Privacy policy
Обновлено: 30 октября 2026 г.
Этот документ доступен на английском и болгарском языках. Ниже приведена английская версия.
This policy explains how translAI handles personal data. We collect as little as we can: an e-mail address to sign you in, the files you upload for as long as it takes to make and deliver your translation, and what is needed for billing and security.
Who is responsible
The controller is Babetsi EOOD („Бабеци“ ЕООД), company ID (EIK) 208684851, 16 Alen Mak St., 4109 Branipole, Bulgaria, info@translai.art.
What we process and why
| Data | Purpose | Legal basis (GDPR) | Kept for |
|---|---|---|---|
| E-mail address, site language | Your account, sign-in links, messages about your translations and subscription | Contract (Art. 6(1)(b)) | Until you delete your account |
| Files you upload, the lyrics read from them and the translated PDF | Making and delivering your translation | Contract (Art. 6(1)(b)) | The uploaded file is deleted as soon as its pages are prepared. Translated pages are kept while your plan is active and for 30 days after it ends; the free sample for 7 days after upload. Everything is deleted earlier when you delete it |
| Job details: date, file name, languages, style, number of pages, status | Showing your history, counting pages, fixing problems | Contract; legitimate interest in running the service (Art. 6(1)(f)) | Until you delete your account |
| Subscription details from Stripe: customer ID, plan, status, billing country | Activating your plan; making sure the service is used only in supported countries | Contract; legal obligations and legitimate interest (Art. 6(1)(c), (f)) | While you have an account, then as required by accounting law |
| IP address and the country derived from it | Security, preventing abuse, blocking unsupported countries | Legitimate interest (Art. 6(1)(f)) | Not stored as such; we keep only a one-way scrambled (hashed) value to limit free pages and sign-in requests, for up to 2 months |
| Server logs (technical events, errors) | Keeping the service secure and working | Legitimate interest (Art. 6(1)(f)) | Up to 14 days |
We do not sell your data, we do not use advertising or analytics cookies, and we do not send marketing e-mails unless you ask for them.
Who helps us (processors and partners)
- Anthropic PBC (USA): the AI (Claude) that reads and translates the lyrics. It receives images of your score lines and the lyrics text. Anthropic states that it does not use inputs and outputs from its commercial API to train its models and deletes them within 30 days, except where longer retention is needed to enforce its usage policy or by law (Anthropic privacy center, July and August 2026).
- Stripe: payments. For purchases, Stripe’s merchant-of-record service acts as the seller and processes your payment data under its own privacy policy; we never see your full card number.
- Cloudflare, Inc.: content delivery, DNS and protection against attacks; it handles the traffic to our site.
- Hosting provider: the server in the EU where the translation runs and your translations are stored for the period above.
- Resend (USA): sending sign-in and notification e-mails.
Where data goes to the USA, the transfer is based on the EU-US Data Privacy Framework (for certified companies) or the European Commission’s standard contractual clauses.
Your rights
You can ask us for access to your data, correction, deletion, restriction of processing, a copy in a portable format, and you can object to processing based on legitimate interest. Write to info@translai.art; we answer within one month. You can delete any file yourself at any time in “My scores”.
You also have the right to complain to a data protection authority: in Bulgaria the Commission for Personal Data Protection (cpdp.bg), or the authority in the country where you live.
Children
translAI is not meant for children under 16.
Automated decisions
The AI translates your text; it does not make decisions about you. We make no decisions with legal or similarly significant effect based solely on automated processing.
Security
Connections are encrypted (HTTPS). Sign-in uses single-use links that expire after 30 minutes; sessions are stored as hashed tokens. Access to the server is restricted, and files are deleted on a fixed schedule.
Changes
We will update this policy when our processing changes and show the date at the top. For significant changes we will let you know by e-mail.