Privacy Policy

1. Data Controller

The data controller for the GoLocal! translation service is Xodera OÜ, a private limited company registered in the Republic of Estonia.

• Registry code: 17440743
• Address: Tornimäe tn 5, Tallinn 10145, Estonia
• Email: [email protected]

2. What Data We Collect

When you use GoLocal!, we may collect and process the following data:

• Account data: Email address, name, and profile picture provided by Google OAuth during sign-in.
• Project data: Project names, domain names, language settings, and API keys you create in the dashboard.
• Translation data: Source texts submitted for translation and their translated outputs. These texts originate from your website visitors' page content.
• Usage data: Monthly Active Users (MAU) counts, API request volumes, translation statistics, and page URLs where translations are requested.
• Technical data: IP addresses, browser user-agent strings, and referring domains — used for bot filtering and abuse prevention.
• Payment data: Subscription and billing data processed by Stripe. We do not store credit card numbers on our servers.

3. How We Use Your Data

• To provide and improve the translation service.
• To authenticate users and manage accounts.
• To process payments and manage subscriptions.
• To monitor usage against plan limits.
• To prevent abuse, detect bots, and enforce fair usage policies.
• To communicate service updates, outages, or policy changes.

4. Data Processing & Storage

• Edge processing: Translation requests are routed through Cloudflare Workers (edge computing) for low-latency delivery. Translated content may be cached at Cloudflare's 300+ global edge locations.
• AI translation: Source texts are processed by our AI-powered translation engine. Text data is sent to third-party AI providers for translation processing in accordance with their respective data usage policies.
• Persistent storage: Translated texts, project configurations, and usage statistics are stored on servers located in the European Union (Hetzner, Germany).
• Dashboard database: Account and project data is stored in PostgreSQL on EU-based infrastructure.

5. Data Retention

We retain your data for as long as your account is active. Upon account deletion or subscription cancellation, we will delete your project data, translations, and usage statistics within 30 days. Aggregated, anonymized statistics may be retained indefinitely for service improvement.

6. Third-Party Services

• Google OAuth: Authentication provider. Subject to Google's Privacy Policy.
• Stripe: Payment processor. Subject to Stripe's Privacy Policy.
• AI Translation Providers: Third-party AI services used for text translation. Data is processed in accordance with their respective privacy policies.
• Cloudflare: CDN and edge computing. Subject to Cloudflare's Privacy Policy.
• Hetzner: Server infrastructure. Subject to Hetzner's Privacy Policy.

7. Your Rights (GDPR)

As a data subject under EU law, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Request deletion of your data.
• Restrict or object to processing.
• Data portability.
• Lodge a complaint with a supervisory authority (Estonian Data Protection Inspectorate).

To exercise any of these rights, contact us at [email protected].

8. Cookies

GoLocal! uses essential cookies and localStorage for session management and language preferences. We do not use tracking cookies or third-party analytics. The translation widget stores the selected language preference in the browser's sessionStorage.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.