Privacy Policy

Responsible for data processing on this website is:

Balane GmbH
Balanstraße 84
81541 München
Germany

Email: contact@balane.tech

Hosting

Our website is hosted on Vercel with servers worldwide, including in the EU. Vercel is a US-based provider. Data transfers to the U.S. are conducted under the EU-US Data Privacy Framework.

Database

Your data is stored in a Supabase database located in Frankfurt, Germany. Supabase is also a U.S.-based provider.

AI translation services

For translations we use various AI services:

• OpenAI (GPT models) – U.S.
• Anthropic (Claude) – U.S.
• Mistral AI (planned for the future) – France

The texts you upload are transmitted to these services for translation.

Translation worker

The actual translations are processed on a worker server at Fly.io in Frankfurt, Germany.

Email sending

Transactional emails (order confirmations, password resets) are sent via Brevo. Brevo is a European provider with servers in the EU.

Ticket system

For support requests we use Zammad, an open-source ticketing system, self-hosted on a Hetzner server in Germany.

During registration

• Email address
• Password (encrypted at rest)
• Registration timestamp

While using the translation service

• Uploaded files (localization files)
• Source and target languages
• Translation history
• Translation Memory (if you create a project)
• Payment information (processed by Stripe)

Automatically collected data

• IP address
• Browser type and version
• Operating system
• Access time
• Referrer URL

We process your data for the following purposes:

• Provision of the translation service
• Management of your user account
• Processing payments
• Storage of the Translation Memory to reduce costs.
• Technical security and error analysis
• Compliance with legal retention obligations

You are solely responsible for the content you upload and have translated.

We do not assume liability or provide any warranties for:

• The accuracy or quality of translations
• The legality of the content you uploaded
• Any copyright infringement in your content.
• The suitability of translations for a particular purpose.

Please ensure you are authorized to process and translate the uploaded content.

Your data will be shared with:

• AI Translation Services AI translation services (OpenAI, Anthropic, DeepSeek, possibly Mistral AI) – used to perform translations
• Stripe – for payment processing (servers in the EU and the U.S.).
• Supabase – for database usage (server in Frankfurt, operator in the U.S.).
• Vercel – for hosting the application (servers worldwide including the EU, operated in the U.S.).
• Umami Analytics – for anonymized collection of usage statistics (self-hosted on Railway in the EU).
• CRM System CRM system (Odoo) – for managing customer relationships and orders (only order data: email, order number, amount).
• Email Service Email service (Brevo) – for sending transactional emails (e.g., order confirmations, password resets)
• Fly.io – for running the translation worker (server in Frankfurt, Germany)
• Ticket System Ticket system (Zammad) – for handling support requests (self-hosted on Hetzner in Germany)

No data will be disclosed to other third parties, unless we are legally obligated to do so.

As we use services from international providers, your data is partially transmitted to third countries:

• USA: Vercel, Supabase, OpenAI, Anthropic, Stripe, Railway, Fly.io

The United States does not maintain a data protection level that fully aligns with the GDPR. Transfers are based on the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

Data Processing Agreements (DPAs)

With all of the processors listed above (Vercel, Railway, Supabase, Stripe, OpenAI, Anthropic, DeepSeek), data processing agreements (DPAs) have been concluded in accordance with Art. 28 of the GDPR. These include the European Commission's Standard Contractual Clauses for the lawful transfer of data to third countries.

• Account data: As long as your account exists.
• Translation jobs: As long as your account exists (for technical reasons)
• Translation Memory: As long as your project exists or until it is manually deleted.
• Payment data: 10 years (statutory retention obligation)
• Server logs: 7 days

To protect your data and keep our database up to date, we automatically delete inactive accounts:

• After 12 months of inactivity, your account will be marked as inactive.
• You will receive an email notification 30 days before deletion.
• If there is no activity, all of your data (account, projects, Translation Memory, translation history) will be automatically deleted.
• Every login or use of the service resets the inactivity period.

This measure is intended to protect your data in accordance with the principle of data minimization (Art. 5(1)(c) GDPR).

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): You can request information about the data we have stored.
• Right to rectification (Art. 16 GDPR): You can request the correction of incorrect data.
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data.
• Restriction of processing (Art. 18 GDPR): You can request the restriction of processing.
• Data portability (Art. 20 GDPR): You can receive your data in a structured format.
• Right to object (Art. 21 GDPR): You can object to the processing of your data.

To exercise your rights, please contact: contact@balane.tech

You have the right to file a complaint with a data protection authority about our processing of your personal data.

The competent supervisory authority is:
Bavarian Data Protection Authority (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: www.lda.bayern.de

Technically necessary cookies (essential)

These cookies are necessary for the basic functions of the website and are set automatically:

• Session cookie: Login status and authentication
• Theme cookie: Stores your preference for light/dark mode
• Locale cookie: Saves your language setting (DE/EN).

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)

Analytics (no cookies)

We use Umami Analytics, a privacy-friendly analytics tool, to understand and improve the use of our website. Umami Analytics is only activated after your explicit consent.

Umami Analytics

Provider: Self-hosted (Balane GmbH) on Railway, servers in the EU
Data storage: EU servers (Railway)
Collected data:

• Visited pages (URLs)
• Referrer (previous page)
• Browser type and version
• Operating system
• Device type (Desktop, Mobile)
• Visit duration and interactions

Important: Umami does not store IP addresses, does not use cookies, and does not create user profiles across websites. All data is fully anonymized.

Purpose: Analysis of user behavior to improve the website
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)
Retention period: Aggregate statistics, 24 months
More information: Umami Privacy Policy

Because Umami Analytics operates fully anonymously and does not process personal data, no separate consent is required.

Overview of all cookies

A detailed overview of all the cookies we use can be found on our Cookie Policy page. Cookie Policy page.

We may update this privacy policy from time to time. We will notify you of material changes by email or service notification.

For your next visit, the new privacy policy will apply.