Privacy Policy

Last updated: 29/07/2026

1. Data controller

The data controller is InstantLogo (privacy@instantlogo.eu). For any privacy-related request, please write to this address.

2. Data collected and purposes

• Phone number: collected to send an OTP code via SMS and verify that the user is a real person, in order to prevent abuse of the free service (one logo per phone number). Legal basis: explicit consent (GDPR art. 6.1.a) and legitimate interest in fraud prevention (GDPR art. 6.1.f).
• Email address: mandatory, used to deliver your logo files and, if you purchase the additional variants, the receipt/invoice. Disposable/temporary email addresses are not accepted. Legal basis: performance of a contract (GDPR art. 6.1.b).
• IP address: collected for security purposes and abuse prevention (rate limiting).
• Business information (name, industry, brand description, logo idea/typography preferences): collected to generate the logo using artificial intelligence. Legal basis: performance of a pre-contractual/contractual request (GDPR art. 6.1.b).
• Company name and VAT number (optional): collected only if provided at checkout, used solely to issue an invoice for the paid upgrade. Legal basis: compliance with accounting/tax obligations (GDPR art. 6.1.c).
• Technical cookies and, with consent, advertising cookies: see our Cookie Policy.

3. Data recipients and international transfers

To generate the logo, brand-related data (not the phone number) is transmitted to third-party artificial intelligence service providers, acting as data processors, which may be located outside the European Union/European Economic Area. Where such international transfers occur, they rely on the Standard Contractual Clauses approved by the European Commission or another valid transfer mechanism under the GDPR.

The phone number and email address are transmitted to a third-party communications provider, acting as data processor, solely for sending the verification SMS and delivering your logo files by email.

If you purchase the additional logo variants, payment data is processed directly by our payment processor (Stripe), acting as an independent data controller for payment processing purposes; we only receive confirmation of payment and, where provided, the billing details needed to issue an invoice.

A full, up-to-date list of the specific processors currently used can be requested at any time by writing to privacy@instantlogo.eu.

4. Retention period

The verified phone number is retained for as long as necessary to enforce the one-free-use-per-number limit. Generated logo files are kept for 7 days after delivery (30 days if you purchase the additional variants), after which they are permanently deleted from our servers; you receive advance reminder emails before deletion. Invoices are retained for the period required by applicable tax and accounting law. Expired OTP codes and abandoned generation requests are periodically deleted through automated cleanup processes.

5. Data subject rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection under GDPR articles 15-22 at any time by writing to privacy@instantlogo.eu. You also have the right to lodge a complaint with your national data protection authority.

6. Advertising links

The site displays advertising banners for mailprofessionale.com and, in the future, Google AdSense advertising spaces. Clicking on these banners takes you to third-party sites subject to their own privacy policies.