1. Introduction
Translatable (Translatable, operated at translatable.online) is a Canadian marketplace that connects clients who need certified translations with verified professional translators. We are committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights. This is placeholder text prepared for review by legal counsel before launch.
2. Information We Collect
2.1 Account information
- Name, email address, and password (stored only as a secure hash — never in plain text)
- Translators: professional credentials, certification files, language pairs, profile photo, Stripe Connect account identifiers and onboarding status
- Clients: billing-related identifiers; payment card data is collected and processed by Stripe, not stored on our servers
2.2 Job and document information
- Documents uploaded for translation, stored securely and retained for 6 months after job completion unless archived sooner
- Job details, instructions, briefing information, and delivery preferences
- Translation drafts, revision history, and delivered translations
2.3 Payment information
- Payments are processed by Stripe — we do not store full payment card numbers
- We store transaction amounts, dates, escrow status, and payout records
2.4 Communications
- Messages sent through the platform messaging system (subject to content moderation)
- Email correspondence with our support team
2.5 Technical information
- IP address, browser type, device information, and session data
- Usage data, security logs, and audit records for fraud prevention and compliance
3. How We Use Your Information
We use personal information to:
- Provide and operate the translation marketplace
- Verify translator credentials and maintain platform trust
- Process payments, hold funds in escrow, and disburse translator payouts
- Send transactional notifications (job updates, delivery, payment status)
- Comply with legal, tax, and regulatory obligations
- Improve platform security, reliability, and user experience
We do not sell your personal information to third parties for marketing purposes.
4. Information Sharing
We share information only as needed to operate the service, with contractual safeguards where applicable:
- Stripe (stripe.com) — payment processing and Connect payouts. Receives: email, payment method data, payout and account information. Location: United States. Policy: stripe.com/privacy
- Brevo (brevo.com) — transactional email delivery. Receives: email address and message content. Location: European Union / United States (per Brevo processing). Policy: brevo.com/legal/privacypolicy
- Google Cloud Document AI (cloud.google.com) — OCR and document structure extraction. Receives: uploaded document content. Location: United States (processor region configurable). Policy: cloud.google.com/terms/cloud-privacy-notice
- DeepL (deepl.com) — primary AI translation assistance. Receives: document text submitted for translation. Location: European Union. Policy: deepl.com/privacy
- OpenAI (openai.com) — fallback AI translation for languages not supported by DeepL. Receives: document text. Location: United States. Policy: openai.com/privacy
Document processing note: Documents submitted for translation may be processed by AI services to assist translators. A human translator reviews, edits, and certifies all delivered translations. Under our service agreements, document content is not used to train third-party AI models for unrelated purposes.
5. Data Storage and Security
- Primary application data is hosted in Canada (Ontario region) where practicable
- Encryption in transit (TLS) and encryption at rest for stored documents and databases
- Role-based access controls and administrative audit logging
- Periodic security reviews and vulnerability remediation
- Breach notification procedures consistent with PIPEDA — we will notify affected individuals and the Privacy Commissioner of Canada when required by law
6. Data Retention
- Account data: retained while your account is active, plus 30 days after a deletion request before anonymisation where permitted
- Job documents: 6 months from job completion, then archived per our retention schedule
- Financial records: 7 years (Canadian tax and accounting requirements)
- Audit logs: 3 years for security and dispute investigations
7. Your Rights Under PIPEDA
Subject to applicable law, you may:
- Request access to personal information we hold about you
- Request correction of inaccurate or incomplete information
- Withdraw consent where processing is consent-based (subject to legal obligations)
- Request deletion where retention is not required by law or contract
To exercise these rights, contact privacy@translatable.online or support@translatable.online. We will respond within timelines required by PIPEDA.
9. Children's Privacy
The platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact us to request deletion.
10. Changes to This Policy
- We will notify registered users by email of material changes before they take effect
- Continued use after the effective date constitutes acceptance of the updated policy
- Previous versions are available on request
11. Contact
Privacy inquiries: privacy@translatable.online
General support: support@translatable.online
Mailing address: [Business address — Ontario, Canada] (to be confirmed before launch)
If you have unresolved concerns, you may contact the Office of the Privacy Commissioner of Canada: priv.gc.ca · 1-800-282-1376