Privacy Policy

Information we process

When you sign in, we receive your Google account identifier, email address, email-verification status, and basic profile information made available by Google. We create an internal account ID and store session, credit-balance, transaction, generation-status, and library records associated with it.

When you generate logos, we process the brief, prompts, optional reference images, generated images, and technical request details needed to deliver the result. Cloudflare and our infrastructure may process IP address, browser information, timestamps, and diagnostic logs for security and reliability.

How information is used

We use this information to authenticate users, generate and deliver logos, enforce credit balances, save completed work, prevent abuse, troubleshoot failures, respond to support requests, and comply with legal obligations. We do not sell personal information or use your briefs and logos for third-party advertising.

Service providers

Google provides sign-in. Cloudflare provides hosting, databases, private object storage, network security, and operational logging. AI generation providers receive the prompt and any reference images needed to perform a requested generation. PayPal hosts checkout and processes payment details; Logo Pop does not receive or store full payment-card numbers.

Providers process information under their own terms and privacy commitments. Data may be processed in countries other than your own, subject to the safeguards available from those providers and applicable law.

Retention

Completed live logo boards and their image files are retained for 60 days after saving. Downloads do not extend retention. Unfinished sign-in drafts stored on your device expire after one hour. Sessions last up to 30 days and may renew with use.

Account, security, credit-ledger, payment, and support records may be retained while the account is active and afterward where reasonably needed for fraud prevention, accounting, disputes, enforcement, or legal compliance. We delete or de-identify information when it is no longer needed for those purposes.

Your choices and rights

You may sign out at any time and can request access, correction, or deletion of account information by emailing logopop.support@gmail.com from the account email. Some financial, security, or legal records may need to be retained. Depending on where you live, you may also have rights to object, restrict processing, portability, or lodge a complaint with a data-protection authority.

Signup credit eligibility

We retain your Google account identifier and signup-credit eligibility record separately from your account, including after account deletion, to prevent repeated claims of the new-account credit. We also store a hash of a randomly assigned browser identifier and whether that browser has signed in or received a signup credit. This supports account-and-browser eligibility checks, not hardware fingerprinting or advertising.

Abuse prevention records

Application rate limits use daily-changing, keyed hashes of network addresses. Temporary rate-limit records expire after 24 hours and are removed during scheduled cleanup. Aggregate daily generation counts are kept for approximately 31 days. Our custom security logs contain request and internal account identifiers, task identifiers, timing, outcome codes, IP addresses, and approximate country, region, and city supplied by Cloudflare. We use network location to understand regional usage and investigate abuse; it may reflect a VPN or network exit rather than your actual location. Raw IP addresses are kept in operational logs, not added to your account profile. Access is restricted to authorized operators, and retention follows our hosting provider's log configuration and plan. These logs do not include briefs, images, passwords, authentication tokens, or API keys.

When payments are connected, payment audit records may include the provider, order and transaction identifiers, product and price identifiers, currency, amounts, credit changes, and payment, refund, or dispute outcomes. They exclude full card numbers, card security codes, bank details, and raw payment-provider messages.

Security and children

We use access controls, secure cookies, private storage, and encrypted network connections, but no online service can guarantee absolute security. Logo Pop is not directed to children under 13, and we do not knowingly collect their personal information.

Changes and contact

Material changes will be reflected by a new effective date on this page. Privacy questions and requests can be sent to logopop.support@gmail.com.