Privacy Policy

Last updated April 21, 2026

This Privacy Policy describes how Transloot (“we”, “our”, “us”) collects, uses, and shares information when you use our AI localization service (the “Service”).

1. What we collect

  • Account information — your email address, display name, and (if you sign in with Google or GitHub) the profile fields those providers share with us. Account data is managed via our authentication provider, Clerk.
  • Your content — the source strings, translations, termbases, and project metadata you upload or create. Stored in our database on Supabase (PostgreSQL, hosted in the region you select).
  • Payment information — we do not store card data. Payments are processed by Stripe; we receive only a subscription status and the last four digits of your card.
  • Usage data — anonymized telemetry about how features are used (e.g. how often termbase protection is applied, monthly credit usage). Used to improve the product.

2. How we use your data

  • To provide, maintain, and improve the Service;
  • To authenticate you and secure your account;
  • To process payments and manage your subscription;
  • To send essential product communications (billing, security, service updates);
  • To comply with legal obligations.

We do not sell your personal data. We do not use Your Content to train general-purpose AI models.

3. Third-party processors

We use the following processors to run the Service. Each operates under its own privacy policy.

  • Clerk — authentication and user management.
  • Supabase — PostgreSQL database hosting.
  • Vercel — application hosting and CDN.
  • Stripe — payment processing.
  • DeepL, OpenAI, Google Cloud Translation — AI translation providers. Your source strings are sent to these providers for the duration of a translation request. Where the provider supports it, we opt out of data retention for training purposes.
  • Resend — transactional email delivery.

4. Cookies

We use cookies only for essential functions: authentication session, locale preference, and CSRF protection. We do not use third-party advertising cookies.

5. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data; object to certain processing; or lodge a complaint with your data protection authority. You can exercise most of these rights directly from your account settings (export / delete account), or by emailing privacy@transloot.com.

6. Data retention

We retain your account and content for as long as your account is active. When you delete your account, we remove Your Content from our production database within 30 days. Backups are retained for up to 90 days and then purged. Billing records are retained as required by tax law.

7. Children's privacy

Transloot is not intended for users under 13. We do not knowingly collect data from children under 13. If you believe a child has provided personal data, please contact us and we'll delete it.

8. International transfers

Your data may be stored and processed in regions outside where you live (commonly the United States, Singapore, or Europe, depending on the processor). We rely on standard contractual clauses and processor-level safeguards for cross-border transfers.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced via email or in-app notice at least 14 days before they take effect.

10. Contact

Privacy questions or data requests? Email privacy@transloot.com.