Privacy Policy

Last updated: August 2026

This Privacy Policy explains how i18nnn ("we", "us") collects, uses, and shares information about you when you use our service.

1. Information we collect

• Account data: name, email address, profile picture (provided by WorkOS).
• Workspace data: translation keys, translations, glossaries, member roles that you create or that are created on your behalf.
• AI provider keys: encrypted at rest with your account key. We never see the plaintext outside of a signed request to the provider.
• Billing data: handled by Stripe; we store the customer ID, subscription ID, and last four digits of your payment method.
• Technical data: IP address, user agent, error reports (via Sentry), and aggregate usage analytics.

2. How we use your information

We use the information we collect to:

• Provide, maintain, and improve the service.
• Process payments and manage your subscription.
• Send transactional emails (invitations, receipts, security alerts).
• Detect and prevent abuse, fraud, and security incidents.
• Comply with legal obligations.

3. Legal basis (GDPR)

We process your data on the basis of contract performance (providing the service), legitimate interest (security, abuse prevention), and legal obligation (tax, accounting).

4. Sharing and subprocessors

We share data with the subprocessors listed in our Data Processing Agreement. We do not sell personal data.

5. Cookies

We use first-party cookies only, for session management and CSRF protection. We do not use third-party tracking or advertising cookies.

6. Your rights

You have the right to access, correct, export, or delete your personal data. You can export or delete your account from the GDPR page in your settings.

7. Data retention

Personal data is retained for the duration of your account. Audit logs are retained for 2 years. Backups are retained for 30 days.

8. Security

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). AI provider keys are encrypted at the application layer in addition to disk encryption. Access to production data requires hardware-backed MFA.

9. International transfers

Our hosting is in the EU (AWS Paris). Some subprocessors are based in the United States; transfers rely on Standard Contractual Clauses.

10. Contact

Privacy questions can be sent to privacy@i18nnn.app.