Privacy policy

1. Scope and roles

This Privacy Policy explains how Keyglot handles personal data when you visit the Keyglot website, create or use an account, participate in an organization workspace, contact support, or use Keyglot's translation management, publishing, delivery, billing, and AI-assisted features.

For account, website, billing, security, and support data, Keyglot acts as the controller or equivalent business responsible for deciding why and how the data is used. For source strings, translations, descriptions, placeholders, and other content submitted by an organization, Keyglot generally acts as a processor or service provider on that organization's instructions. Your organization may have its own privacy notice governing that content.

2. Data we collect

We collect the information needed to operate and secure the service, including:

• Account and profile data: name, verified email address, avatar, authentication state, interface preferences, and account identifiers.
• Organization and workspace data: memberships, roles, invitations, projects, locales, namespaces, translation keys, review state, publications, and delivery configuration.
• Customer content: source text, translations, descriptions, screenshots or attachments voluntarily submitted to support, and instructions used for translation work.
• Usage and device data: IP address, browser and device attributes, timestamps, routes and features used, diagnostic events, and security signals. Optional analytics is collected only after consent where required.
• Billing and transaction data: plan, subscription status, invoices, transaction identifiers, billing contact and address information, and limited payment metadata returned by our payment processor. Keyglot does not store complete payment-card numbers.
• Support and communications: support conversations, messages, attachments, service notices, and preferences associated with communications.
• Integration data: configuration and event metadata for APIs, webhooks, source extraction, delivery credentials, and AI-provider requests. Secrets are protected and are not displayed again after creation where the product says so.

3. Sources of data

We receive data directly from you, from administrators or members of your organization, from your use of the service, from applications calling Keyglot APIs or delivery endpoints, and from service providers involved in authentication, hosting, billing, email, security, analytics, support, or AI processing.

4. How we use data

We use personal data to:

• provide authentication, workspaces, translation editing, reviews, immutable publications, rollback, delivery, and support;
• administer subscriptions, enforce plan limits, process transactions, and maintain financial records;
• generate AI-assisted translation drafts and key suggestions when an eligible user requests them;
• preserve approved translation memory and improve the relevance and efficiency of translation workflows;
• monitor availability, diagnose failures, prevent abuse, investigate incidents, and protect users and the service;
• communicate about accounts, transactions, security, service changes, and support requests;
• understand product use through consented analytics and improve accessibility, performance, and usability;
• comply with law, enforce agreements, and establish or defend legal claims.

Depending on the applicable law and context, our legal basis may be performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, protection of vital interests, or consent. You may withdraw consent at any time without affecting earlier lawful processing.

5. AI-assisted features and translation memory

AI assistance is opt-in at the action level and produces reviewable drafts. When requested, relevant source strings, locale information, descriptions, placeholders, and translation instructions may be sent to an enabled AI provider. Do not include credentials, secrets, regulated data, or unrelated personal information in translation content.

Accepted translations may be retained in translation memory. Reuse across organizations is limited to eligible, normalized content and is designed not to expose organization identifiers or surrounding private project context. A translation-memory match remains a draft or candidate until accepted through the product workflow.

6. How we disclose data

We may disclose data to:

• vendors that provide cloud hosting, databases, content delivery, authentication, email, monitoring, customer support, analytics, payment processing, and AI inference;
• members and administrators of the organization that controls the relevant workspace;
• professional advisers, auditors, insurers, and financing or transaction counterparties subject to appropriate confidentiality duties;
• authorities or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud or abuse, or respond to valid legal process;
• a successor in a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate protections.

We do not sell personal data for money and do not use customer translation content for behavioral advertising.

7. International transfers

Keyglot and its service providers may process data in countries other than yours. Where required, we use recognized transfer mechanisms and contractual, organizational, and technical safeguards intended to protect transferred data.

8. Retention

We retain data only for as long as reasonably necessary for the purposes described above. Retention depends on the type of data and may include:

• account and workspace data while the account or organization remains active and for a limited period afterward;
• immutable publication and audit records for continuity, security, compliance, and dispute resolution;
• billing and tax records for the period required by applicable law;
• security, diagnostic, support, and delivery records according to configured operational retention periods;
• backups for a limited rolling period until overwritten or securely deleted.

Deletion from active systems may not immediately remove data from encrypted backups, legal holds, or records that must be retained by law. Data in those systems remains protected and is deleted or anonymized when the applicable retention period ends.

9. Security

We use administrative, technical, and organizational safeguards designed to protect data, including access controls, tenant authorization, encryption in transit, restricted secret handling, audit trails, and monitoring. No service can guarantee absolute security. Keep credentials confidential, use appropriately scoped tokens, and contact us promptly if you suspect unauthorized access.

10. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal data, and to appeal or complain to a supervisory authority. You may manage profile and organization information in the service, manage optional cookies through Manage cookies, and contact us for requests that cannot be completed in the product.

If your data belongs to an organization workspace, contact that organization's administrator first. We may need to verify your identity and authority before fulfilling a request. Legal exceptions may apply.

11. Children

Keyglot is a business service and is not directed to children. Do not use the service if you are below the minimum age required to consent to online services in your jurisdiction, and do not submit children's personal data unless your organization has a lawful basis and appropriate safeguards.

12. Changes and contact

We may update this policy to reflect changes in the service, law, or our practices. We will update the effective date and provide additional notice when a material change requires it. Contact the privacy address shown on this page with questions or requests.