Privacy Policy

DevLokalize("we", "us") provides a collaborative translation management platform at devlokalize.com and via our REST API and mobile SDKs. This policy explains what data we collect, why, and what control you have over it.

1. Information we collect

Account information

When you register, we collect your name, email address, and a hashed password (if you sign up with a password) or your Google account identifier (if you sign in with Google — we never see or store your Google password). We never store passwords in plain text.

Project and translation content

Anything you or your team enters into a project — source strings, translations, comments, glossary terms, project descriptions, branding (logo URL, accent color, contact links) — is stored so the service can function. If a project is set to Public, that content is visible to anyone who visits the project page, by design.

Payment information

Subscription payments are processed by Stripe. We never receive or store your full card number — Stripe handles that under its own privacy policy. We store your subscription plan, status, and Stripe customer/subscription IDs so we can enforce plan limits and let you manage billing.

Usage and technical data

We log standard technical data (IP address, browser user agent, request timestamps) for security, rate limiting, and abuse prevention. We do not use third-party advertising trackers or sell any data to advertisers.

2. How we use your information

• To provide, operate, and maintain the service (accounts, projects, translations, billing).
• To send you AI or machine translation suggestions when you explicitly request one — this sends the relevant source string to the provider you selected (Anthropic Claude, Google Translate, or DeepL) solely to generate a suggestion. We don't send your content to these providers unless you click "Suggest."
• To send transactional email (password resets, account notices) via Resend.
• To enforce plan limits and prevent abuse (rate limiting, fraud prevention).
• To communicate with you about your account or respond to support requests.

3. Third-party services

We rely on the following processors to operate the service:

• Stripe — payment processing and subscription billing.
• Resend — transactional email delivery.
• Google Cloud — hosting, database, and infrastructure.
• Anthropic, Google Translate, and DeepL — machine translation suggestions, only when you request one.
• Google OAuth — optional sign-in, if you choose to use it.

4. Cookies

We use a single session cookie to keep you signed in. We don't use advertising or cross-site tracking cookies.

5. Data retention and deletion

We retain account and project data for as long as your account is active. You can delete a project at any time from its settings page, which permanently removes its components, strings, and translations. To request full account deletion, contact us using the details below — we'll delete your account and personal data within a reasonable timeframe, except where we're required to retain records (e.g. billing records for tax purposes).

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to certain processing. Contact us to exercise any of these rights.

7. Children's privacy

DevLokalizeis not directed at children under 13, and we don't knowingly collect personal information from them.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls scoped to project membership. No system is perfectly secure, and we can't guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above when we do, and for material changes we'll make a reasonable effort to notify active users.

10. Contact

Questions about this policy or your data? Email privacy@devlokalize.com.