Privacy policy

This policy describes how modilogo (published by Nabil Aïnas / Aineed — SIRET 895 166 502 00024) collects, uses and protects the personal data of the service's users, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data controller

Nabil Aïnas — contact@modilogo.com. For any question about your data, you can write to that address.

Data collected

• Account: email, display name, avatar (collected through the authentication provider Clerk).
• Preferences and usage: credit balance, credit consumption history.
• Content: projects, logos, shapes and assets, uploaded or generated images, prompts you type.
• Billing: history of credit purchases and invoices (payments processed by Stripe — the publisher does not store your card details).
• Technical logs: IP address, user agent, request identifiers, error logs.
• Product usage: usage events attached to your account (opening the app and the editor, selecting a shape, opening the colour picker, starting a generation, keeping or abandoning a proposal). These events are used only to improve the product, stay on our own servers and are passed to no third party. They contain neither the content of your prompts nor the names of your projects.
• Preview without an account: the questionnaire on the home page lets you generate two logo proposals without creating an account. The answers you enter there (brand name, activity, style, colours, typeface) are sent to the image generation provider to produce those proposals, then are not kept: neither the answers nor the generated images are stored on our servers. To prevent abuse of this free feature, we keep a salted cryptographic hash of your IP address for 24 hours — it acts purely as a counter, does not allow you to be identified, and is deleted automatically after that period.

Purposes and legal bases

Processors

To provide the service, modilogo uses processors, some of which are located outside the EU. Those transfers are covered by the European Commission's standard contractual clauses or equivalent safeguards.

• Clerk Inc. (authentication, United States) — Privacy
• Stripe Payments Europe Ltd. (payments, Ireland) — Privacy
• Hetzner Online GmbH (hosting, Germany) — Privacy
• Google LLC (Gemini API for image generation; Google Analytics 4 for audience measurement and advertising — Google Ads audiences and remarketing — on the site as well as in the app, loaded only after explicit consent, and including the sending of your credit purchases from our servers where you have consented; United States) — Privacy
• Namecheap, Inc. (domain name, United States)

Your rights

Under the GDPR, you have the following rights:

• Access: obtain a copy of your data.
• Rectification: correct inaccurate data (through your Clerk profile).
• Erasure: delete your account, which deletes your logos, projects and associated data.
• Restriction of and objection to processing.
• Portability: request an export of your data (email contact@modilogo.com).
• Withdrawal of consent at any time, where processing is based on it.

To exercise these rights, write to contact@modilogo.com. Reply within 30 days.

You may also lodge a complaint with the French supervisory authority, the CNIL — cnil.fr — or, if you are resident in another country, with your own supervisory authority.

Cookies & audience measurement

modilogo uses two categories of cookies and trackers. They apply to the site modilogo.com as well as to the app dashboard.modilogo.com: your choice, given once, covers both.

• Strictly necessary (always on, legal basis: performance of the contract):
  • Authentication session cookies (Clerk) — without which signing in is impossible.
  • Preferences stored in the browser's localStorage (theme).
  • The modilogo_consent cookie, which remembers your cookie choice for 6 months. It is set on .modilogo.com precisely so that this choice is honoured on the site and in the app without being asked again.
• Audience measurement and advertising (optional, legal basis: consent):
  • Google Analytics 4 (Google LLC, United States) — measurement of site and app usage, with Google Signals and ad personalisation enabled: your browsing data may be matched to your Google account and used to build audiences and to show you modilogo ads through Google Ads (remarketing), including across your devices. These trackers are loaded only after you explicitly accept through the cookie banner; if you decline, none of them is set. Retention by Google: 14 months.
  • Sending your purchases from our servers. If — and only if — you have accepted audience measurement, a credit pack purchase is sent to Google Analytics directly by our servers (amount, currency, pack purchased, transaction reference, together with the Google measurement identifier already present in your browser and your modilogo account identifier). No card details are sent. This is used to know which ad campaigns actually lead to a purchase. If you decline audience measurement, no purchase is sent.

You can withdraw your consent at any time by deleting the modilogo_consent cookie (and, where applicable, the modilogo.cookies.consent.v1 localStorage entry) in your browser settings; the banner will ask for your choice again. Apart from Google Analytics 4 described above, no other third-party tracker is set. You can also turn off Google ad personalisation at myadcenter.google.com.

Security

Data is encrypted in transit (TLS). Passwords are handled by Clerk and are never stored by the publisher. Access to the infrastructure is restricted and logged.

Changes

This policy may be updated. The date it was last changed appears at the top of the page. In the event of a substantial change, a notification will be sent by email.