Privacy Policy

Introduction

Welcome to JSON Translator. We are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how we handle information when you use our service.

Data Collection and Storage

What We DO NOT Store

• Your JSON Files: We do not store any JSON files you upload. All files are processed entirely in memory and are immediately deleted after processing.
• File Contents: We do not log or retain any content from your JSON files.
• Translation Results: Your translated files are not stored on our servers.

What We DO Collect

• Account Information: When using paid plans, we store your email address, name, and profile image via Google OAuth.
• Subscription Information: We store your plan, payment status, Stripe customer ID, and subscription ID.
• Translation History: We record the languages translated, character counts, and timestamps (file contents are NOT stored).
• IP Address: We temporarily store your IP address for rate limiting purposes only. This data is automatically deleted after 24 hours.
• Usage Statistics: We record monthly translation file counts and character counts for plan limit management.
• Error Logs: We log errors for debugging purposes, but these logs do not contain file contents or personal information.

Data Processing

When you upload a JSON file for translation:

1. The file is received by our server and loaded into memory
2. The file is parsed and translated using the DeepL API
3. The translated result is sent back to your browser
4. All data is immediately deleted from memory

Important: Your files never touch our disk storage or database. Everything happens in memory.

Third-Party Services

DeepL API

We use the DeepL API for translations. When you use our service, your text content is sent to DeepL for translation. Please review DeepL's privacy policy at https://www.deepl.com/privacy

Vercel (Hosting)

Our service is hosted on Vercel. For information about Vercel's data practices, please visit https://vercel.com/legal/privacy-policy

Rate Limiting

We use Upstash Redis for rate limiting. Only your IP address is temporarily stored for this purpose and is automatically deleted after 24 hours.

Stripe (Payment Processing)

We use Stripe for payment processing on paid plans. For information about how Stripe handles payment information, please review Stripe's privacy policy at https://stripe.com/privacy

Google OAuth (Authentication)

We use Google OAuth for user authentication. For information about how Google processes your data, please review Google's privacy policy at https://policies.google.com/privacy

PostgreSQL (Database)

We use a PostgreSQL database to store user accounts, subscription information, and translation history. Data is stored in a secure environment and accessed only through encrypted connections.

Cookies and Local Storage

We use browser local storage to:

• Remember your language preference
• Track rate limiting on the client side

We do not use cookies for tracking or advertising purposes.

Data Security

We implement industry-standard security measures to protect your data:

• All connections use HTTPS/TLS encryption
• Files are processed in memory only
• No persistent storage of user files
• Rate limiting to prevent abuse
• Regular security audits

Your Rights

You have the following rights regarding your personal data:

• Right to Access: You can access your account information and translation history from your dashboard.
• Right to Deletion: You can permanently delete your account at any time from your dashboard. Deletion will remove all account information, subscription data, and translation history permanently.
• Data Portability: If you wish to export your account information, please contact us.
• Stop using the service at any time
• Clear your browser's local storage to remove preferences
• Contact us with privacy concerns

Children's Privacy

Our service is not directed to children under 13 years of age. We do not knowingly collect information from children under 13.

International Data Transfers

Our service is hosted globally through Vercel's edge network. Your data may be processed in various locations, but it is never stored permanently.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this policy.

GDPR Compliance

For users in the European Union:

• Legal Basis: We process data based on legitimate interests (service operation and security)
• Data Minimization: We collect only what is necessary for rate limiting
• Right to Erasure: Your IP address is automatically deleted after 24 hours
• Data Portability: Not applicable as we don't store personal data

Contact Us

If you have questions about this Privacy Policy, please contact us:

• Twitter / X: @orakko_135
• Email: rktechuk.238@gmail.com