Privacy Policy

This policy explains what personal data Traslatability collects when you use traslatability.com or one of our plugins, why we collect it, who else handles it, and the choices you have. We collect the minimum needed to sell, deliver and support software, and nothing for advertising.

Who is responsible

Traslatability, 71-75 Shelton Street, London WC2H 9JQ, United Kingdom, is the data controller. Contact us through the contact page.

What we collect, and why

When you buy

Your name, email address, billing country and, where you enter them, a company name and tax number. We use these to create your account, issue your licence key, send your receipt and invoice, and meet our accounting and tax obligations. Card details are entered on Stripe’s payment page and never reach our servers; we receive only a confirmation of payment and the last four digits of the card for your records.

When you activate a plugin

The plugin sends your licence key, the domain name of the site, the plugin version and the WordPress version to our server. We store the domain against your licence so that you can see and manage your activations, and so that updates can be delivered. The request’s IP address appears in our server logs, which are kept for operational security and rotated automatically.

When a plugin checks for updates

The same details are sent, typically twice a day, so that a new version can be offered in your dashboard. No content from your site, no visitor data and no settings are ever sent to us.

When you contact support

Your message, your email address and, if you are logged in, your account are kept so we can answer you and refer back to the conversation later.

When you browse the site

Our web server and Cloudflare record standard access logs: IP address, browser type, the pages requested and the time. These are used to keep the site running and secure. We do not run advertising trackers or third-party analytics.

To learn which pages help people choose a plugin, each page you open sends one count to our own server, not to an analytics company. The count carries the page’s address without anything after a question mark, the name of the site that sent you if there was one (google.com, for example, never the address you came from), whether your browser window is phone, tablet or desktop sized, and, if you press a Buy button, which plugin and plan. We add it to daily totals and keep nothing else: no cookie, nothing stored in your browser, no IP address, no browser details and no identifier, so the totals cannot be traced back to you or linked to your other visits. Your IP address is used only to stop one source sending too many counts, and is forgotten within the hour. If your browser sends Do Not Track or Global Privacy Control, no count is sent at all. We keep the daily totals for 400 days, in our legitimate interest of improving the site.

Legal bases

We process purchase and account data to perform our contract with you; invoice and tax records to comply with legal obligations; logs and security data in our legitimate interest of running a secure service; and support conversations to perform the contract and in our legitimate interest of improving the plugins. We do not rely on consent for anything essential, so there is no consent to withdraw that would stop the service working.

Who else handles your data

We use a small number of service providers, each only for the purpose stated:

• Stripe — payment processing and subscription billing. Stripe is an independent controller for the payment itself; see Stripe’s privacy policy.
• Hetzner Online GmbH (Germany) — hosting for our website, database and licence server.
• Cloudflare — DNS, TLS and protection against attacks, sitting in front of our server.
• Backblaze — storage from which plugin downloads are served.
• Amazon Web Services (SES) — sending transactional email such as receipts, licence keys and support replies.

We do not sell personal data, and we do not share it with anyone for marketing.

International transfers

Our servers are in the European Union. Some providers above process data in the United States under the UK and EU adequacy arrangements or standard contractual clauses. We choose providers that commit to those safeguards.

How long we keep it

• Account and licence data: for as long as your account exists, then deleted within 90 days of you asking us to close it.
• Invoices and payment records: seven years, as UK tax law requires.
• Support conversations: three years after the last message.
• Server and licence-activation logs: rotated automatically, typically within 30 days.

Your rights

Under UK and EU data protection law you can ask us for a copy of your personal data, ask us to correct or delete it, object to or restrict its processing, and ask for it in a portable format. You can exercise any of these through the contact page; we answer within one month. If you are unhappy with how we handle your data you can complain to the UK Information Commissioner’s Office or to the supervisory authority where you live.

Security

All traffic to the site and between our plugins and our server is encrypted with TLS. Passwords are stored hashed, licence keys are generated randomly, and downloads are served through signed, expiring links. Access to production systems is limited to the people who maintain them.

Cookies

We use only the cookies needed to run the site. They are listed in our cookie policy.

Children

Our products are for businesses and professionals and are not directed at children. We do not knowingly collect data from anyone under 16.

Changes

If this policy changes in a way that matters to you we will say so by email or with a notice on the site. The date at the top shows when it was last updated.