Privacy policy

Last updated: 19 October 2026

Brandify360 is provided by Atomas Tech Ltd ("we", "us"), a company registered in England and Wales (company number 17302721), registered office 86–88 Adam Street, Cardiff, CF24 2FN, Wales. We are the controller of the personal data described here. Questions about your data: info@atomastech.com.

Where your logo and guides are kept

Signed out: Brandify360 runs in your browser. Your logo, answers and guide are stored only in your browser’s local storage, and we never receive them.

Signed in: your guides are saved to your account so you can open them on any device. We store each guide’s content (your answers, text, colours and settings) and its logo file(s). They are private to you: no one else can open them, there are no public links to them, and they are encrypted in transit and at rest.

We never sell your data, use it for advertising, or use your logos and guides to train AI.

What we collect

• Account: your email address, a securely hashed password (or your Google sign-in), and whether you chose to receive tips and offers, with the date you agreed. If you use Google, Google shares your name, email address and profile picture link with us.
• Guides: the guides you save, and an ID for each guide you unlock (a code made from your logo file).
• Purchases: your plan, and order details from Stripe (name, email, what you bought, payment references). We never see your card details.
• Technical: your IP address and browser details, in short-lived logs kept by our providers for security.
• Messages: anything you send us by email.

You can use Brandify360 signed out without giving us any personal data. To create an account we need your email address.

Why we use it, and our legal basis

• To provide your account, save your guides and give you what you bought, including account emails and receipts: to perform our contract with you.
• To keep purchase records: to meet our legal obligations under UK tax law.
• To keep Brandify360 secure (blocking bots, fake sign-ups and abuse): our legitimate interest in protecting the service and its users.
• To answer your messages: our legitimate interest in helping you, or our contract with you if it’s about your account or a purchase.
• To send tips and offers: only with your consent, which you can withdraw at any time using the unsubscribe link or by emailing us.

We don’t make decisions about you by automated means that have legal or similarly significant effects.

Who helps us run Brandify360

• Supabase hosts accounts, saved guides and logo files in the EU (Ireland).
• Hostinger hosts the website.
• Stripe (through Stripe Managed Payments and its checkout service, Link) is the merchant of record for purchases. It processes your payment and handles tax as an independent controller, under Stripe’s privacy policy.
• Resend sends account emails (sign-up and password codes).
• Cloudflare Turnstile checks that sign-ins come from people, not bots, using your IP address and browser details.
• Google provides “Continue with Google” if you choose it. Google Fonts serves the brand typefaces you choose in the editor, so it receives your IP address. The Brandify360 website’s own fonts are served from our server.

Each provider may only use your data to provide its service to us, under a data processing agreement, except Stripe and Google sign-in, which act as controllers under their own policies.

Transfers outside the UK

Some providers are based in, or may access data from, other countries, mainly the EU and the United States. Transfers are protected by UK adequacy regulations (including the UK–US data bridge for certified companies) or by the ICO’s International Data Transfer Agreement or Addendum in the provider’s data processing terms. Email us for details.

Emails

We send account emails and receipts. Tips and offers are sent only if you ticked the box to receive them, and every one has an unsubscribe link.

How long we keep data

• Account and saved guides: until you delete them, or within 30 days of Brandify360 closing.
• Purchase records: six years, as UK tax law requires, even after you delete your account. They are then no longer linked to an account.
• Messages to us: up to two years after the conversation ends.
• Security logs: a short period set by each provider.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of your personal data
• correct it
• delete it
• restrict how we use it
• send your data to you or another service in a common format

You can also object to our use of your data based on legitimate interests, and you can always stop marketing emails.

Email info@atomastech.com. It’s free, and we reply within one month. We may ask you to confirm your identity first.

If you’re unhappy with how we handle your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint or 0303 123 1113.

Cookies and storage

Brandify360 sets no cookies, and uses no analytics, advertising or tracking. It stores only what it needs to work in your browser’s local storage:

• Your guide in progress, so it isn’t lost if you reload. Kept until you choose “Start over” or clear your browser’s site data.
• Your sign-in, so you stay signed in, and your plan, so the app works if your connection drops. Removed when you sign out.
• Where you were, so you return to your guide after signing in or confirming your email. Removed once used.
• The sample guide, if you try it. Kept only until you close the tab.
• How many new brands you’ve started today, when you’re signed out, so the daily limit applies. Replaced each day.

When you sign up or sign in, Cloudflare Turnstile runs a security check that may store information in your browser for that check only. Stripe and Google set their own cookies on their pages when you pay or use “Continue with Google”.

All of these are strictly necessary for the service you ask for, so we don’t ask for consent. If we ever add anything optional, we’ll ask first.

Security

Your data is encrypted in transit and at rest, and each account can only reach its own guides and files. If a breach is likely to put you at high risk, we’ll tell you without undue delay.

Children

Brandify360 is for people aged 18 or over. We don’t knowingly collect data from children. If you think a child has given us data, email us and we’ll delete it.

If Brandify360 is sold or closes

If Brandify360 is sold, the new owner would receive your account data only to keep providing the service to you, and would have to protect it as this policy describes. We will email you before this happens, and you can delete your account before the transfer date if you prefer.

If Brandify360 closes, we will email you at least 60 days beforehand so you can download your guides. We then delete accounts, saved guides and logo files within 30 days of closing, except purchase records, which we keep for six years for tax.

Deleting your data

• One guide: open the account menu, choose “My guides” and delete it. Its logo files are deleted with it.
• Your whole account: open the account menu and choose “Delete my account”. Your account, saved guides and logo files are deleted straight away. For your security, we may ask you to sign in again first.
• This device: use “Start over” in the app, or clear your browser’s site data.

If you can’t sign in, email info@atomastech.com and we’ll delete your data within one month.

Changes to this policy

If we make important changes, we’ll email account holders before they take effect.