1. Introduction

GetTranslated.AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our translation management platform and related services (collectively, the "Service").

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

• Name - Used for account identification and personalization
• Email Address - Used for authentication, account management, and service communications
• Phone Number - Used for authentication and account verification

This personal information is used solely for contact and authentication purposes. We do not sell, rent, or trade your personal information to third parties.

2.2 Technical Information

We automatically collect certain technical information to serve content and debug issues:

• IP address
• Browser type and version
• Device information
• Usage patterns and service interactions

2.3 Content Data

We store and process the content you upload for translation, including:

• Source text and translations
• Project configurations and settings
• Translation preferences and customizations

3. How We Use Your Information

3.1 Service Delivery

We use your information to:

• Provide and maintain the Service
• Process translations and manage your projects
• Authenticate your identity and secure your account
• Personalize your experience with the Service

3.2 Communication

We use your contact information to:

• Send service-related communications (account updates, security alerts)
• Provide customer support
• Notify you of important changes to the Service

Marketing Communications: We do not currently send marketing newsletters or promotional emails. If we begin sending such communications in the future, we will provide clear opt-out mechanisms.

3.3 Service Improvement

We use high-level, aggregated usage data to:

• Improve our Service functionality and performance
• Develop new features and capabilities
• Analyze usage patterns and trends

4. Information Sharing and Disclosure

4.1 Third-Party Services

We use the following third-party services to provide and improve our Service:

AI Translation Services

OpenAI and Anthropic: We use OpenAI and Anthropic language models to generate translations. Our auto mode intelligently routes strings to the best model. Professional and Enterprise plans can select specific premium models including Claude Haiku 4.5 and Claude Sonnet 4.6.

• Data Shared: Project strings, translations, project metadata (name, description), and protected words (if provided)
• Purpose: To generate the most accurate translations possible, narrowly scoped to translation tasks only
• Data Retention: Governed by OpenAI's terms of service (typically 30 days for API usage data)
• Data Processing: All data processing occurs within the United States
• User Rights: You can opt out of AI processing by using manual translation features only

Analytics and Service Improvement

• Google Analytics - We use Google Analytics to understand how our Service is used and to improve user experience. This service collects anonymized usage data and does not include personal information.
• Statsig - We use Statsig for feature management and A/B testing to improve our Service. This service may collect usage patterns and feature interaction data.
• Microsoft Clarity - We use Microsoft Clarity to debug issues and improve our Service. This service collects anonymized user interaction data to help us identify and fix technical issues.

Payment Processing

• Stripe - We use Stripe for payment processing. Payment information (credit card details, billing addresses) is handled directly by Stripe and not stored on our servers. We only receive transaction confirmations and billing information necessary for account management.

Data Processing Agreements

We do not have custom data processing agreements with these providers. Data handling is governed by each service's standard terms of service and privacy policies. We ensure all providers maintain appropriate security measures and data protection standards.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5. Data Security

We implement appropriate security measures to protect your information:

• Encryption - We use SSL encryption for all data transmission over the internet
• Password Security - User credentials are not stored in plain text
• Access Controls - We limit access to personal information to authorized personnel only
• Regular Updates - We regularly update our security measures to protect against new threats
• Data Backup - We maintain secure backups of your data to prevent data loss
• Incident Response - We have procedures in place to respond to security incidents

5.1 Data Breach Notification

In the event of a data breach that may affect your personal information, we will:

• Assessment: Immediately assess the scope and impact of the breach
• Notification Timeline: Notify affected users within 72 hours of discovering the breach
• Notification Methods: Contact you via email
• Information Provided: Include details about what happened, what data was affected, and steps we're taking
• Regulatory Reporting: Report breaches to relevant authorities as required by law
• Remediation: Take immediate steps to secure systems and prevent further breaches

5.2 Breach Response Process

Our breach response process includes:

• Immediate containment and assessment
• User notification within 72 hours
• Regulatory reporting as required (GDPR: 72 hours, CCPA: immediate)
• Ongoing monitoring and security improvements
• Post-incident review and prevention measures

Contact for Security Concerns: If you suspect a security issue or have concerns about data protection, please contact us immediately at [email protected].

6. Your Rights and Choices

6.1 Access and Update

You can access and update your personal information at any time through your account page or by contacting us at [email protected]. We will respond to access requests within 30 days.

6.2 Data Export

You can export your translations and project data through your account dashboard. For additional data export requests, contact us at [email protected]. We will provide your data in a commonly used, machine-readable format within 30 days.

6.3 Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can also request that we transfer this data directly to another service provider where technically feasible.

6.4 Account Deletion

You can delete your account at any time. Upon account termination, we will retain your data for 90 days to allow for account reinstatement, after which it will be permanently deleted. You may request immediate deletion by contacting [email protected].

6.5 AI Processing Controls

You have the following rights regarding AI processing of your content:

• Opt-Out: You can choose to use manual translation features instead of AI-powered translations
• Data Minimization: Only project strings, translations, and essential metadata are sent to AI services
• Purpose Limitation: AI processing is strictly limited to translation generation
• Retention Control: AI providers retain data according to their terms (typically 30 days)
• Deletion Rights: You can request deletion of your data from our systems, which will prevent future AI processing

To exercise these rights or for questions about AI processing, contact us at [email protected].

6.6 How to Exercise Your Rights

To exercise any of your privacy rights:

• Email: Send your request to [email protected]
• Subject Line: Include "Privacy Rights Request" and specify the right you're exercising
• Identity Verification: We may need to verify your identity before processing your request
• Response Time: We will respond within 30 days (or 45 days for complex requests)
• No Fees: We do not charge fees for reasonable requests
• Appeals: If you disagree with our response, you can appeal by contacting us

6.7 Right to Withdraw Consent

You have the right to withdraw your consent for data processing at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal. To withdraw consent, contact us at [email protected].

