1. Who we are
Metaphras.ai is a trade name of Translatorus LLC, a company registered in the United States, with its registered office at:
Translatorus LLC
5830 East 2nd Street
Casper, Wyoming 82609
United States of America
For any privacy-related question or request, contact hello@metaphras.ai.
2. What this policy covers
This Privacy Policy explains what personal data we collect when you use metaphras.ai and our related services, how we use it, who we share it with, and the rights you have over it.
3. Data we collect
We collect the following categories of personal data:
3.1 Account data
When you create an account, we collect your email address, a hashed password (if you sign up with email), and your authentication provider identifier (if you sign in with Google or GitHub). We also store your account creation date and the date of your last sign-in.
3.2 Document content
When you upload a document for translation, we temporarily store the original file and the extracted text content on our servers in order to perform translation and to make the project available to you in your workspace. You can delete any project at any time, which permanently removes the file and associated data.
3.3 Usage data
We log basic technical information about your interactions with the service: pages visited, API endpoints called, timestamps, IP address (for security and abuse prevention), and browser/device characteristics. This data is used to operate, secure and improve the service.
3.4 Billing data
When you purchase credits, payment processing is handled by Stripe. We do not store your card details. Stripe sends us a transaction reference and the amount charged so we can credit your account.
3.5 Cookies and similar technologies
We use a small number of cookies and similar storage technologies:
- Essential cookies (always on): authentication tokens, your theme preference, and your sidebar/layout state. Without these, the service cannot function.
- Analytics (subject to consent in regulated regions): Google Analytics via Google Tag Manager, used to measure traffic and feature usage in aggregate. IP addresses are anonymized.
You can change your consent at any time by clicking the consent banner (it re-appears if you clear your browser data).
4. How we use your data
We process your personal data for the following purposes:
- To provide the service (translate documents, store your projects, render the workspace).
- To authenticate you and secure your account.
- To process payments and credit your account.
- To respond to your support requests.
- To improve the service by analyzing aggregate usage patterns.
- To comply with our legal obligations (tax records, fraud prevention).
5. Legal basis (EU / UK users)
If you are in the European Union, the United Kingdom, or another GDPR-aligned jurisdiction, we rely on the following legal bases:
- Performance of a contract: account, document processing, billing.
- Legitimate interest: security logs, abuse prevention, aggregate analytics.
- Consent: optional cookies (analytics) — your consent is captured via the banner.
- Legal obligation: tax records, response to lawful authority requests.
6. AI translation provider
To perform translations and OCR, we send the content of your document to Google's Gemini and Vision APIs as a data processor. Google processes the data on our behalf and does not use your content to train its general models, per our service-level agreement with Google Cloud.
7. Sharing your data
We do not sell your personal data. We share data with the following categories of processors, only as needed to operate the service:
- Supabase (database hosting, EU region — France).
- Hostinger (application server, EU region).
- Google Cloud (translation and OCR APIs).
- Stripe (payment processing).
- Google Analytics (aggregate usage, only with consent in regulated regions).
We may also disclose data if required by a valid legal request or to protect our rights, our users, or the public.
8. Data retention
We retain your data for as long as your account is active. When you delete a project, the file and its content are removed from our systems within 30 days. When you delete your account, all personal data is erased within 60 days, except where retention is required by law (e.g. accounting records for 7 years).
9. International transfers
Translatorus LLC is established in the United States. Personal data may therefore be transferred to and processed in the US. For transfers from the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses with our sub-processors and apply additional safeguards as required.
10. Your rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data ("right to be forgotten").
- Restriction — ask us to suspend processing while a dispute is resolved.
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — at any time for processing based on consent.
To exercise any of these rights, email hello@metaphras.ai. We respond within 30 days.
If you are in the European Union, you also have the right to lodge a complaint with your local data protection authority.
11. California residents (CCPA / CPRA)
If you reside in California, you have additional rights:
- The right to know what categories of personal information we collect, use, disclose and sell.
- The right to delete personal information collected from you.
- The right to opt out of the "sale" or "sharing" of your personal information. We do not sell or share personal information as defined by the CPRA.
- The right not to be discriminated against for exercising your privacy rights.
To exercise these rights, contact hello@metaphras.ai.
12. Children
Metaphras.ai is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
13. Security
We protect your data with industry-standard measures: TLS encryption in transit, encryption at rest for documents and credentials, role-based access controls, and row-level security in our database so that each user can only access their own projects.
14. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email to active users or via a notice on the site. The "Last updated" date at the top of this page is always current.
15. Contact
For any question about this Privacy Policy or our data practices:
hello@metaphras.ai