Privacy Policy

Our Commitment to Privacy

At PhraseFlow, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our translation management platform.

Information We Collect

Account Information

When you create an account, we collect:

• Name and email address
• Password (encrypted and never stored in plain text)
• Company name (optional)

Translation Data

To provide our service, we store:

• Translation keys and content you create
• Project configurations and settings
• Version history and change logs
• API usage statistics

Usage Information

We automatically collect:

• IP addresses and device information
• Browser type and operating system
• Pages visited and features used
• Timestamps and usage patterns

How We Use Your Information

We use your information to:

• Provide and maintain the PhraseFlow service
• Process translations using AI when requested
• Send important service updates and notifications
• Improve and optimize our platform
• Detect and prevent fraud or abuse
• Comply with legal obligations

Data Security

We implement industry-standard security measures:

• End-to-end encryption for data in transit (TLS/SSL)
• Encrypted storage for sensitive data at rest (AES-256)
• Regular security audits and penetration testing
• SOC 2 Type II compliance (in progress)
• Two-factor authentication (2FA) available

Third-Party Services

We use trusted third-party services for:

• OpenAI: AI-powered translations (when you enable this feature)
• PostgreSQL/Railway: Secure database hosting
• Vercel: Web application hosting
• Analytics: Anonymous usage analytics for service improvement

These services have their own privacy policies and we carefully vet all partners.

Your Rights (GDPR)

If you're in the European Union, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain types of data processing

To exercise these rights, contact us at privacy@phraseflow.com

Data Retention

We retain your data for as long as your account is active or as needed to provide services. If you delete your account, we'll remove your personal data within 30 days, except where we're required to retain it for legal compliance.

Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or sell your data to third parties.

Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes via email or through the platform.

Contact Us

If you have questions about this Privacy Policy or our data practices:

• Email: privacy@phraseflow.com
• Website: phraseflow.com