Privacy Policy

 

Last updated: 8 January 2026

Your privacy is important to us. This Privacy Policy explains how Translify (“we”, “us”, “our”) collects, uses, stores, and protects personal data in accordance with applicable laws, including the EU/EEA General Data Protection Regulation (GDPR), UK GDPR, the UK Data Protection Act 2018, and other relevant local regulations.

This policy applies to the use of our website-based translation service at [yourdomain.com] (the “Website”) and related support channels, whether or not you create an account or purchase Credits.

1. Data Controller and Contact Information

Controller
Your Company Name
[Registered address]
[Country]

Privacy contact: [[email protected]]
Support: [[email protected]]

If applicable, you may also contact our Data Protection Officer at [[email protected]].

2. Scope and Definitions

“Personal data” means any information relating to an identified or identifiable individual.
“Service” refers to our online translation service provided through the Website.
“Credits” are prepaid units purchased on the Website and used to pay for translations.

3. Information We Process When You Use the Service

3.1 Account creation and access

We process your email address, encrypted password, IP address, and basic device information to create and manage your account, secure access, and prevent misuse.

Legal basis: performance of a contract and our legitimate interest in security and fraud prevention.

3.2 Credit purchases and billing

When you purchase Credits, we process your name, billing address, country, tax or VAT details (if provided), transaction identifiers, and masked payment information. Full card details are never stored by us and are handled only by our payment provider.

Purpose: payment processing, accounting, and handling refunds or chargebacks.
Legal basis: contractual necessity and legal obligations.

3.3 Translation requests and files

We process the text and documents you submit, language selections, file size, timestamps, error logs, and translation output in order to provide the requested Service.

Translation content is processed only as required to deliver the result. By default, both source and output data are removed after completion, apart from short-term buffering for reliability.

We do not use your content to train AI models without your explicit consent.

Legal basis: performance of a contract.

3.4 Optional features

If you enable features such as saved translations, history, or glossaries, we store that data in your account until you delete it or close your account.

Legal basis: performance of a contract.

3.5 Short-term buffering and troubleshooting

For service reliability, encrypted copies of job data may be stored for up to 72 hours to recover failed tasks or diagnose errors. Access is limited and logged.

Legal basis: legitimate interest in service stability and security.

3.6 Support communications

When you contact support, we process your email address, name (if provided), message content, attachments, and ticket metadata to respond to your request and improve our service.

Legal basis: contractual necessity and legitimate interest in customer support quality.

4. Website Logs, Security, and Basic Analytics

When you visit the Website, we process technical data such as IP address, browser type, operating system, referral URL, pages visited, timestamps, and error logs.

Purpose: security, fraud prevention, performance monitoring, and service improvement.
Legal basis: legitimate interests.
Retention: security logs are generally kept up to 14 days unless required longer for investigations. Aggregated statistics may be kept longer in non-identifiable form.

5. Legal Bases for Processing

We rely on the following legal bases under GDPR and UK GDPR:

• Contract: providing the Service, managing accounts, processing translations, and handling transactions

• Legitimate interests: security, fraud prevention, system reliability, and service improvement

• Consent: optional features or marketing communications where required

• Legal obligation: compliance with tax, accounting, and regulatory requirements

6. Data Retention

We keep personal data only as long as necessary:

• Account data: while your account is active and as required by law after closure

• Translation content: deleted after completion and short-term buffering unless saved by you

• Support tickets: typically retained for up to 24 months

• Security logs: generally up to 14 days unless needed for incident handling

Data is deleted or anonymized when no longer required.

7. Sharing of Personal Data

We do not sell personal data. We share data only with trusted service providers acting on our instructions, such as:

• Payment processors for handling transactions

• Security and CDN providers for protection and performance

• Support platforms for ticket management

• Email providers for transactional messages

All providers are bound by data processing agreements and required to implement appropriate security measures.

We may also disclose information where required by law or to protect our legal rights and users’ safety.

8. International Data Transfers

Where personal data is transferred outside the EEA or UK, we use approved safeguards such as adequacy decisions or Standard Contractual Clauses in accordance with GDPR requirements. Further details are available on request.

9. Marketing Communications

We may send essential service messages without consent. Marketing emails and newsletters are sent only with your consent or as permitted by law. You can opt out at any time via the unsubscribe link or by contacting support.

10. Your Rights

You have the right to:

• access your personal data

• request correction of inaccurate data

• request deletion of your data

• restrict or object to processing

• request data portability

• withdraw consent at any time

To exercise your rights, contact [[email protected]]. We may need to verify your identity.

You may also lodge a complaint with your local data protection authority. We encourage you to contact us first so we can address your concerns.

11. Children’s Data

Our Service is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided personal data, please contact us so we can remove it.

12. Security Measures

We use appropriate technical and organizational safeguards, including encryption, access controls, and secure development practices, to protect personal data. No system is completely secure, so please use strong passwords and keep your login details confidential.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. Where required by law, we will notify you in advance of material changes.

14. Regional Provisions

United Kingdom

References to GDPR include UK GDPR and the Data Protection Act 2018. UK users may contact the ICO.

California

We do not sell or share personal information as defined under CCPA/CPRA. California residents may request access, correction, or deletion of their data.

Other jurisdictions

We respect local data protection rights where applicable. Contact us for country-specific questions.

15. Contact

Your Company Name
[Registered address], [Country]
Privacy: [[email protected]]
Support: [[email protected]]