Privacy Policy

The data controller responsible for processing on this website is:

Balane GmbH
Balanstraße 84
81541 Munich
Germany

Email: contact@balane.tech

Hosting

Our website is hosted on Vercel with servers worldwide, including in the EU. Vercel is a US-based provider. Data transfers to the USA are based on the EU-US Data Privacy Framework.

Database

Your data is stored in a Supabase database located in Frankfurt, Germany. Supabase is also a US-based provider.

AI translation services

For translations we use several AI services:

• OpenAI (GPT models) – USA
• Anthropic (Claude) – USA
• Mistral AI (planned for the future) – France

The texts you upload are sent to these services for translation.

Translation Worker

The actual translations are processed on a worker server at Fly.io in Frankfurt, Germany.

Email sending

Transactional emails (order confirmations, password resets) are sent via Brevo. Brevo is a European provider with servers in the EU.

Ticket system

For support requests we use Zammad, an open-source ticketing system, self-hosted on a Hetzner server in Germany.

During registration

• Email address
• Password (encrypted storage)
• Registration timestamp

When using the translation service

• Uploaded files (localization files)
• Source and target languages
• Translation history
• Translation Memory (if you create a project)
• Payment information (processed by Stripe)

Automatically collected data

• IP address
• Browser type and version
• Operating system
• Access timestamp
• Referrer URL

We process your data for the following purposes:

• Provision of the translation service
• Management of your user account
• Payment processing
• Storage of the Translation Memory to reduce costs
• Technical security and error analysis
• Compliance with statutory retention requirements

You are solely responsible for the content you upload and have translated.

We make no liability or warranty for:

• The accuracy or quality of the translations.
• The lawfulness of the content you uploaded.
• Any potential copyright infringements in your content.
• The suitability of translations for a specific purpose.

Please ensure that you are authorized to process and translate the uploaded content.

Your data will be shared with:

• AI Translation Services AI translation services (OpenAI, Anthropic, DeepSeek, possibly Mistral AI) – for performing translations
• Stripe – for payment processing (servers in the EU and the USA).
• Supabase – for database usage (server in Frankfurt, operators in the USA).
• Vercel – for hosting the application (servers worldwide, including the EU; operators in the USA).
• Umami Analytics – for anonymized collection of usage statistics (self-hosted on Railway in the EU)
• CRM System CRM system (Odoo) – for managing customer relationships and orders (only order data: email, order number, amount).
• Email Service Email service (Brevo) – for sending transactional emails (e.g., order confirmations, password resets)
• Fly.io – for operating the translation worker (server in Frankfurt, Germany)
• Ticket System Ticketing system (Zammad) – for handling support inquiries (self-hosted on Hetzner in Germany)

No data is shared with other third parties unless we are legally required to do so.

As we use services from international providers, your data may be transferred to third countries:

• USA: Vercel, Supabase, OpenAI, Anthropic, Stripe, Railway, Fly.io

The United States does not have a data protection level fully equivalent to the GDPR. Transfers are based on the EU-US Data Privacy Framework or Standard Contractual Clauses.

Data Processing Agreements

With all processors named above (Vercel, Railway, Supabase, Stripe, OpenAI, Anthropic, DeepSeek), data processing agreements (DPAs) have been concluded in accordance with Art. 28 GDPR. They include the European Commission Standard Contractual Clauses for the lawful transfer of data to third countries.

• User account data: As long as your account exists.
• Translation orders: As long as your account exists (for technical reasons)
• Translation Memory: As long as your project exists or until it is manually deleted.
• Payment data: 10 years (statutory retention period)
• Server logs: 7 days

To protect your data and keep our database up to date, we automatically delete inactive accounts:

• After 12 months of inactivity, your account will be marked as inactive
• You will receive an email notification 30 days before deletion
• If there is no response, all your data (account, projects, translation memory, translation history) will be automatically deleted
• Each login or use of the service resets the inactivity period

This measure is designed to protect your data in accordance with the principle of data minimization (Art. 5(1)(c) GDPR).

You have the following rights under the GDPR:

• Right of access (Art. 15 GDPR): You can request access to the data we hold about you
• Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data.
• Restriction of processing (Art. 18 GDPR): You can request the restriction of processing
• Data portability (Art. 20 GDPR): You can receive your data in a structured, commonly used and machine-readable format.
• Right to object (Art. 21 GDPR): You can object to the processing.

To exercise your rights, please contact: contact@balane.tech

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

The competent supervisory authority is:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: www.lda.bayern.de

Technically necessary cookies (essential)

These cookies are required for the core functionality of the website and are set automatically:

• Session cookie: Login status and authentication
• Theme cookie: Stores your preference for light/dark mode
• Locale cookie: Stores your language setting (DE/EN)

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)

Analytics (without cookies)

We use Umami Analytics, a privacy-friendly analytics tool to understand and improve the use of our website. Umami Analytics is only activated after your explicit consent.

Umami Analytics

Provider: Self-hosted (Balane GmbH) on Railway, servers in the EU.
Data storage: EU servers (Railway)
Collected data:

• Visited pages (URLs)
• Referrer (previous page)
• Browser type and version
• Operating system
• Device type (Desktop, Mobile)
• Visit duration and interactions

Important: Umami does not store IP addresses, does not use cookies, and does not create user profiles across multiple websites. All data is fully anonymized.

Purpose: Analysis of user behavior to improve the website.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)
Retention period: Aggregated statistics, 24 months
More information: Umami Privacy Policy

Since Umami Analytics operates completely anonymously and does not process personal data, no separate consent is required.

Overview of all cookies

A detailed overview of all cookies we use can be found on our Cookie Policy page. Cookie Policy page.

We may update this privacy policy from time to time. We will inform you of material changes by email or service notification.

The new privacy policy applies on your next visit.