Privacy Policy

1. Introduction

This Privacy Policy explains how transglot ("we", "us", "our") collects, uses, discloses, and safeguards information when you use our website and localization platform (the "Service"), including the translation editor, AI translation features, REST API, and webhooks.

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2. Information we collect

We collect information you provide directly, information generated by your use of the Service, and limited information from third parties.

2.1 Account information

Name, email address, password (hashed), organization name, and role when you register, are invited to an organization, or update your profile.

2.2 Project content

Translation keys, source strings, translated strings, locale codes, and file uploads/exports (JSON, Android XML, iOS .strings/.stringsdict, Flutter ARB, Laravel PHP/JSON) that you or your organization store in a project.

2.3 AI translation data

When you trigger AI translation, source strings and surrounding context are sent to our AI provider (Anthropic, via the Claude models) to generate translations. We do not send your account credentials or billing information to the AI provider.

2.4 Usage and log data

IP address, browser type, device information, pages visited, API requests, and timestamps, collected automatically for security, quota metering, and reliability.

2.5 Payment information

If you subscribe to a paid plan, billing details are collected and processed by our payment processor. We do not store full payment card numbers on our servers.

3. How we use information

We use the information described above for the following purposes:

• Provide, operate, and maintain the Service, including the editor, AI translation, translation memory, and REST API.
• Authenticate your account and enforce organization roles and project access.
• Meter usage against your plan’s word limits, seats, and project limits.
• Generate AI translations and improve the accuracy of placeholder-preserving output.
• Send transactional emails (invitations, batch completion, security notices) and, if you opt in, product updates.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.

4. AI translation processing

AI translation is powered by Claude models (Anthropic), accessed via a batch pipeline. Source strings are sent in structured batches (approximately 30 keys per chunk) and the response is structured JSON designed to preserve placeholders and tokens.

Translation memory matches are resolved locally against previously translated content in your project and do not require a new AI request; a cache hit is not sent to the AI provider.

We do not use your project content to train foundation models. Processing is limited to generating the translation output you requested.

5. How we share information

We do not sell your personal data. We share information only in the following circumstances:

• With service providers who process data on our behalf (hosting, AI translation, email delivery, payment processing), under contractual confidentiality obligations.
• With other members of your organization, according to their assigned role and project permissions.
• With your webhook endpoints, when you configure a webhook to receive event payloads — batch, key, translation, language, glossary, and QA events — you control what endpoints are registered and which events they subscribe to.
• To comply with a legal obligation, or to protect the rights, property, or safety of transglot, our users, or the public.
• In connection with a merger, acquisition, or sale of assets, subject to this policy’s protections continuing to apply.

6. Data retention

We retain account and project data for as long as your account is active or as needed to provide the Service. Webhook delivery logs are retained for the most recent 50 deliveries per endpoint. Upon account deletion, we delete or anonymize personal data within a reasonable period, except where retention is required by law.

7. Security

We use industry-standard safeguards, including encryption in transit, hashed credentials, sha256-stored API tokens, and HMAC-SHA256-signed webhook payloads. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your rights and choices

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can update most account information directly in your settings, or contact us to exercise these rights.

9. International data transfers

We and our service providers may process data in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

10. Children’s privacy

The Service is not directed to individuals under 16, and we do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above and, for material changes, provide additional notice.

12. Contact us

Questions about this policy? Contact us at legal@transglot.ai or through our contact page.