Privacy Policy

1. Introduction

Unfolda (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data when you use the Unfolda translation service.

By using the Service you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Service.

2. Information We Collect

We collect the following categories of information:

• Account information: Your Google account email address and display name, obtained via Google OAuth when you sign in.
• Uploaded content: EPUB files you upload for translation. These are stored temporarily for processing and delivery.
• Job metadata: Configuration choices you make (target language, translation mode, quality tier), word counts, submission timestamps, and job status.
• Usage data: Server-side logs including request timestamps, IP addresses, and error events, retained for operational security purposes.

We do not collect payment card information directly. We do not use advertising SDKs, behavioural tracking pixels, or third-party analytics services.

3. How We Use Your Information

We use the information we collect to:

• Authenticate you and manage your account.
• Process your translation requests using AI language models.
• Deliver translated output files to you.
• Calculate and deduct credits for completed jobs.
• Monitor service health, investigate errors, and prevent abuse.
• Communicate with you about your account or the Service when necessary.

We do not use your content to train AI models. Your uploaded files are used solely for the translation job you submit.

4. Data Retention

Uploaded and translated files are automatically deleted 30 days after submission. This window is defined by the RETENTION_WINDOW_DAYS configuration parameter. Files cannot be recovered after deletion.

Account data (email, credit balance, job history metadata) is retained for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us.

Server logs are retained for up to 90 days for security and operational purposes.

5. Third-Party Services

To provide the Service we share data with the following third-party processors:

• Google LLC (Google OAuth): Used for authentication. Google processes your account information in accordance with Google’s Privacy Policy.
• Anthropic PBC (Claude API): The text content of your uploaded EPUB is sent to Anthropic’s API for translation processing. Anthropic processes this data as a sub-processor under their API terms. We do not share your personal account information with Anthropic.

We do not share your data with any other third parties, advertisers, or data brokers.

6. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (TLS), access controls, and secure storage. However, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security.

In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your account and all associated personal data.
• Portability: Request your data in a portable format.
• Objection: Object to certain types of processing.

To exercise any of these rights, please contact us through the support channel in your account settings. We will respond within 30 days.

8. No Selling of User Data

We do not sell, rent, or otherwise transfer your personal data to third parties for commercial or marketing purposes. Your data is used exclusively to provide the translation service you requested.

9. Cookies and Local Storage

The Service uses a strictly necessary session cookie to maintain your authenticated session after you sign in via Google OAuth. This cookie is essential for the Service to function and does not require consent under ePrivacy rules for strictly necessary cookies.

We also use browser localStorage to store your UI preferences (such as cookie consent acknowledgement). No personal data is stored in localStorage.

We do not use tracking cookies, advertising cookies, or any third-party cookie scripts.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the “Last updated” date at the top of this page. Your continued use of the Service after changes are posted constitutes acceptance of the revised Policy.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through the support channel listed in your account settings.