
If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):
Right of Access — you may request a copy of the personal data we hold about you.
Right to Erasure — you may request deletion of your personal data. Submit account deletion requests from Settings or email support@logo365.ai.
Right to Portability — you may request an export of your personal data in a machine-readable format.
Right to Rectification — you may correct inaccurate data directly from the Settings page or by contacting us.
To exercise any of these rights, email support@logo365.ai with the subject "GDPR Request". We will respond within 30 days.
If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at support@logo365.ai.
We take privacy concerns seriously and will respond to all inquiries within 5 business days.