Privacy & Cookies Policy

The controller is BuzDesk LTD., UIC 208121632, registered in Blagoevgrad, Bulgaria, with management address at 10 Pere Toshev St., Floor 2, Office 1, Blagoevgrad, Bulgaria, represented by Manager Mustafa Musa Buzgyov.

Privacy contact: office.buzdesk@gmail.com.

• email address and internal account identifier;
• profile name where provided through the account or identity provider;
• authentication/session data required to sign in and secure the account;
• the version and timestamp of accepted Terms and acknowledged Privacy Policy.

If you sign in with Google, Google acts as an identity provider and processes data under its own terms and privacy policy. LogoFIY receives the account information needed to identify or create your app account.

When you upload a logo, the file is sent to Base44's media infrastructure through a public-file upload mechanism. LogoFIY receives a URL to that uploaded file and uses it to load the master logo and, where requested, to perform AI functions.

Because this is public-file storage, you should not upload confidential, secret, privileged, personal or sensitive material. The fact that a URL is difficult to guess should not be treated as a confidentiality guarantee.

Saved projects are stored in your browser's localStorage. A project record can include the project/brand name, uploaded-file URL, crop information, selected presets, output size and editing settings.

This project data is device/browser-local and is not a cloud-synchronized project database. Clearing browser/site data may delete it.

When you request an AI quality review, LogoFIY renders the current asset, uploads that rendered image to the application's media infrastructure and sends its URL, limited output context and deterministic quality findings to the AI backend for review.

The AI response is used to provide a summary and recommendations. The deterministic pixel checks and ordinary export processing otherwise run in the browser.

If you request AI enhancement for a low-resolution source, the uploaded source-logo URL is sent through the image-generation integration to create an enhanced version. This processing is optional and is initiated by you.

To enforce AI quotas and protect the service, the backend stores limited AI-usage records such as operation type, whether the request was allowed/rejected, account ID when authenticated, a hashed browser client identifier, a hashed IP address, estimated operation cost and a limited reason/status code.

Raw IP addresses are not stored in the AI usage entity by this mechanism; they are hashed before that usage record is created. These records do not contain the uploaded logo pixels themselves.

LogoFIY includes an authorization flow for supported MCP/AI clients. If you choose to connect a client, the authorization screen shows the requested LogoFIY tools and you can approve or deny access.

The connected third-party client may separately process information involved in its requests under its own privacy terms. Do not approve a client you do not trust.

• providing account, authentication and requested LogoFIY functionality — performance of the service relationship / steps requested by you;
• processing uploads, exports and optional AI operations — providing the function you requested;
• security, quota enforcement, fraud/abuse prevention, diagnostics and legal claims — legitimate interests, subject to applicable balancing requirements;
• compliance with legal obligations — where required by law;
• consent — only where a future optional activity legally requires it.

LogoFIY uses Base44 infrastructure for hosting, authentication, public-file storage, backend functions and integrated AI capabilities. Google is involved when you choose Google authentication. Connected external AI clients are involved only when you authorize them through the MCP/connected-client flow.

We do not sell uploaded logos or personal data and do not provide them to third parties for their independent advertising.

Some technology providers are international organizations. Where personal data is transferred outside the European Economic Area and Chapter V GDPR applies, the transfer must rely on an applicable lawful transfer mechanism and safeguards.

Browser-local projects remain until you delete them or clear the relevant browser storage. Account data is retained while needed to provide or administer the account and for applicable legal/security purposes.

Uploaded public media files can persist in infrastructure storage beyond removal of the local project reference. Do not assume that clicking "Remove logo" or deleting a browser-saved project necessarily erases the uploaded file from all infrastructure. For a data-removal request, contact office.buzdesk@gmail.com.

AI usage/security records are retained for the period reasonably necessary to enforce quotas, investigate abuse and protect the service, subject to provider and legal retention requirements.

We use reasonable technical controls appropriate to the service, including account authentication, server-side AI quota controls and hashed abuse-prevention identifiers. No internet or public-file storage system can guarantee absolute security.

Where the GDPR applies and the legal conditions are met, you may have rights to:

• access your personal data;
• correct inaccurate data;
• request erasure;
• request restriction of processing;
• receive portable data where applicable;
• object to processing based on legitimate interests;
• withdraw consent for future processing where consent is the legal basis;
• lodge a complaint with a competent data-protection authority.

Requests can be sent to office.buzdesk@gmail.com.

LogoFIY uses browser storage and technical session mechanisms needed for authentication, secure navigation, editor preferences, local project persistence and registration/legal acceptance flows. These can include cookies, localStorage and sessionStorage.

LogoFIY also stores a persistent random client identifier in localStorage for AI quota and abuse-prevention purposes. The server hashes this value before storing it in the AI usage log.

If optional advertising or non-essential tracking technologies are introduced in the future, they will be handled separately where applicable law requires prior consent.

You can remove cookies/localStorage/sessionStorage through your browser. Doing so may sign you out, remove saved LogoFIY projects and preferences, reset local client state or prevent some functions from operating correctly.

LogoFIY is a general creative/business utility and is not directed specifically to children. Account creation and professional/commercial use should be carried out by a person legally able to enter the relevant service relationship.

We may update this Policy when the service, providers or applicable law changes. The latest version and date will be published here. A material change to the account relationship may also trigger a new Terms acknowledgement in the application.