Quyền riêng tư

This notice explains what happens to the documents and personal details you give us when you order a translation. It applies to this website and the service behind it.

• Your account: email address, name, the language you prefer to read the site in, and optionally a phone number, company and country.
• Your documents: the file you upload, the text extracted from it, the translation produced from that text, and the finished document.
• Your orders: languages, page and word counts, price, and payment status.
• A record of significant actions — signing in, uploading, ordering, approving — with the time, the IP address it came from, and the browser reported.

Documents are stored in private object storage that is never served publicly. A file can only be downloaded through this site, by the account that owns it, using a link that is valid for a few minutes and tied to one file and one person. Account and order records are held in a managed PostgreSQL database. Both are hosted in the United States.

The translator assigned to your order, and administrators of this office. No one else. Translators see only the orders assigned to them. Attempting to reach another customer’s document returns “not found” rather than a refusal, so document identifiers cannot be probed.

• Payment is handled by Stripe. Card details are entered on Stripe’s own pages and never reach our servers. We keep the payment reference and its status.
• Email — confirmation links, sign-in codes and order updates — is delivered by Resend.
• Preparing the draft translation involves a language service provider that processes the extracted text. The text of your document is sent to that provider for this purpose.
• Hosting and infrastructure: Vercel, Supabase and Cloudflare.

We do not sell your data, and we do not use it for advertising.

Documents and orders are kept while your account exists, so you can download a finished translation again later. Ask us to delete an order or your account and we will remove the stored files and the record of the order. Entries in the action log are kept, because they are what lets us investigate a security question later; they identify an account, not the contents of a document.

• Signing in requires a code sent to your email address as well as your password.
• Passwords are stored hashed with bcrypt, never in a readable form.
• Email links are single-use, expire, and are stored only as a hash.
• Connections to the site and to the database are encrypted.
• Uploads are checked by extension and by file signature before being stored.

No system is beyond reach. What we can promise is that these measures are in place and that we will tell you if we learn your documents have been exposed.

You can see and correct your details from your profile page, download your finished translations, and ask us to delete your account and its documents. Depending on where you live you may have further rights over your data, including a copy of it and a complaint to a supervisory authority.

Write to us about anything in this notice, including a request to delete your data, and we will respond.