Privacy Policy

1. Data we collect

• Account data: your email address, first and last name, a hashed password or your Google account ID if you sign in with Google, and your organisation and team memberships.
• Billing data: your plan and subscription status. Card payments are handled by Stripe; we never see or store full card numbers. For invoice billing we store the company name, billing address, phone number, company code and VAT number you provide.
• Sign-in records: the time and method of each sign-in, together with your IP address and browser user agent, used to keep accounts secure.
• Your content: the course packages, logos, media and glossaries you upload, the translations and edits you make, and the packages and reports we generate for you.
• Usage data: the number of words translated per billing period, used to apply your plan's limits.
• Signup attribution: the campaign (UTM) parameters and promo code, if any, that brought you to sign up.
• Email engagement: whether our emails were delivered, opened or clicked, and whether you unsubscribed.
• Contact requests: what you send us through the contact form.

2. How we use it

• To provide the service you signed up for: storing, translating, combining and remediating your courses (performance of contract).
• To bill you and keep accounting records (performance of contract and legal obligation).
• To secure accounts, prevent abuse and enforce plan limits (legitimate interest).
• To send transactional emails such as sign-in links, email confirmation, team invites and billing notices (performance of contract).
• To send product updates and offers. You can opt out at any time (legitimate interest).
• To understand how visitors use the website and which campaigns work, using Google Analytics and signup attribution (legitimate interest).

3. Service providers

We share personal data only with providers that help us run the service, and only as much as they need:

• Microsoft Azure: file storage for your packages and outputs, plus Azure AI services that process course content to translate text, transcribe and synthesize speech, and read text in images. Translation and speech run in the Sweden Central region.
• Stripe: payments, subscriptions and invoices.
• Twilio SendGrid: sending email and reporting delivery, opens and clicks.
• Google: Google Sign-In (if you use it), Google Analytics, and Google Fonts.

Some of these providers may process data outside the EU/EEA. Where they do, the transfer is covered by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. We do not sell your personal data.

5. How long we keep data

We keep account data and your content while your account is active. Deleting a project deletes its packages and generated files. When you delete your account, we delete your user profile and sign-in tokens and cancel any subscription you own. We keep billing records for as long as accounting law requires.

6. Your rights

Under the GDPR you have the right to:

• Access your data. You can download a copy from Settings → Export my data.
• Correct inaccurate data. Most of it can be edited in Settings.
• Erase your data. You can delete your account from Settings.
• Object to marketing. Use the unsubscribe link in any email or the marketing toggle in Settings.
• Restrict or object to other processing, and receive your data in a portable format.
• Complain to a supervisory authority. In Sweden that is the Swedish Authority for Privacy Protection (IMY), imy.se.

For anything you can't do in Settings, contact us.

7. Changes

We may update this Privacy Policy from time to time. Material changes will be reflected on this page with an updated version date.