Privacy & your data
Your content is yours. Here’s where it lives, who can see it, and how to remove it.
On this page
Where is my content stored, and is it used to train AI?
Documents, translations, glossaries, and styleguides are stored in Transept’s database, hosted in the EU (Hetzner, Germany). Block text is sent to AI providers only for the actual translation request, and none of those providers train on your content — Transept uses the commercial API tiers that contractually exclude inputs and outputs from training, and runs no models of its own. The plain-English breakdown is on Security & Data.
How do I control or delete my data?
A consent banner appears once for every new visitor; analytics and marketing cookies stay off until you accept, and you can change the choice anytime via “Manage cookies.” Deleting your account (from settings or via support) removes all your content and is irreversible — export anything you want to keep first. For a copy of your data or a DPA, email [email protected]. Full legal text is in the Privacy Policy.
Which AI companies actually see my text?
Depending on the model you choose: Google (Gemini, via Vertex AI), Anthropic, OpenAI, Groq, or OpenRouter — and only the block being translated, only for that request. OpenRouter is a gateway whose underlying provider terms vary by model, so for work where the training opt-out matters, pin your translations to Anthropic, OpenAI, or Google. The always-current list is at /subprocessors.
Is my content ever processed outside the EU?
Your stored data — account, documents, translations, glossaries, styleguides — sits on EU infrastructure (Hetzner, Germany). The AI providers that generate the translations mostly process requests in the US, under Standard Contractual Clauses, adequacy decisions, or the EU–US Data Privacy Framework where applicable, and no copy remains with them beyond their short-term operational logging.
Can anyone at Transept read my documents?
Production access is restricted to a small number of named operators (currently the two co-founders), authenticated via SSH keys with audit logging, and customer content isn’t accessed in routine operations. To investigate a support request, Transept asks your permission and the specific document first; sensitive admin actions write permanent audit-log entries.
How long do you keep my data after I delete my account?
Deletion is irreversible and removes your content, but residual copies can persist in encrypted backups for up to 30 days before being overwritten. Billing records are kept for at least 7 years to meet tax and accounting obligations — those hold transaction metadata only (amount, date, plan), never your translation content.
Is Transept SOC 2 or ISO 27001 certified?
Not yet, and not certified. Transept follows SOC 2-aligned practices for access control, encryption, change management, and incident response but hasn’t undergone a Type 1 or Type 2 audit, isn’t ISO 27001 certified, and isn’t a HIPAA-compliant platform. It does comply with GDPR and UK GDPR — EU residency for stored content, the full set of data-subject rights, 72-hour breach notification, and a DPA on request — and with CCPA/CPRA; the full breakdown is on Security & Data.
Still stuck? Ask Literess in the app, or write to [email protected].