1. Who we are
This policy applies to the website continuous-translations.com, to the data explorer at data.continuous-translations.com and to the Continuous Translations service (the editor, API, CLI and documentation). The controller is Continuous Translations. You can reach us at privacy@continuous-translations.com.
2. This website and the data explorer
This section covers continuous-translations.com and data.continuous-translations.com. Both work the same way for the points below.
Server logs
When you visit the site, our web server processes your IP address, the requested page, the time, and your browser's user agent. We use this to deliver the site, keep it secure and fix errors. The legal basis is our legitimate interest in running a secure website.
Analytics
We use Google Analytics to understand how the sites are used. It only loads after you accept in the cookie banner, and IP addresses are anonymised. If you decline, no analytics script is loaded. We store your choice in your browser (local storage key ct_cookie_consent), separately for each of the two sites. You can change it at any time with the Cookie settings link in the footer of the data explorer, or by clearing it in your browser to be asked again. The legal basis is your consent. Google may process this data on servers outside the EU, under the safeguards Google describes in its own terms.
Fonts
Both sites load the Inter font from Google Fonts, which means your browser contacts Google and your IP address is transmitted to Google when a page loads.
Links
The sites link to our documentation and to the editor, which are part of the service and covered by section 3.
3. The service
What we process
| Data | Why |
|---|---|
| Account details: name, email address, password (stored as a hash), language setting, and if you turn on two-factor authentication, its secret (encrypted) and your recovery codes (stored as hashes) | To create and secure your account and sign you in |
| Organisation, team, role and project membership | To control who can see and change what |
| Your content: source strings, translations, notes, links, comments, glossary, translation memory, file imports and their history | To provide the service you asked for |
| API keys and access tokens (stored so they can be checked, shown only once when created) | To let the CLI, integrations and AI agents act on your behalf |
| Audit log: which user did what, and when, in your organisation, including sign-ins and the IP address and browser (user agent) of the request | So owners and admins can see changes, and for security |
| Repository connection details when you connect GitHub or GitLab (account, repository, access token) | To create projects from repositories, open setup pull requests and merge branches |
| Emails we send you, such as invitations and review notifications | To tell you about work that needs your attention |
| Technical data: IP address, request logs and rate-limit counters | To run, secure and protect the API from abuse |
The legal basis is the performance of our agreement with you (or your organisation), and our legitimate interest in security and abuse prevention.
Content you add
If you add other people's personal data to your projects (for example names inside strings), you are the controller of that data and we act as your processor. We process it only to provide the service. A data processing agreement is available on request at privacy@continuous-translations.com.
Payments
No payment provider is connected at this time and we do not process payment details. This section will be updated before paid plans start.
4. Who we share data with
We do not sell personal data. We use the following service providers, only as far as needed to run the service. Those that process personal data on our behalf do so under a data processing agreement. A current list is available on request.
- A hosting provider for the servers the service runs on, and an email delivery service for the emails the service sends
- Google (Analytics and Fonts), as described in section 2
- GitHub or GitLab, only if you connect them. They receive the requests needed to read your repository and open pull requests, under their own privacy policies.
If you use an AI agent with our MCP endpoint, the agent and its provider receive the data the agent requests with your token. That is your choice and happens under your agent provider's terms. Use API keys with the narrowest scopes the agent needs.
We may disclose data when the law requires it.
5. How long we keep data
We keep account and project data while your account exists. After you delete your account or project, or ask us to delete your data, we remove it, except where the law requires us to keep it. Backups are kept for a limited time and are then overwritten. Server logs are kept for a limited time and deleted automatically. Audit log entries are kept as long as the organisation exists, unless its owners or admins choose a shorter retention period, after which entries are deleted automatically.
6. Your rights
Under the GDPR you have the right to access, correct, delete and export your personal data, to restrict or object to processing, and to withdraw consent at any time (withdrawing does not affect earlier processing). You can download a copy of your data yourself under Account settings, and delete your account there too: that removes your sessions, keys and access, and erases the IP addresses in your audit log entries. For anything else, email privacy@continuous-translations.com and we will respond within one month. You can also complain to your national data protection authority, in the Netherlands the Autoriteit Persoonsgegevens.
7. Security
We protect data with measures such as encrypted connections, hashed passwords, role-based access, scoped API keys and rate limiting. No system is perfectly secure. If a breach affects your personal data we will notify you and the authorities as the law requires.
8. Changes
We may update this policy. The date at the top shows when it last changed. For material changes we will tell account holders by email.