Privacy Policy

LangTo is operated by Felix, an individual developer, who is responsible for your personal data. Write to contact@langto.ai about anything in this policy.

• Account. Your email address; if you sign in with Google, also the name and profile picture Google shares. Your interface language, the language you last translated into, your email preferences, and the link or campaign that first brought you to LangTo.
• Documents. The PDFs you upload and their translations, the text read from them during translation, the edits you make online, and the notes left for you to check.
• Pages and payments. Your page balance and its history, your plan, and a record of each payment: amount, date, status and Paddle's references. Paddle collects your card or other payment details; we never receive them.
• Feedback and messages. What you tell us about a translation on its result page, and the emails you send us.
• Usage. What you do in LangTo, such as the languages you choose, how many pages you translate and how each translation ended; and on our public pages, which pages are visited and which link led there.
• Device and connection. Your IP address, browser, operating system and device type, as our servers and providers receive them when you connect.

We use this information to:

• translate, review and deliver your documents, and let you edit and download them;
• run your account, page balance, plan and payments;
• email you sign-in codes, and tell you when a translation is ready, has stopped or has failed;
• answer your messages and fix problems with translations;
• test changes to LangTo before we release them;
• keep LangTo secure and prevent abuse and fraud;
• learn how people find and use LangTo, so we can improve it;
• meet legal obligations, such as keeping tax records.

We send marketing emails only if you opt in. We don't sell your personal information.

Where the law requires a legal basis for processing personal data, as the GDPR does, ours are:

• Contract: translating your documents, running your account and taking payments.
• Legitimate interests: fixing problems, testing changes, keeping LangTo secure, preventing fraud and learning how LangTo is used.
• Legal obligation: keeping tax and accounting records.
• Consent: marketing emails, if you opt in.

Your documents and their translations are not used to train AI models.

• When you choose a file, it stays in your browser while you set up the translation. It is uploaded when you start.
• Files travel to our servers over an encrypted connection (TLS) and are stored with Cloudflare.
• To translate and review a document, we send its pages, as images and text, to the AI model providers listed below. One provider's model translates it, and a different provider's model reviews it.
• We open a document ourselves only when we need to: when a translation stops and needs one of us, when you write to us about it, or to look into an error.
• We keep copies of some documents, with their translations and the record of how they were translated, to test changes to LangTo before we release them. These copies stay on our own computers. They are never published or shared, and they are not used to train AI models. Write to us and we will delete any copies of your documents.
• Your files are deleted from LangTo 30 days after upload: the original, the translation, its page images and the record of the translation. Delete a document on the Files page to remove them sooner. Deleted files can't be recovered.
• After the files are deleted, the document's entry stays in your Files list, with its name, page count, languages and status, until you delete it or your account.

These providers process data for us to run LangTo. Each receives what it needs for the job described.

Railway

Runs our servers, our translation workers and our database. Your documents are processed on its servers while they are translated, and the database holds your account, your page history, and your edits and notes.

Cloudflare

Stores your files and translations. On the email sign-in form, Cloudflare Turnstile checks that a person, not a bot, is signing in; it receives your IP address and browser information.

Vercel

Hosts the website and handles sign-in. On our public pages, Vercel Web Analytics counts visits without cookies, and Speed Insights measures how fast pages load. They receive your IP address, browser information and the page visited.

OpenAI

Translates and reviews documents with its AI models, through a ChatGPT subscription and through the OpenAI API. It receives the pages of the document being translated, as images and text.

Anthropic

Translates and reviews documents with its Claude models, through a Claude subscription. It receives the pages of the document being translated, as images and text.

xAI

Translates and reviews documents with its Grok models, through the xAI API. It receives the pages of the document being translated, as images and text.

Paddle

Our merchant of record. It runs the checkout, takes payments, calculates tax, sends receipts and handles refund requests, under its own privacy policy. It receives your email address, payment details and billing country. In the signed-in app we load Paddle's checkout script, Paddle.js, which can set Paddle's own cookies and send Paddle data about your visit.

Resend

Sends our emails: sign-in codes and messages about your translations. It receives your email address and the content of each email, such as a file name and page count.

Google

Sign-in with Google, if you use it. Google shares your name, email address and profile picture with us.

DingTalk

Sends us alerts when something fails. An alert can include a document's reference number, its page count and languages, and the part of an email address after the @ (such as gmail.com). It doesn't include full email addresses, file names or document content.

We don't share your personal information with anyone else unless the law requires it.

• Sign-in. A cookie keeps you signed in. LangTo doesn't work without it.
• Language. A cookie can remember the interface language you chose.
• Browser storage. Your browser stores the file you are setting up, the languages you used recently, the link that first brought you to LangTo and a few display settings.
• Payment. In the signed-in app, Paddle.js can set Paddle's own cookies, as described above.

We don't use advertising cookies. You can block or delete cookies in your browser, but then you can't stay signed in.

• Your documents (originals, translations, page images and the record of each translation): 30 days after upload, or until you delete the document or your account, if that comes first.
• Copies kept for testing: until we no longer need them for testing, or until you ask us to delete them.
• Entries in your Files list (file name, page count, languages, status): until you delete the entry or your account.
• Account, page history and feedback: until you delete your account.
• Payment records: as long as tax and accounting law requires, including after you delete your account.
• Technical logs: for a limited period set by our hosting provider, then deleted automatically.
• At the AI model providers: under their own terms, which can let them keep requests for a limited time to detect abuse.

Depending on where you live, you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct it;
• delete it (you can also delete documents and your whole account yourself in the app);
• give it to you in a portable format;
• limit or stop some processing. You can also withdraw any consent you gave.

You can also complain to the data protection authority where you live.

To use any of these rights, write to contact@langto.ai. We reply within one month, and using your rights doesn't change how we treat you.

Our servers and database run in the United States. Our providers process data in the United States and other countries, so your data may be processed outside the country where you live.

Connections to LangTo are encrypted (TLS). The AI translator works only through our own translation tools: it can't browse the web, run programs or reach our credentials. No system is completely secure, so we can't promise that your data will never be exposed.

LangTo is not meant for anyone under 16. We don't knowingly collect personal data from children under 16, and we delete it if we learn that we have.

If we change this policy in a way that matters to you, we email you and post the new version here at least 14 days before it takes effect.

This policy is written in English. Versions in other languages are translations; if they differ, the English version applies.

Questions about this policy or your data: contact@langto.ai.