This Privacy Policy explains how Vojtěch Tomášek ("we", "us") processes personal data when you use Phrasey at https://Phrasey.it. We act as the data controller for personal data of users in the EU/EEA.
1. Data We Process
- Account data: email, name (if provided), authentication identifiers.
- Content data: texts/files you upload for translation (e.g., JSON).
- Billing data: handled by Stripe; we do not store card numbers.
- Technical data: IP address, device information, logs, cookies.
2. Purposes & Legal Bases (GDPR Art. 6)
- Provide the Service (account, translations, support) — Art. 6(1)(b) contract necessity.
- Payments & Billing — Art. 6(1)(c) legal obligation and Art. 6(1)(b).
- Security & Abuse Prevention — Art. 6(1)(f) legitimate interests.
- Analytics & Improvement — Art. 6(1)(a) consent (where required).
3. Processors & Recipients
We share data with trusted processors solely to provide the Service:
- Stripe (payments and invoicing)
- AI API providers (e.g., OpenAI) to process translation prompts and files
- Hosting and infrastructure (e.g., Vercel, Firebase)
- Error monitoring / logs (e.g., Sentry, Logtail) — if used
4. International Transfers
Where data is transferred outside the EU/EEA, we use appropriate safeguards (e.g., Standard Contractual Clauses) and conduct transfer risk assessments as required.
5. Retention
- Billing/invoice data: 10 years or as required by law.
- Uploaded content: deleted on request or no later than 30 days after upload by default (configurable in your account if available).
- Technical logs: up to 12 months.
6. Security
We apply technical and organizational measures appropriate to risk, including encryption in transit, access controls, and least‑privilege policies. No method of transmission is 100% secure, but we strive to protect your data.
7. Your Rights (GDPR)
- Access, rectification, erasure, restriction, portability, and objection.
- You can withdraw consent at any time where processing relies on consent (e.g., analytics cookies).
- To exercise rights, email support@translayte.it.
- You may lodge a complaint with your supervisory authority (in CZ: ÚOOÚ).
8. Children
The Service is not directed to children under 16. We do not knowingly process children’s data.
9. Cookies
We use essential, functional, and analytics cookies. See our Cookie Policy for details and consent options.
10. Contact
Data Controller: Vojtěch Tomášek, 17.listopadu 7, Zábřeh. Email: support@translayte.it.