legal

Privacy Policy

What we collect, why, and the choices you have.

Last updated: 2 October 2026

1. Who we are

This Privacy Policy explains how Echo Lingua ("we", "us" or "our") collects, uses and shares personal information when you use the Echo Lingua application, the Echo Lingua HTTP API, and related services (together, the "Service").

Echo Lingua is operated as a sole trader, and is the data controller for the personal information described here. You can contact us about this policy, or ask for our postal address, at privacy@echo-lingua.com. This policy should be read together with our Terms of Service.

2. Information we collect

Account information. Your name, email address, password credentials, and the organisation you belong to.

Content you submit. The gettext .po catalogs and strings you upload for translation, any glossary terms, per-entry context, and the translated output ("Your Content").

Usage and billing records. Jobs you run, quality tiers, word counts and costs, API keys and the activity attributed to them, credit balance and top-ups, and invoices.

Payment information. Card and billing details, which are collected and processed by our payment provider (Stripe). We do not store full card numbers.

Technical data. IP address, device and browser information, and log data such as timestamps and error reports, collected when you use the Service.

3. How we use information

We use personal information to:

  • provide, operate and maintain the Service, including running translation jobs;
  • process payments, manage credit balances and issue invoices;
  • authenticate you, secure the Service, and prevent fraud and abuse;
  • provide support and respond to your requests;
  • send service and transactional messages (for example, job-completion and billing notices);
  • comply with legal obligations and enforce our Terms.

We do not sell Your Content or your personal information, and we do not use Your Content to train our own models — Echo Lingua translates using the third-party AI providers you select and does not operate its own translation models.

4. Your content and AI providers

To translate, Your Content is transmitted to the AI provider you select (currently Anthropic, OpenAI and Google Gemini). Each provider processes that content to return a translation, under its own terms and privacy commitments.

You choose the provider for each job. If Your Content contains personal or sensitive information, you are responsible for ensuring you have the right to submit it and to have it processed by the selected provider. See each provider’s privacy policy: Anthropic, OpenAI, and Google.

5. Sharing and subprocessors

We share personal information with service providers that help us run the Service, under contracts that require them to protect it. Our key subprocessors are:

  • Google / Firebase, for hosting, authentication, database and file storage;
  • Stripe, for payment processing and billing;
  • the AI providers you select (Anthropic, OpenAI, Google Gemini), for translation;
  • Cloudflare, for bot and abuse protection (Turnstile) on our public forms;
  • Resend, for transactional email.

We may also disclose information where required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition or sale of assets.

6. Data retention

We keep personal information for as long as your account is active and as needed to provide the Service, then for a limited period afterwards to meet legal, accounting and security obligations.

Your Content and translated output are retained so you can access and download your jobs. When you close your account, we delete Your Content and translated output within 30 days, except where we must keep limited records to meet legal, accounting or security obligations.

7. How we protect information

We use technical and organisational measures to protect personal information, including scoped and revocable API keys, signed webhook delivery, and organisation-level access boundaries. See our Security page for more detail. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International transfers

Your information may be processed in countries other than the one in which you live, including where our providers operate. Where we transfer personal information outside the UK or EEA, we rely on appropriate safeguards, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can exercise many of these directly in the app, or by contacting us.

To make a request, or if you have concerns about how we handle your information, contact us using the details below. You may also have the right to complain to your local data-protection authority.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children.

11. Cookies and analytics

We use cookies and similar technologies that are strictly necessary to sign you in and keep the Service working.

On our marketing site we use Google Analytics to understand how the site is used. By default it runs in a cookieless mode: no cookies are stored and only aggregated, non-identifying data is collected. If you accept via our cookie banner we enable analytics cookies for more accurate measurement; you can decline and it stays cookieless. Our public forms use Cloudflare Turnstile for bot protection, described in the section below.

12. Changes to this policy

We may update this policy from time to time. If we make a material change, we will provide reasonable notice, for example by email or in-app. The date below shows when it was last updated.

13. Anti-abuse and Cloudflare Turnstile

Our public forms (such as the contact form) are protected by Cloudflare Turnstile, which distinguishes humans from bots. Cloudflare processes limited technical data (for example your IP address and browser signals) for this purpose. Your use of Turnstile is subject to Cloudflare’s Turnstile Privacy Policy.

14. Contact

Privacy questions or requests? Talk to us, or email privacy@echo-lingua.com.