Privacy Policy
Last updated: 2026-04-10
1. Data We Collect
When you use Novel in Translation we collect the following information:
- Email address — used for authentication and account management.
- Uploaded documents — the text files you upload for translation are stored securely and processed on your behalf.
- Usage data — anonymised interaction data (e.g., features used, session duration) to help us improve the service.
We do not store payment card details — payment processing is handled by Stripe (see Section 3 below).
2. How We Use Your Data
- Authentication — to create and maintain your account securely.
- Translation processing — your documents are sent to OpenAI's API to perform the translations you request.
- Service improvement — aggregated and anonymised usage data helps us identify bugs and improve features.
We do not sell your personal data or use it for advertising purposes.
3. Third-Party Data Processors
We work with the following sub-processors who handle personal data on our behalf. All sub-processors are contractually bound to process data only as instructed and to maintain appropriate security standards. Each sub-processor has a Data Processing Agreement (DPA) or equivalent terms governing their use of your data. Where sub-processors are located outside the European Economic Area (EEA), data transfers are protected by Standard Contractual Clauses (SCCs) or other appropriate safeguards as recognised under applicable data protection law.
OpenAI (translation processing)
Uploaded document content is transmitted to OpenAI's API to perform the translation you request. Per OpenAI's Data Processing Agreement (DPA), OpenAI does not retain API inputs or outputs and does not use API data to train its models. Data is processed in transit only.
Stripe (payment processing)
Subscription and payment data is handled by Stripe. Novel in Translation does not store payment card details. Stripe processes billing data under their own privacy policy and DPA.
Resend (transactional email)
Your email address is shared with Resend to deliver authentication codes, account confirmations, and service notifications. Resend's data processing terms are incorporated in their Terms of Service.
Railway (infrastructure hosting)
All application data — including your account information, uploaded documents, and translation outputs — is stored on Railway infrastructure in the US-East region.
4. Data Retention
- Account data — retained until you request account deletion.
- Documents and translations — retained while your account is active and permanently hard-deleted when you delete your account. This is a synchronous hard delete — no async cleanup, no deferred erasure.
- Usage logs — retained for up to 12 months in aggregated form.
- Stripe webhook event records — retained with personal identifiers removed for audit and idempotency purposes after account deletion.
5. Your Rights
Under GDPR and applicable data protection law you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete data.
- Deletion — request erasure of your personal data ("right to be forgotten").
- Portability — receive your data in a structured, commonly used, machine-readable format.
- Objection — object to certain types of processing, including direct marketing.
To exercise any of these rights, contact us at info@novelintranslation.com. We will respond within 30 days.
6. Contact
For privacy-related questions or requests, email us at info@novelintranslation.com.