Privacy Policy

1. Information We Collect

We collect the following categories of information:

a. Account Information

When you create an account through our authentication provider (Clerk), we collect your name and email address. This information is necessary to create and maintain your account.

b. Translator Profile Information

To generate certification statements accepted for official submissions, we collect your translator profile information, which may include your full name, address, and professional credentials. This information is used in the certification statements that accompany your translated documents.

c. Documents

We collect and process documents that you upload for translation. These documents may contain personal information about you or third parties. You are responsible for ensuring you have the right to upload and process these documents.

d. Usage Data

We collect information about how you use the Service, including the number of pages translated, features used, and general interaction patterns. This data helps us improve the Service and manage your subscription.

e. Payment Information

Payment processing is handled by Stripe. We do not store your credit card numbers, bank account numbers, or other sensitive financial information on our servers. Stripe may collect and store payment information in accordance with its own privacy policy. We receive only limited information from Stripe, such as the last four digits of your card, card type, and billing address, for transaction records and customer support.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Process translations: Documents are sent to third-party AI services for AI-assisted translation processing. This is the core function of the Service.
• Maintain your account and subscription: We use your account information to manage your profile, track usage, and process subscription billing.
• Improve our service: We use aggregated, anonymized usage data to understand how the Service is used, identify areas for improvement, and develop new features.
• Send transactional notifications: We may send you emails related to your account, subscription, translation status, or important service updates. These are operational communications, not marketing.
• Comply with legal obligations: We may use your information as necessary to comply with applicable laws, regulations, or legal processes.

3. Document Processing Disclosure

Given the sensitive nature of the documents processed through our Service, we want to be fully transparent about how your documents are processed:

• AI Processing: Documents you upload are sent to third-party AI services for AI-assisted translation. The AI provider processes document content to generate draft translations in accordance with its own terms of service and privacy policy.
• Temporary Storage: Documents are stored temporarily in encrypted cloud storage provided by Supabase, hosted in the United States. Documents are encrypted both in transit (TLS) and at rest.
• Automatic Deletion: Documents are automatically and permanently deleted from our systems after your configured retention period expires. The default retention period is 90 days. You may configure a shorter retention period in your account settings.
• Manual Deletion: You may delete your documents at any time before the retention period expires through your account dashboard. Deletion is permanent and cannot be undone.

4. Third-Party Services

PuenteLex uses the following third-party services to operate. Each service has its own privacy policy governing its handling of your data:

5. Data Retention

We retain different types of data for different periods:

• Documents and translations: Retained for your configured retention period (default: 90 days), then automatically and permanently deleted.
• Account data: Retained for as long as your account is active. When you delete your account, your personal information is removed within 30 days, except as required for legal or compliance purposes.
• Audit logs: Transaction and access logs are retained for compliance and security purposes. These logs may contain metadata (e.g., timestamps, page counts) but do not contain the content of your documents.
• Aggregated data: We may retain anonymized, aggregated usage statistics indefinitely for analytics and service improvement purposes.

6. Data Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security).
• Encryption at rest: Documents and data stored in our database and file storage are encrypted at rest.
• Ephemeral storage architecture: Our system is designed around temporary document storage with automatic deletion, minimizing the window of data exposure.
• Access controls: Access to user data is restricted to authorized personnel and systems on a need-to-know basis.
• Audit logging: We maintain logs of data access and system operations for security monitoring and compliance.

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Your Rights

You have the following rights regarding your data:

• Access your data: You may request a copy of the personal information we hold about you by contacting us at chris@puentelex.com.
• Delete your documents: You may delete any of your uploaded documents and translations at any time through your account dashboard.
• Delete your account: You may request deletion of your account and associated personal data by contacting us. Account deletion is processed within 30 days.
• Export your translations: You may download your translations in PDF format at any time through your account dashboard before they are deleted.
• Correct your information: You may update your account and translator profile information at any time through your account settings.

To exercise any of these rights, contact us at chris@puentelex.com. We will respond to your request within 30 days.

8. Children's Privacy

PuenteLex is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly. If you believe that a child under 13 has provided us with personal information, please contact us at chris@puentelex.com.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.
• Right to opt out of sale: We do not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising.

To exercise your California privacy rights, contact us at chris@puentelex.com with the subject line "CCPA Request." We will verify your identity before processing your request and respond within 45 days.

10. International Users

PuenteLex is operated from the United States, and your data is stored and processed in the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using the Service, you consent to the transfer of your information to the United States and the processing of your information in accordance with this Privacy Policy.

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws, you may have additional rights. Please contact us to discuss how we can accommodate your data protection requirements.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on the Service and updating the "Last updated" date.

For significant changes, we may also provide additional notice via email. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For privacy-specific inquiries, please include "Privacy" in the subject line of your email. We will respond to all privacy inquiries within 30 days.