7. Data Retention

We retain your personal information only as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Account information is retained while your account is active
• Translation data is retained for 90 days after account termination
• Technical logs are retained for debugging and security purposes

8. International Data Transfers

Your data is stored and processed in the United States. We do not transfer personal data across international borders. If you are located outside the United States, please be aware that your information will be transferred to and processed in the United States.

9. CCPA Compliance (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information. This section describes your CCPA rights and explains how to exercise those rights.

9.1 Information We Collect

In the past 12 months, we have collected the following categories of personal information:

• Identifiers: Name, email address, phone number, IP address
• Commercial Information: Subscription details, payment history, service usage
• Internet Activity: Website usage, interactions with our Service, device information
• Geolocation Data: General location information (country/region level)
• Professional Information: Company information, job title (if provided)

9.2 How We Use Personal Information

We use personal information for the following business purposes:

• Providing and maintaining our Service
• Processing transactions and managing subscriptions
• Communicating with you about the Service
• Improving and developing our Service
• Security and fraud prevention
• Legal compliance and regulatory requirements

9.3 Information Sharing and Sales

We do not sell personal information. We may share personal information with third parties only in the following circumstances:

• With your explicit consent
• With service providers who assist us in operating our business
• To comply with legal obligations
• To protect our rights and prevent fraud

9.4 Your CCPA Rights

As a California resident, you have the following rights:

• Right to Know: Request information about the personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

9.5 How to Exercise Your Rights

To exercise your CCPA rights, please contact us at:

• Email: [email protected]
• Subject Line: "CCPA Rights Request"

We will respond to your request within 45 days. We may need to verify your identity before processing your request.

10. GDPR Compliance

If you are located in the European Union, we process your personal data based on your consent when you create an account. You have the right to:

• Access your personal data
• Correct inaccurate personal data
• Delete your personal data
• Restrict or object to processing of your personal data
• Data portability
• Withdraw consent at any time

We only collect data that is necessary for Service functionality and do not store it longer than necessary. You can opt out of data processing at any time by contacting us.

11. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

12. Cookies and Tracking Technologies

We use cookies and similar technologies to provide, protect, and improve our Service. This section explains what cookies we use, why we use them, and how you can control them.

12.1 Essential Cookies (Required)

These cookies are necessary for the Service to function properly and cannot be disabled:

• Session Cookies - Store your login session and authentication state (14 days retention)
• CSRF Cookies - Protect against cross-site request forgery attacks (1 year retention)
• Language Cookies - Remember your language preferences (1 year retention)

These cookies are essential for security, authentication, and basic Service functionality. Disabling them will prevent you from using the Service.

12.2 Analytics and Performance Cookies

We use these cookies to understand how our Service is used and to improve performance:

• Google Analytics - Collects anonymized usage data to help us understand user behavior and improve our Service. Data includes page views, session duration, and user interactions. IP addresses are anonymized.
• Microsoft Clarity - Collects anonymized user interaction data to help us debug issues and improve user experience. This may include click tracking and page interaction patterns.
• Statsig - Uses cookies for A/B testing and feature management to improve our Service functionality.

12.3 Third-Party Service Cookies

Some third-party services we use may set their own cookies:

• Stripe - May set cookies for payment processing and fraud detection
• OpenAI/Anthropic - Do not set cookies on our domain (API-only integration)

12.4 Cookie Management and Control

You can control cookies in several ways:

• Browser Settings: Most browsers allow you to view, delete, and block cookies through their settings
• Essential Cookies: Cannot be disabled as they are required for Service functionality
• Analytics Cookies: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on
• Do Not Track: We respect "Do Not Track" browser settings for analytics cookies

12.5 Our Cookie Retention Periods

The following table shows retention periods for cookies that we directly control:

Cookie Type	Purpose	Retention
Session Cookies	Authentication & Login	14 days
CSRF Cookies	Security Protection	1 year
Language Cookies	User Preferences	1 year

Third-Party Cookies: Google Analytics, Microsoft Clarity, and Stripe may set their own cookies with retention periods governed by their respective privacy policies. We do not control these retention periods, and they may change without notice.

12.6 Impact of Disabling Cookies

Disabling cookies may affect your experience:

• Essential Cookies: Service will not function properly
• Analytics Cookies: We won't be able to improve the Service based on usage data
• Preference Cookies: You may need to re-enter preferences each visit

Questions about Cookies: If you have questions about our use of cookies, contact us at [email protected].

13. Changes to This Privacy Policy

13.1 Version Control

We maintain version control for this Privacy Policy. The current version is displayed at the top of this document. All previous versions are archived and available upon request.

13.2 Types of Changes

We may make the following types of changes:

• Major Updates: Significant changes affecting data collection, usage, or sharing (30 days advance notice)
• Minor Updates: Clarifications, corrections, or administrative changes (7 days advance notice)
• Emergency Updates: Changes required by law or security issues (immediate notice)

13.3 Notification Process

We will notify you of changes through:

• Email notification to your registered email address
• In-app notification banner
• Website announcement
• Updated effective date in the document header

13.4 User Rights Regarding Changes

For material changes affecting your privacy rights:

• You have the right to review changes before they take effect
• You may terminate your account if you disagree with changes
• Your continued use after the effective date constitutes acceptance
• You can request a copy of previous versions at any time
• You may request deletion of your data if you disagree with new data practices

14. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

15. Effective Date

This Privacy Policy is effective as of January 15, 2025, and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.