Privacy Policy

MATERIAL
DATED 2026-09-01 · VERSION 20260904_rev01 · FIRST CAPTURED VERSION

What changed, in plain language

Issuu (owned by Bending Spoons) now keeps your personal data for up to three years after your last use, instead of one year. This applies to data used to run the service and to data used for improving the service, troubleshooting, profiling, marketing, and service integrity. Nothing else changed except the policy date.

Changes that may affect you

Your data is now kept for three years instead of oneMATERIAL
DATA RETENTION

If you stop using Issuu or let your subscription lapse, your personal data — and your account itself — now stays on their systems for up to three years instead of one. That is three times longer that your information sits somewhere it could be exposed in a data breach, and three times longer before automatic deletion kicks in.

Personal data processed for **Services** **Delivery** purposes will be kept for no more than three (3) years from your last interaction with our Services, or from the expiration of your subscription.

What you can do — If you no longer use Issuu, don't just walk away — delete your account yourself through your account settings, or send a deletion request under GDPR, so your data goes now instead of in three years.

Marketing and profiling data held for three years after you leaveMATERIAL
DATA RETENTION

Data used to build profiles of you and target you with marketing is now held for up to three years after your last visit, up from one year. That means Issuu can keep profiling you and sending you marketing based on old activity for much longer after you have stopped using the service.

Personal data processed for the purposes of **Service Improvement, Troubleshooting, Profiling, Marketing, and Service Integrity** will be kept for no more than three (3) years from your last interaction with our Services, or from the expiration of your subscription.

What you can do — Withdraw your consent to marketing and profiling in your account privacy settings, or ask Issuu to erase this data using the rights request process in the policy.

Changelog

  1. ± CHANGEDPolicy date updated

    The "last updated" date moved from June 19, 2026 to September 1, 2026.

    **Last updated**: June 19, 2026

    **Last updated**: September 1, 2026

  2. ± CHANGEDService data kept three times longer

    Data used to actually run the service for you is now kept up to three years after your last use or after your subscription ends. It used to be one year. Your account is deleted at the end of that period, so your account and data now stick around much longer after you stop using Issuu.

    Personal data processed for **Services** **Delivery** purposes will be kept for no more than one (1) year from your last interaction with our Services, or from the expiration of your subscription.

    Personal data processed for **Services** **Delivery** purposes will be kept for no more than three (3) years from your last interaction with our Services, or from the expiration of your subscription.

  3. ± CHANGEDMarketing and profiling data kept three times longer

    Data used for service improvement, troubleshooting, profiling, marketing, and service integrity is now kept up to three years after your last use, instead of one year.

    Personal data processed for the purposes of **Service Improvement, Troubleshooting, Profiling, Marketing, and Service Integrity** will be kept for no more than one (1) year from your last interaction with our Services, or from the expiration of your subscription.

    Personal data processed for the purposes of **Service Improvement, Troubleshooting, Profiling, Marketing, and Service Integrity** will be kept for no more than three (3) years from your last interaction with our Services, or from the expiration of your subscription.

Full text changes

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

1**Last updated**: June 19, 2026
1**Last updated**: September 1, 2026
22
33This Privacy Policy ("**Privacy Policy**") applies to the processing of personal data of users ("user" or "you") by Bending Spoons S.p.A. ("**we**" or "**us**"), the parent company of Issuu Inc., in connection to the use of the Issuu's website [https://issuu.com/](https://issuu.com/) ("**Website**"), services and platform ("**Services**"). We present you with this Privacy Policy in accordance with Regulation (EU) 2016/679 - General Data Protection Regulation ("**GDPR**"), the Italian Legislative Decree 196/2003 (as amended), and other applicable local laws, as amended or replaced (collectively, "**Applicable Privacy Laws**").
44
55This Privacy Policy does not apply to the processing activities carried out by us as data processor, which are regulated in our Data Processing Agreement ("**DPA**"). In particular, except as specified in Section 2 (Categories of Personal Data that We Collect, Purposes and Legal Bases for Our Processing), we act as data processor in relation to the personal data connected to any type of content uploaded on our platform, such as the flipbooks ("**Contributions**"). For these processing activities, the publishers act as data controllers.
66
77In the event of a conflict, the English language version shall govern.
260260 |
261261
262262## 3\. Data Storage and Protection
263263
264264Personal data may be processed by both automated and non-automated means and may be stored at our premises and on our service providers' servers. We adopt appropriate technical and organizational measures designed to prevent the loss, improper use and alteration of your personal data. In some cases, we may also adopt data encryption and pseudonymization measures. However, transmissions over the Internet are never 100% secure.
265265
266Personal data processed for **Services** **Delivery** purposes will be kept for no more than one (1) year from your last interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction. Upon the expiration of the mentioned retention period, unless specific legal obligations require that the data is retained for longer, your account is deleted and your data is either deleted or anonymized.
266Personal data processed for **Services** **Delivery** purposes will be kept for no more than three (3) years from your last interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction. Upon the expiration of the mentioned retention period, unless specific legal obligations require that the data is retained for longer, your account is deleted and your data is either deleted or anonymized.
267267
268Personal data processed for the purposes of **Service Improvement, Troubleshooting, Profiling, Marketing, and Service Integrity** will be kept for no more than one (1) year from your last interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction.
268Personal data processed for the purposes of **Service Improvement, Troubleshooting, Profiling, Marketing, and Service Integrity** will be kept for no more than three (3) years from your last interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction.
269269
270270Personal data processed for **Customer Support** purposes will be kept for no more than three (3) years from the submission of your request and the collection of your data. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction.
271271
272272Personal data processed for **Compliance** purposes will be kept for no more than five (5) years from your last interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction.
273273
274274Personal data processed for **Defense** purposes will be kept for no more than ten (10) years from your last interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction.