Privacy Policy
1. Who controls your data
The controller of personal data processed through Translate in Context is Localize.pl Agenor Hofmann-Delbor, ul. Włościańska 57/13, 70-021 Szczecin, Poland, VAT ID PL9551885714. Contact: support@translateincontext.com, phone +48 533 758 868.
Payments are different.The Paddle entity applicable to your location sells the service to you as Merchant of Record and is a separate, independent controller of the data it collects to take your payment, calculate tax and issue your invoice. We never see or store your card details. Paddle's own privacy notice governs that processing.
2. What we process and why
- Account data (email address, password hash, verification and sign-in timestamps) — to give you an account and let you come back to your orders. Legal basis: performance of a contract.
- Content you upload (source files, screenshots you add as context, glossaries, and the translations produced from them) — to perform the service. Legal basis: performance of a contract. If your files contain personal data, we process it on your behalf as a processor — see section 6.
- Order data (word count, price, quote number, order and payment status, invoice number received from Paddle) — to perform the contract and to meet accounting obligations. Legal basis: contract and legal obligation.
- Business details you enter for a data processing agreement (company name, address, tax identifier, country) — to conclude that agreement and prove it was concluded. Legal basis: contract and legitimate interest in holding evidence.
- Technical and security data (IP address and request metadata in server logs, anti-abuse counters) — to keep the service available and to stop abuse. Legal basis: legitimate interest.
- A hash of your IP address when you take the free sample — to enforce the limit of one sample per network in any 7 days. Legal basis: legitimate interest in preventing multiple accounts being created to claim a free service repeatedly. The free-sample limit record does not contain the IP address itself, only a pseudonymised HMAC code calculated with a secret key, which is not linked to your account. The address cannot be read from the code, although the controller can test whether a specified address produces the same code. Codes are deleted after 7 days.
- Correspondence — to answer your questions and handle complaints. Legal basis: legitimate interest and, for complaints, performance of a contract.
- Analytics data (visited pages, interface events, device information and approximate location) — only after consent, to produce Google Analytics 4 statistics and improve the service. Legal basis: consent.
3. Who receives the data
We use the providers below. Each processes data on our instructions, under a written agreement, and only to the extent needed to run the service.
- Anthropic PBC (USA) — translation and verification of content by AI models (API, no model training)
- OpenAI, L.L.C. (USA) — translation of content by AI models (API, no model training)
- CloudFerro S.A. (Poland) — fluency scoring of translated fragments (Bielik model, Polish target only)
- Vercel Inc. (USA) — application hosting and server infrastructure
- Neon Inc. (USA) — database hosting
- Plus Five Five, Inc. (Resend) (USA) — sending transactional email
Paddle (the applicable group company for your location) receives the data needed to take payment and issue an invoice. As explained in section 1, Paddle acts as a separate controller there, not as our processor.
Google Ireland Limited receives analytics data through Google Analytics 4 only if you consent to analytics cookies. We use it to understand how the service is used and to improve it; we do not enable advertising or remarketing features.
Beyond that, data may be disclosed to public authorities where the law requires it. We do not sell personal data and do not share it for third-party marketing.
4. Transfers outside the EEA
Several of the providers listed above are established in the United States. Transfers to them take place under the European Commission's Standard Contractual Clauses or, where the provider is certified, under the EU–US Data Privacy Framework, together with the additional safeguards agreed with each provider. You can ask us for details of the mechanism that applies to a specific provider.
5. How long we keep data
- Uploaded files and translations: for 7 days from delivery, then deleted automatically from our servers. Intermediate translation data used to build the decision report is redacted at the same time — what remains is a numeric summary, without your text.
- Files that were never ordered: removed automatically within 24 hours of upload. Files translated as a free sample follow the retention rule above instead, so the result stays downloadable for its full period.
- Free-sample IP hashes: 7 days from the sample, after which they no longer enforce any limit and are deleted.
- Account data: for as long as the account exists, and afterwards only where a legal obligation requires it.
- Order and accounting records: for the retention period required by tax law.
- Server logs: short-term, for diagnostics and security.
6. When your files contain personal data
If you upload files containing personal data of other people, you are the controller of that data and we process it on your behalf as a processor under Article 28 GDPR. The agreement covering that is available at /dpa and is required before a business account can upload files.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interest. To use any of them, write to support@translateincontext.com.
You also have the right to lodge a complaint with a supervisory authority — in your country of residence, your place of work, or the place of the alleged infringement. Our lead authority is the Polish President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
8. Cookies
We use an essential session cookie that keeps you signed in and a cookie that records your analytics choice. These cookies are necessary to provide the service or remember your decision and do not require consent.
If you consent, we enable Google Analytics 4. Google may then set analytics cookies (including _ga) and process information about visited pages, your device and approximate location to produce aggregated usage statistics. Google Analytics is not loaded before consent. You can change your choice at any time using the “Cookie settings” button shown on the site. Refusing analytics does not limit the service. We do not use advertising or remarketing cookies.
9. Automated processing
The translation and the decision report are produced by AI systems. This is automated processing of the content you upload, but it does not produce legal or similarly significant effects concerning you, and it is not used to profile or evaluate people. The Terms of Service state expressly what the service must not be used for.
Content you upload is not used to train AI models.
10. Security
Data is transmitted over encrypted connections and stored with access limited to what the service needs. Passwords are stored as hashes, never in readable form. Access to production systems is limited to the operator of the service.
11. Changes
We may update this policy — for example when a provider changes or the service does. The date at the top always shows the version in force.