Privacy Policy

Draft of 25 October 2026, to be reviewed by a lawyer before payments go live. This is a translation of the Polish privacy policy. Fields in square brackets will be completed with company details.

1. Controller

The controller of your personal data is MR Group sp. z o.o., with its registered office in [city], [address], Poland, KRS [KRS], tax ID (NIP) [NIP] (“we”, “us”). For any data protection matters, write to kontakt@markignite.com.

2. What data we collect

• Email address, when you ask us to send your logo, buy a Package or sign up for the newsletter.
• Business name, description and inspiration images that you enter or add in the Logo Maker and in Premium. We send images to the AI model only for the duration of the design and do not store them.
• Details for your materials (e.g. name, job title, phone, address, tax ID), which you can enter on the Files page. They stay in your browser and are used only to generate files on your device. We do not send them to our server.
• Payment data: name, email address, country and transaction details. We do not see card details; they are processed by Stripe.
• Technical data: IP address, browser type and request time, recorded in server logs and used to protect against abuse (e.g. the hourly limit on AI designs).

3. Purposes and legal bases

• Sending your logo and delivering ordered files, handling revisions and complaints: Article 6(1)(b) GDPR (contract).
• Accounting, invoices and tax obligations: Article 6(1)(c) GDPR (legal obligation).
• Newsletter with news and offers: Article 6(1)(a) GDPR (your consent, which you can withdraw at any time without affecting the lawfulness of earlier processing).
• Website security, preventing abuse, establishing and defending legal claims, simple analysis of orders: Article 6(1)(f) GDPR (our legitimate interest).

Providing your email address is voluntary, but without it we cannot send the files.

4. Who we share data with

We use providers that process data on our behalf under data processing agreements:

• Vercel Inc. (hosting of the website and server functions, logs),
• Stripe Payments Europe Ltd. (payments; for its financial obligations, Stripe also acts as a separate controller),
• Resend (Plus Five Five, Inc.; sending emails and the contact list),
• Anthropic PBC (the AI model that designs Premium logos from the business name, description and images you add; please do not include personal data in the description or add photos of people),
• Google (Google Fonts loaded by your browser, which passes your IP address to Google; with your consent also Google Analytics statistics),
• accountants and legal advisers, to the extent necessary for accounting and handling claims.

5. Transfers outside the EEA

Some providers are based in the USA. We transfer data on the basis of the European Commission's adequacy decision (EU-US Data Privacy Framework) for certified companies or standard contractual clauses approved by the Commission. You can obtain a copy of the safeguards by writing to the contact address.

6. How long we keep data

• Order and accounting data: 5 years from the end of the year in which the payment was made (tax rules).
• Data for handling claims: until the limitation periods expire (usually 2 to 6 years).
• Email address on the newsletter list: until you withdraw consent. We keep the address of a person who has unsubscribed marked as such, so that we do not send them campaigns.
• Server logs: up to 30 days.
• Details for materials in your browser: until you delete them (button on the Files page or clearing site data).

7. Your rights

You have the right to access your data, rectify it, erase it, restrict processing, data portability and to object to processing based on legitimate interest. You can withdraw your consent to the newsletter at any time. You also have the right to lodge a complaint with a supervisory authority, in particular in your country of residence, or with the Polish President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

8. Profiling and AI

We do not make decisions about you based solely on automated processing that produce legal effects. The AI model only prepares logo proposals based on your description.

9. Cookies and browser storage

markignite.com does not use advertising cookies. We use browser storage (localStorage) only to remember the details you enter on the Files page and your chosen language and currency. To suggest the right language version and currency, we check your country based on your IP address (provided by our hosting). We do not store it or combine it with other data. On the payment page, Stripe uses its own cookies necessary for secure payment and fraud prevention. With your consent (the “Accept” button in the cookie notice) we use Google Analytics 4 by Google Ireland Ltd. to see how visitors use the site. Google Analytics then sets _ga cookies (up to 2 years) and processes a shortened IP address, device information and the pages you visit. Without consent the Google Analytics script does not load. You can change your choice at any time with the “Cookie settings” link in the footer.

10. Remembering your logo, offers and ads

We store the logos you create and your orders under your email address so you can come back to them on My logos without an account. Opening that page requires a link sent to your address. Legal basis: performance of a contract and our legitimate interest (Art. 6(1)(b) and (f) GDPR).

When you leave your email address, we also store your country (from the billing address or approximated from your IP address), the site language and currency, so emails and prices match your language. This is an exception to the rule in the section on browser storage.

We email offers and discounts only with your consent, confirmed by clicking a link in an email. A separate consent lets us use your address in encrypted form (a SHA-256 hash) to show you markignite ads on Google and Meta. Legal basis: consent (Art. 6(1)(a) GDPR) and electronic communications law. As proof, we record the wording and version of the consent, the date, the source and a hash of your IP address.

You can withdraw consent at any time on My logos or with the link in any email. There you can also download your data (JSON) and delete it with one button. We delete your profile and logos after 36 months without activity. Order data is kept for 5 years as required by tax law.

Data is stored in the European Union (Frankfurt) by Neon Inc., our database provider acting on our behalf. For ads, the encrypted address is shared with Google Ireland Ltd and Meta Platforms Ireland Ltd.

11. Changes

When our services or the law change, we will update this policy and state the date of the change. The current version applies from [launch date].