Privacy Policy
Last updated: 16 January 2026
Protecting your personal data matters to us. This Privacy Policy describes how Worldword (“we”, “us”, “our”) handles personal information when you use our services, in compliance with applicable data protection laws, including the EU/EEA General Data Protection Regulation (GDPR), UK GDPR, the UK Data Protection Act 2018, and other relevant regulations.
This policy applies to our website-based translation service available at [yourdomain.com] (the “Website”), as well as related support communications, regardless of whether you create an account or purchase Credits.
1. Data Controller and Contact Information
Controller
Your Company Name
[Registered address]
[Country]
Privacy contact: [[email protected]]
Support: [[email protected]]
Where applicable, you may also reach our Data Protection Officer at [[email protected]].
2. Scope and Definitions
“Personal data” refers to any information that identifies or can be linked to an individual.
“Service” means the online translation services provided through the Website.
“Credits” are prepaid units purchased on the Website and used to pay for translations.
3. Information We Process When You Use the Service
3.1 Account creation and access
When you create or access an account, we process your email address, encrypted password, IP address, and basic device information. This data is used to manage accounts, secure access, and prevent unauthorized activity.
Legal basis: contractual necessity and legitimate interests related to security and fraud prevention.
3.2 Credit purchases and billing
When Credits are purchased, we process details such as your name, billing address, country, tax or VAT information (if provided), transaction references, and masked payment data. Full payment card details are handled exclusively by our payment processor and are never stored by us.
Purpose: payment processing, accounting, and managing refunds or chargebacks.
Legal basis: contractual necessity and compliance with legal obligations.
3.3 Translation requests and files
To deliver translations, we process submitted text or documents, selected languages, file size information, timestamps, technical logs, and the resulting translation output.
Translation data is handled only to provide the Service. By default, both source content and output are removed after completion, aside from limited short-term storage needed for operational reliability.
Your content is never used to train AI models unless you explicitly opt in.
Legal basis: performance of a contract.
3.4 Optional features
If you choose to enable optional features such as saved translations, usage history, or glossaries, the associated data is stored in your account until you delete it or close your account.
Legal basis: performance of a contract.
3.5 Short-term buffering and troubleshooting
For stability and error recovery, encrypted copies of job data may be temporarily retained for up to 72 hours. Access to this data is restricted and logged.
Legal basis: legitimate interest in maintaining service reliability and security.
3.6 Support communications
When you contact support, we process your email address, name (if provided), message content, attachments, and ticket metadata in order to respond and improve support quality.
Legal basis: contractual necessity and legitimate interest in customer support.
4. Website Logs, Security, and Basic Analytics
When you access the Website, we collect technical data such as IP address, browser and operating system details, referral URLs, visited pages, timestamps, and error logs.
Purpose: security monitoring, fraud prevention, performance analysis, and service improvement.
Legal basis: legitimate interests.
Retention: security logs are generally retained for up to 14 days unless longer retention is required for investigations. Aggregated analytics may be kept longer in anonymized form.
5. Legal Bases for Processing
Depending on the context, we rely on the following legal grounds:
Contract: providing the Service, managing accounts, processing translations, and handling payments
Legitimate interests: security, fraud prevention, system stability, and service optimization
Consent: optional features or marketing communications where required
Legal obligation: compliance with tax, accounting, and regulatory requirements
6. Data Retention
Personal data is retained only for as long as necessary:
Account information: for the duration of your account and as required by law after closure
Translation content: removed after completion and short-term buffering unless saved by you
Support records: typically retained for up to 24 months
Security logs: generally retained for up to 14 days unless required for incident handling
Data is deleted or anonymized once it is no longer needed.
7. Sharing of Personal Data
We do not sell personal data. Information is shared only with trusted service providers acting under our instructions, including:
Payment processors for transaction handling
Security and CDN providers for protection and performance
Support platforms for ticket management
Email providers for transactional communications
All providers are bound by data processing agreements and must implement appropriate security safeguards.
Data may also be disclosed where required by law or to protect our rights, users, or the integrity of the Service.
8. International Data Transfers
If personal data is transferred outside the EEA or the UK, approved safeguards such as adequacy decisions or Standard Contractual Clauses are used in line with GDPR requirements. Additional details are available upon request.
9. Marketing Communications
Essential service-related messages may be sent without consent. Promotional emails or newsletters are sent only where permitted by law or with your consent. You may opt out at any time using the unsubscribe link or by contacting support.
10. Your Rights
You have the right to:
access your personal data
request correction of inaccurate information
request deletion of your data
restrict or object to processing
request data portability
withdraw consent at any time
To exercise these rights, contact [[email protected]]. Identity verification may be required. You may also file a complaint with your local data protection authority, though we encourage contacting us first.
11. Children’s Data
The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided data, please contact us so it can be removed.
12. Security Measures
We apply appropriate technical and organizational measures, including encryption, access controls, and secure development practices, to protect personal data. While no system is entirely risk-free, users are encouraged to use strong passwords and keep login details confidential.
13. Changes to This Privacy Policy
This Privacy Policy may be updated periodically. Changes will be published on this page with an updated date. Where required by law, advance notice will be provided for material updates.
14. Regional Provisions
United Kingdom
References to GDPR include UK GDPR and the Data Protection Act 2018. UK users may contact the Information Commissioner’s Office (ICO).
California
We do not sell or share personal information as defined under CCPA/CPRA. California residents may request access, correction, or deletion of their personal data.
Other jurisdictions
We respect applicable local data protection laws. Please contact us with jurisdiction-specific questions.
15. Contact
Your Company Name
[Registered address], [Country]
Privacy: [[email protected]]
Support: [[email protected]]