Privacy Policy

1. Data we collect

Account data: email address, name, hashed password. Usage data: projects, translation keys, language preferences, and team activity. Technical data: IP address, browser user agent, error logs. Payment, analytics, and email delivery are handled by named subprocessors — see the Subprocessors section below.

2. How we use your data

To provide and improve the service, authenticate you, send transactional emails (password reset, OTP verification), and comply with legal obligations. We never sell your data.

3. Where your data lives

The dashboard runs on your side — as a desktop app or self-hosted with Docker — so your projects and translations stay on your own machine or server, and we have no access to them. What we do hold is your account: email address, name, hashed password and billing status, stored on our servers in the European Union and encrypted at rest.

4. Subprocessors

We share the minimum data necessary with the following subprocessors to run the service:

Stripe

Payment processing for paid subscriptions — Stripe Checkout and the billing portal. Stripe receives billing details needed to process your payment.

PostHog

Product analytics — helps us understand how the product is used. Only active if you opt in via the cookie banner; disabled by default.

Resend / SMTP

Transactional emails — account verification, password reset, one-time codes, and billing receipts.

5. Your rights

You can access, correct, export, or delete your data at any time from your account settings. For any other request, contact us at admin@elysera.net.

6. Cookies

We use a session cookie to keep you logged in and a preference cookie for your theme and language. With your consent, we also use an analytics cookie (PostHog) to understand product usage — see the cookie banner to accept, decline, or change your choice at any time. No advertising cookies.

7. Retention

Account data is kept as long as your account is active. After account deletion, data is wiped within 30 days — with one deliberate exception: a keyed cryptographic fingerprint of your email address is kept indefinitely, so that the one-month free trial cannot be claimed repeatedly by deleting and recreating an account. It is not reversible without a key we hold, it is never used to contact you or to rebuild a profile, and it is stored alone, with no name, no IP address and no usage data. Technical logs are retained for 90 days.

8. Changes

This policy may be updated. The latest version is always available on this page with the last-updated date shown above.