Privacy Policy

The data controller responsible for processing your data on this website is:

Balane GmbH
Balanstraße 84
81541 München
Germany

E-Mail: contact@balane.tech

Hosting

Our website is hosted on Railway with servers located in Amsterdam, Netherlands. Railway is a US-based provider. Data may be transferred to the United States.

Database

Your data is stored in a Supabase database located in Frankfurt, Germany. Supabase is also a US-based provider.

AI Translation Services

For translations, we use various AI services:

• OpenAI (GPT models) – USA
• Anthropic (Claude) – USA
• DeepSeek – China
• Mistral AI (planned for the future) – France

The texts you upload will be transmitted to these services for translation.

During Registration

• Email address
• Password (stored encrypted)
• Registration timestamp

When Using the Translation Service

• Uploaded files (localization files)
• Source and target languages
• Translation history
• Translation Memory (if you create a project)
• Payment information (processed by Stripe)

Automatically Collected Data

• IP address
• Browser type and version
• Operating system
• Access time
• Referrer URL

We process your data for the following purposes:

• Provision of the translation service
• Management of your user account
• Payment processing
• Storage of Translation Memory for cost savings
• Technical security and error analysis
• Compliance with legal retention obligations

You are solely responsible for the content you upload and have translated.

We assume no liability or warranty for:

• The accuracy or quality of the translations
• The legality of the content you upload
• Potential copyright infringements in your content
• The suitability of the translations for a specific purpose

Please ensure that you are authorized to process and have translated the uploaded content.

Your data will be shared with:

• AI Translation Services (OpenAI, Anthropic, DeepSeek, potentially Mistral AI) – for performing translations
• Stripe – for payment processing (servers in EU and USA)
• Supabase – for database usage (servers in Frankfurt, operator in USA)
• Railway – for hosting the application (servers in Amsterdam, operator in USA)
• Umami Analytics – for anonymized collection of usage statistics (servers in EU, operator worldwide)
• Mautic – for marketing analytics (self-hosted on Railway in EU, IP addresses are NOT stored)
• CRM System (Odoo) – for customer relationship management and order processing (only order data: email, order number, amount)
• Email Service (Resend) – for sending transactional emails (e.g. order confirmations, password reset)

Data will not be shared with other third parties unless we are legally obligated to do so.

Since we use services from international providers, your data may be transferred to third countries:

• USA: Railway, Supabase, OpenAI, Anthropic, Stripe
• China: DeepSeek

These countries do not have a level of data protection equivalent to the GDPR. The transfer is based on standard contractual clauses or your consent when using the service.

Data Processing Agreements

Data Processing Agreements (DPAs) in accordance with Art. 28 GDPR have been concluded with all of the above-mentioned processors (Railway, Supabase, Stripe, OpenAI, Anthropic, DeepSeek). These contain Standard Contractual Clauses of the European Commission for lawful data transfer to third countries.

• User account data: As long as your account exists
• Translation jobs: 30 days after completion (automatic deletion thereafter)
• Translation Memory: As long as your project exists or until manual deletion
• Payment data: 10 years (legal retention obligation)
• Server-Logs: 7 days

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): You can request information about your stored data
• Right to rectification (Art. 16 GDPR): You can request the correction of incorrect data
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data
• Right to restriction of processing (Art. 18 GDPR): You can request the restriction of processing
• Right to data portability (Art. 20 GDPR): You can receive your data in a structured format
• Right to object (Art. 21 GDPR): You can object to the processing

To exercise your rights, please contact: contact@balane.tech

You have the right to lodge a complaint with a data protection supervisory authority about our processing of personal data.

The competent supervisory authority is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: www.lda.bayern.de

Technically Necessary Cookies (Essential)

These cookies are required for the basic functions of the website and are set automatically:

• Session-Cookie: Login status and authentication
• Theme-Cookie: Stores your preference for light/dark mode
• Locale-Cookie: Stores your language setting (DE/EN)

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)

Analytics Cookies (Optional, With Consent)

We use Umami Analytics, a privacy-friendly analytics tool, to understand and improve the usage of our website. Umami Analytics is only activated after your explicit consent.

Umami Analytics

Provider: Umami Software, Inc.
Data storage: EU servers
Collected data:

• Visited pages (URLs)
• Referrer (previous page)
• Browser type and version
• Operating system
• Device type (desktop, mobile)
• Visit duration and interactions

Important: Umami does NOT store IP addresses, does NOT use cookies, and does NOT create user profiles across different websites. All data is fully anonymized.

Purpose: Analysis of user behavior to improve the website
Legal basis: Your consent (Art. 6(1)(a) GDPR)
Retention period: Aggregated statistics, 24 months
More information: Umami Privacy Policy

Marketing Cookies (Optional, With Consent)

We use Mautic, a self-hosted open-source marketing automation tool, to measure the effectiveness of our marketing activities. Mautic is only activated after your explicit consent.

Mautic

Provider: Self-hosted (Balane GmbH) on Railway, servers in EU
Collected data:

• Visited pages (URLs)
• Referrer (previous page)
• Browser type and version
• Device type (desktop, mobile)
• Visit timestamp

Important: Your IP address is NOT stored. We have configured Mautic with IP anonymization enabled.

Purpose: Measuring the effectiveness of marketing activities
Legal basis: Your consent (Art. 6(1)(a) GDPR)
Retention period: Until withdrawal of your consent
More information: Mautic Privacy Policy

Withdraw Consent

You can withdraw your consent to the use of analytics and marketing cookies at any time. Use the cookie settings in the footer of our website or in your account settings.

Overview of All Cookies

A detailed overview of all cookies we use can be found on our Cookie Policy page.

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services.

The new privacy policy will then apply to your next visit.