Privacy policy

1. Who is responsible

The data controller is It Matters Lda, Rua Vieira Pinto 109, 4430-254 Vila Nova de Gaia, Portugal (operating ManyManyLogos). Contact: hello@manymanylogos.com.

2. What we collect

Account data (email, name, sign-in identifiers), billing data (subscription status, invoices; card details stay with Stripe), the briefs you type and the logos generated from them, technical logs (IP address, request time), your marketing email choice, and support email you send us.

Cancellation and withdrawal forms: anyone can submit them without an account, so we also store the name, email address and contract details of whoever submits one, including people who never had an account with us.

3. Processors we use

Clerk (accounts and sign-in), Stripe (payments and tax), Neon (database, EU region), Vercel (hosting, EU region), Cloudflare R2 (file storage) and Cloudflare Turnstile (bot protection), fal.ai and OpenRouter (AI generation; they route requests to the underlying model providers), Resend (email delivery), PostHog (EU, product analytics, server-side only), Sentry (EU region, server-side error monitoring), Moloni (Portuguese invoicing).

4. How long we keep things

Invoices and credit notes: 10 years (Portuguese fiscal law). Cancellation and withdrawal records: 3 years, matching the limitation period for the claims these records prove. Webhook logs: 90 days. Free plan logos: we may delete them after 90 days without any account activity; paid accounts keep everything for the life of the account.

Logo previews are served from a public content-addressed cache and are designed to persist; if a preview contains personal data you want removed, contact us and we assess erasure for the specific files.

5. Legal bases

Contract performance (accounts, generation, billing), legal obligation (invoices, tax, cancellation and withdrawal records), consent (marketing emails; withdrawable any time from your billing page or any marketing email), and legitimate interest (service security, abuse prevention, product analytics without advertising or cross-site tracking).

6. Your rights

You have the GDPR rights of access, correction, erasure, restriction, portability and objection, and the right to complain to a supervisory authority (in Portugal: CNPD). Email hello@manymanylogos.com to exercise them.

7. International transfers

We prefer EU regions where the provider offers them. Where a processor handles data outside the EU, transfers rely on the provider's standard contractual clauses or an adequacy decision.

8. Changes

We update this policy when the product or our providers change; material changes are announced before they take effect.