Legal
Privacy Policy
Last updated 7 September 2026
This policy explains how Corporate Translate ("we", "us") collects and uses personal data when you use Corporate Translate, and your rights under UK data protection law.
1. What we collect
- The documents you upload for translation, and the translated documents we return to you.
- Your email address, if you create an account or contact us.
- Payment details are collected and processed entirely by Stripe. We never see or store your card number.
- Basic server logs generated automatically by our hosting provider (e.g. IP address, timestamps, error reports), used for security and troubleshooting.
- For a free job (a document of up to 200 words), the IP address the job was submitted from, kept with the job record only to limit free jobs to two per day per address. It is removed during document cleanup.
We record high-level task events, such as a quote becoming ready or a download being completed, to measure how the service works. These event payloads exclude document contents, filenames, access tokens and email addresses.
2. How we handle your documents
- Documents are stored encrypted in our database and file storage, hosted in London, UK.
- To produce the translation, the text is sent transiently to Anthropic's API for processing. Anthropic's commercial API terms state that content submitted through the API is not used to train their models. Because this involves an international transfer of data, it is safeguarded by a data processing agreement incorporating standard contractual clauses.
- For a scanned or photographed document, the page image is also sent transiently to Google's Gemini API to be redrawn with the translated text. We use Google's paid API services, for which Google's Gemini API Additional Terms of Service ("How Google Uses Your Data", paid services, last updated 28 April 2026) state that Google does not use your prompts or responses to improve its products, and processes them only to provide the service and to detect abuse, under its Data Processing Addendum - ai.google.dev/gemini-api/terms. The regenerated image is checked against the intended translation before delivery and is labelled as AI generated.
- For a video job, the video is sent to ElevenLabs: to its Scribe speech-recognition service to transcribe the speech (subtitled and dubbed jobs), and, for a dubbed job, to its Dubbing service, which synthesises a voice modelled on each speaker to regenerate the speech in the target language. The transcript text is sent to Anthropic for translation as above. ElevenLabs processes this under its API terms and data processing addendum. ElevenLabs' documentation states that its Zero Retention Mode - under which no request content is stored - is available only to Enterprise customers, which we are not; on our plan ElevenLabs may retain request data and the dubbing project under its standard retention. We delete the dubbing project from ElevenLabs by API as soon as your files have been stored with us, and ElevenLabs states it does not use Enterprise API data to train its models - elevenlabs.io/docs/eleven-api/resources/zero-retention-mode, elevenlabs.io/docs/overview/administration/data-residency. Uploading a video for dubbing requires you to confirm you have every speaker's consent to synthesise their voice; a synthesised voice is biometric-adjacent data and we only process it for that one job.
- Document access expires 30 days after the job is created. Files are removed during the next daily cleanup; an active translation or payment is protected until it finishes. You can ask us to delete a document sooner at any time - see "Your rights" below.
3. Subprocessors
| Subprocessor | Purpose | Location |
|---|---|---|
| Supabase | Database and document storage | London, UK |
| Vercel | Application hosting | UK region (London) |
| Stripe | Payment processing | International (Stripe's own terms apply) |
| Anthropic | AI translation processing | International, under a data processing agreement |
| Google (Gemini API) | Redrawing scanned or photographed images with the translated text (image jobs only) | International, under Google's Gemini API terms and data processing addendum |
| ElevenLabs | Speech recognition (Scribe) and AI dubbing with voice synthesis (video jobs only); the dubbing project is deleted by us after delivery | International (USA), under ElevenLabs' API terms and data processing addendum; Zero Retention Mode is Enterprise-only and not in force |
4. Lawful basis for processing
- Performance of a contract - processing your document and delivering the translation you paid for.
- Legitimate interests - keeping basic security and error logs to protect the service from abuse and diagnose faults.
- Consent - where you opt in to something specific, such as signing in with your email.
5. Retention
- Documents - access expires after 30 days and files are removed in the next daily cleanup, or sooner on request.
- Account email - kept while your account is active, or until you ask us to delete it.
- Payment records - held by Stripe under its own retention obligations; we do not separately store your card data.
6. Your rights
Under UK GDPR, you have the right to access, correct, delete, restrict, or receive a copy of your personal data, and to object to certain processing. To exercise any of these rights, contact sales@corporate-translate.com.
If you are unhappy with how we have handled your data, you also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
7. Cookies
We use only strictly necessary cookies - specifically, a session cookie used to keep you signed in. We do not currently use advertising or analytics cookies. If that changes, we will update this policy and ask for your consent where the law requires it.
8. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page shows when that last happened.
9. Contact
Corporate Translate. For any privacy question or to exercise your rights, contact sales@corporate-translate.com.
See also our Terms of Service.