Privacy Policy

This Privacy Policy explains how Doc Translator (“we,” “us,” or “our”) collects, uses, shares, stores, and protects information when you use our website, translation tools, account, file library, payment features, and related services (collectively, the “Service”).

It should be read together with our Terms of Use. This Policy does not cover websites or services that we do not control, even when we link to them.

Depending on how you use the Service, we may collect:

• Account information: your user ID, name, email address, avatar, account status, sign-in provider, and related authentication information. We do not receive your third-party sign-in password.
• User Content: text, documents, spreadsheets, presentations, PDFs, images, subtitles, file names, file sizes, formats, selected languages, extracted content, and translated results.
• Translation and account activity: task status, provider usage, estimated and charged Credits, membership limits, errors, timestamps, file records, and download activity needed to operate your file library.
• Payment and subscription information: plan, billing period, subscription status, renewal status, transaction references, and Stripe customer or checkout identifiers. Stripe processes your full payment-card details; we do not store the full card number or security code.
• Technical and usage data: IP address, browser, device and operating-system information, referring pages, access times, language, time zone, pages and features used, request IDs, logs, performance data, and diagnostic events.
• Communications: your contact details and the content of messages you send to support.

We use information to:

• authenticate users and provide text, document, PDF, and image translation;
• upload, analyze, process, store, preview, display, and download source files and translation results;
• estimate and charge Credits, enforce plan benefits, process payments, and manage subscriptions;
• operate, troubleshoot, secure, monitor, and improve the Service;
• prevent fraud, abuse, unauthorized access, and violations of our Terms;
• respond to support requests and service communications; and
• comply with law, enforce agreements, and protect users, the public, and our rights.

We may create aggregated or de-identified statistics that do not reasonably identify you and use them for analytics, planning, and service improvement.

We use automated systems and third-party translation or AI providers to process User Content. The provider depends on the feature and file type. For example, PDF document translation may be processed by DeepL, while text, supported office or structured files, and images may be processed using OpenAI services.

We send those providers the content and instructions needed to perform the requested translation, along with limited technical metadata. Their processing is subject to their contracts with us, applicable law, and their own privacy and security terms. Providers and routing may change as the Service evolves.

We disclose information to providers that help operate the Service, currently including:

• Supabase for authentication, database services, and file storage;
• Vercel for frontend hosting and delivery, and Railway for backend hosting;
• Stripe for checkout, subscriptions, billing, and payment processing;
• DeepL and OpenAI for translation and AI-assisted file processing;
• Google and Meta when you choose their account sign-in options; and
• Google Analytics and PostHog for product, performance, and usage analytics when enabled.

We may also disclose information:

• when you direct us or give consent;
• to comply with law, court orders, or valid government requests;
• to investigate abuse or protect rights, safety, property, and the integrity of the Service; or
• as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards.

We do not sell personal information for money. Analytics and service providers may receive identifiers and usage data as described above.

We and our providers use cookies, browser storage, pixels, and similar technologies to maintain sessions, remember settings, restore an interrupted upload or checkout flow, secure the Service, measure traffic, diagnose errors, and understand feature usage. Production deployments may use Google Analytics and PostHog. You can restrict cookies through your browser, but authentication, saved settings, file restoration, or other features may not work correctly.

Where data-protection law requires a legal basis, we rely on one or more of the following:

• Contract: processing needed to provide the Service you request, manage your account, and administer payments;
• Legitimate interests: operating, securing, analyzing, and improving the Service and preventing abuse;
• Consent: where you make an optional choice or local law requires consent; and
• Legal obligation: complying with tax, accounting, regulatory, law-enforcement, or other legal requirements.

We and our providers operate in multiple countries. Your information may therefore be processed outside the country where you live, including in the United States. Where required, we use contractual or other lawful safeguards for cross-border transfers, but privacy laws in the destination may differ from those in your jurisdiction.

We retain information for as long as reasonably needed to provide the Service, keep files available in My Files, maintain security and audit history, resolve disputes, enforce agreements, and meet tax, accounting, payment, and legal obligations. Retention periods vary by data category and operational need.

Uploaded and translated files currently remain available through My Files, and their access links do not automatically expire. We do not currently promise automatic deletion immediately after a translation finishes.

The Delete account feature disables your Doc Translator profile and signs you out after any active subscription is canceled. It does not automatically delete the underlying authentication account or all payment, membership, Credit, file, task, security, and audit records. Some information may be retained where necessary for legitimate business or legal purposes. You may contact us to request deletion, subject to verification and applicable exceptions.

We use technical and organizational safeguards intended to protect information, including encrypted network connections, authentication, access controls, logging, and provider security controls. No storage or transmission method is completely secure. File access links work as explained above, so keep them private and evaluate whether the Service is appropriate for highly sensitive content.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information; object to or restrict certain processing; withdraw consent; or appeal a decision. You may also manage your subscription from your account and control cookies through your browser.

To make a privacy request, email support@doctranslator.io. We may need to verify your identity and may retain information when permitted or required by law. You may also have the right to complain to your local data-protection authority.

The Service is not intended for anyone under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided information to us, contact us so we can review and take appropriate action.

We may update this Privacy Policy as the Service, providers, or law changes. We will post the revised Policy here and update the date at the top. Where required by law, we will provide additional notice or request consent before a material change takes effect.

Questions or requests about this Privacy Policy may be sent to support@doctranslator.io.