Privacy policy
Last updated: September 19, 2026
Your privacy matters to us. This Privacy Policy explains what personal data we process when you use CreateMyBrand, why we process it, who we may share it with, and what rights you have.
We process personal data primarily in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
Your privacy matters to us. This Privacy Policy explains what personal data we process when you use CreateMyBrand, why we process it, who we may share it with, and what rights you have.
We process personal data primarily in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Who We Are
The controller of your personal data is:
můjBrand s.r.o.
Company ID: 23231874
Dančí 2563/6a
251 01 Říčany
Czech Republic
We operate CreateMyBrand, available primarily through https://createmybrand.net .
For questions regarding privacy or personal data, you can contact us using the contact details provided on our website.
2. What Data We Process
Depending on how you use CreateMyBrand, we may process:
your first and last name,
email address,
account and login information,
subscription, credit, and payment information,
billing information,
content you enter or upload to CreateMyBrand,
projects, brands, and other content you create,
communications with us,
technical information such as your IP address, device, browser, and information about how you use the Service,
information collected through cookies and similar technologies.
We do not ask you to provide sensitive personal data unless it is necessary. We recommend that you do not include sensitive personal data in CreateMyBrand, prompts, or uploaded files.
3. Why We Process Your Data
We use personal data primarily to:
create and manage your user account,
provide CreateMyBrand features,
store your projects,
generate and process content using AI,
manage subscriptions and credits,
process payments,
provide customer support,
secure the Service and prevent misuse,
improve CreateMyBrand and its user experience,
comply with our legal obligations,
send marketing communications where we have an appropriate legal basis to do so.
We process personal data primarily on the following legal bases:
Performance of a contract – where the data is necessary to create your account or provide CreateMyBrand services.
Legal obligations – for example, where we are required to retain accounting or tax records.
Legitimate interests – particularly for securing the Service, preventing misuse, and protecting our legal rights.
Consent – for example, for certain analytics and marketing technologies or marketing communications where consent is required.
4. Sign in with Google
If you choose to sign in with Google, we may receive basic information from Google that is necessary to create or connect your account, including:
your email address,
your name,
your Google account identifier,
your profile picture, where available.
We use this information only to authenticate you, identify your account, and manage your CreateMyBrand account.
Signing in with Google does not by itself give us access to your emails, Google Drive files, contacts, or other content in your Google account unless we explicitly request such access and you authorize it.
5. AI and User Content
CreateMyBrand uses artificial intelligence to create brands, text, logos, visuals, and other creative content.
For this purpose, your inputs, such as text prompts, brand settings, or uploaded content, may be processed through AI and cloud services that we use to provide CreateMyBrand.
We primarily use Microsoft Azure for AI and cloud infrastructure.
We share data only to the extent necessary to provide the requested functionality.
Please do not include passwords, payment card details, health information, or other sensitive or confidential information in prompts or uploaded content unless it is necessary for the requested output.
If you submit personal data relating to another person through CreateMyBrand, you are responsible for ensuring that you have the appropriate right or legal basis to use that information.
6. Payments
We use Stripe to process payments, subscriptions, and credit purchases.
CreateMyBrand does not store your complete payment card details. Payment card information is processed by the payment service provider.
We may process information necessary to manage payments and your account, including:
transaction identifiers,
payment amount and currency,
payment status,
subscription or purchase type,
billing information.
We may also be required to retain certain payment-related information to comply with accounting and tax obligations.
7. Analytics and Service Improvement
To understand how people use CreateMyBrand and to improve the Service, we may use:
Google Analytics – to collect statistics about visits and the use of our website and application.
Hotjar – to understand user interactions and improve the user experience, for example through heatmaps and interaction recordings.
These services may process technical information about your device and information about how you interact with CreateMyBrand.
Analytics technologies that require consent are activated only after you have provided your consent through our cookie settings.
8. Cookies
We use cookies and similar technologies.
Essential cookies are required for the basic operation of the Service, such as authentication, security, and session management. Consent is not required where these technologies are strictly necessary to provide the Service.
Analytics cookies help us understand how CreateMyBrand is used and how we can improve it.
Marketing cookies may be used to measure campaigns or personalize marketing where we use such technologies.
Non-essential cookies that require consent are activated only after you provide your consent.
You can change your choices at any time through our cookie settings.
9. Who We Share Data With
We do not sell your personal data.
We use a limited number of technology and service providers to operate CreateMyBrand. Depending on the features you use, your personal data may be processed by:
Microsoft – cloud infrastructure, data storage and processing, and AI services through Microsoft Azure.
Google – authentication through Google and analytics through Google Analytics.
Stripe – payment processing, subscriptions, and credit purchases.
Hotjar – usage and user experience analytics.
ACTIVE 24 – infrastructure used to send system emails.
These providers process data only to the extent necessary to provide the relevant services and in accordance with applicable contractual and legal requirements.
We may also disclose personal data to public authorities where we are legally required to do so.
10. International Data Transfers
Some of our service providers operate globally. As a result, personal data may in certain circumstances be processed or transferred outside the European Union or European Economic Area.
Where such transfers take place, we use appropriate safeguards required by the GDPR, such as an adequacy decision by the European Commission, Standard Contractual Clauses, or other legally recognized transfer mechanisms.
Where reasonably possible, we prefer processing within the EU/EEA.
11. How Long We Keep Your Data
We keep personal data only for as long as necessary for the purpose for which it was collected or for as long as required by applicable law.
Data associated with your account is generally retained for as long as your account exists and afterwards only for as long as necessary to comply with legal obligations or protect our legal rights.
Accounting and tax records are retained for the periods required by applicable law.
Where processing is based on consent, we process the relevant data until you withdraw your consent or the relevant purpose no longer applies.
Some information may remain in secure backups for a limited period after deletion.
12. Security
We use appropriate technical and organizational measures designed to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure.
Access to personal data is limited to people and service providers who need it to operate and provide the Service.
However, no method of electronic storage or transmission can guarantee absolute security.
13. Your Rights
Under the GDPR, and subject to applicable conditions, you have the right to:
obtain information about the processing of your personal data and access that data,
request correction of inaccurate personal data,
request deletion of your personal data,
request restriction of processing,
receive your data in a portable format,
object to processing based on legitimate interests,
withdraw your consent at any time where processing is based on consent.
If you request deletion of your account, we will delete or anonymize the related personal data unless we need to retain certain information for legal or legitimate purposes.
You also have the right to lodge a complaint with:
Office for Personal Data Protection of the Czech Republic
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
14. Children
CreateMyBrand is not intended for children.
If we become aware that we have collected personal data relating to a child in violation of applicable law, we will take reasonable steps to delete that information.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, for example when CreateMyBrand, the technologies we use, or applicable legal requirements change.
The current version will always be available on our website together with the date of the latest update.
If we make a significant change to how we process personal data, we may also notify you through CreateMyBrand or by email.
16. Contact Us
If you have questions about this Privacy Policy, the processing of your personal data, or if you wish to exercise any of your privacy rights, please contact us using the contact details available at https://createmybrand.net .