Privacy Policy

This Privacy Policy explains what information Babelly ("we," "us") collects, how we use it, and who we share it with when you use our translation service (the "Service").

1. Information we collect

Account information. When you sign in with Google or GitHub, our authentication provider (Supabase) receives your name, email address, and profile picture from that provider. We store this to identify your account and display your profile in the app.

Uploaded content. Files you upload for translation (and the text within them) are sent to our translation provider to generate results, and are used only to fulfil that request. We don't use your uploaded content to train any models.

Payment information. We never see or store your card details. Purchases are handled entirely by Paddle, our payment processor and merchant of record — see their own privacy policy for how they handle payment data.

Usage data. We keep a record of token balance changes (purchases, usage, refunds) so your balance is auditable, and basic site analytics (via Vercel Analytics) to understand how the Service is used.

Cookies. We use essential cookies for authentication sessions, and a cookie to track a small free translation allowance for signed-out visitors. We don't use third-party advertising cookies.

2. How we use this information

• To provide, operate, and maintain the Service
• To process translations and payments
• To communicate with you about your account or purchases
• To detect and prevent abuse of the token system
• To improve the Service based on aggregate usage patterns

3. Who we share information with

We share limited data with the following categories of service providers, only as needed to operate the Service:

• Supabase — authentication and database hosting
• DeepL — receives text content to perform translation
• Google / GitHub — OAuth sign-in providers
• Paddle — payment processing, billing, and receipts
• Vercel — hosting and basic analytics

We don't sell your personal information to anyone.

4. Data retention

We retain account and billing-history data for as long as your account is active, and as needed to comply with tax and accounting obligations. Uploaded file content is processed transiently and is not retained by us after a translation completes. You can request deletion of your account and associated data at any time (see Section 6).

5. Data security

We rely on Supabase's Row Level Security to ensure your account data (token balance, purchase history, transaction ledger) is only ever readable by you, and restrict privileged operations (like granting or deducting tokens) to trusted server-side code.

6. Your rights and choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. To exercise any of these, contact us at support@babelly.dev and we'll respond within a reasonable time.

7. Children's privacy

The Service isn't directed at children, and we don't knowingly collect personal information from anyone under 13 (or the relevant minimum age in your jurisdiction).

8. International users

Your information may be processed in countries other than your own, including wherever our service providers (Supabase, DeepL, Paddle, Vercel) operate their infrastructure.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

10. Contact

Questions about this policy? Reach us at support@babelly.dev.