Privacy Policy — Transila Office

Short version: We do not read your documents. We do not store your API keys on unencrypted servers. We do not sell your data. Your translations pass directly between your browser and the AI provider (OpenAI, Gemini, Claude, or Deepgram) using your own API key.

1. Who We Are

Transila Office is operated by Transila FZ-LLC, a company licensed in the Ras Al Khaimah Economic Zone (RAKEZ), United Arab Emirates, License No. 46000294.

Contact: privacy@transila.me · +971 56 953 4041

2. What Data We Collect

2.1 Account Data

Email address (required for account creation and login)
Display name (optional)
Organisation name and subdomain slug
Role within your organisation (member, admin)

2.2 Files You Upload

Files uploaded to the platform (DOCX, PDF, audio, video, etc.) are stored in a private Supabase Storage bucket scoped to your organisation. Files are used solely to enable the platform's features. We do not read, analyse, or share your file contents.

2.3 API Keys

When you save API keys (OpenAI, Gemini, Claude, Deepgram, Mistral) in the Settings panel, they are stored encrypted on our server using AES-256-GCM encryption. The encryption key is held only on our server and is never transmitted to the browser or any third party. Keys are used solely to make requests on your behalf when you initiate an operation.

2.4 Usage Data

We log basic server-side events (file uploads, job creation, session start/end times) for billing, debugging, and security purposes. We do not use third-party analytics SDKs.

2.5 Payment Data

Payments are processed by Stripe, Inc. We never receive or store raw card numbers. Stripe provides us with subscription status, renewal dates, and invoice history. Stripe's privacy policy is available at stripe.com/privacy.

3. How We Use Your Data

To provide, maintain, and improve the Transila Office platform
To authenticate you and enforce session limits
To send transactional emails (account creation, password reset, subscription events)
To provide customer support when you contact us
To detect abuse and enforce our Acceptable Use Policy

We do not use your data for advertising, profiling, or sale to third parties.

4. AI Providers — Your Keys, Your Data

Transila Office operates on a Bring Your Own Key (BYOK) model. When you translate a document or transcribe audio, your content is sent directly from our server to the AI provider (OpenAI, Google, Anthropic, Deepgram, or Mistral) using your API key under your account. Each provider's data practices are governed by their own privacy policies and API terms:

5. Data Retention

Files: Retained until you delete them, or until your account is closed
Account data: Retained for the duration of your subscription plus 30 days after closure
Job logs: Retained for 12 months for debugging and billing support

6. Your Rights (GDPR & UAE PDPL)

Whether you are located in the EU, UK, or UAE, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your account and associated data
Object to processing
Receive a copy of your data in a portable format

To exercise any of these rights, email privacy@transila.me. We will respond within 30 days.

7. Cookies

We use only technically necessary cookies for session management (Supabase authentication token). We do not use advertising or tracking cookies. For details, see our Cookie Policy.

8. Data Security

We implement industry-standard security measures including:

TLS 1.2+ encryption for all data in transit
AES-256-GCM encryption for stored API keys
Row-Level Security (RLS) in our database
Private Supabase Storage buckets (files are not publicly accessible)
Short-lived JWT tokens with automatic refresh

9. International Transfers

Our infrastructure uses Supabase (hosted in AWS Frankfurt, EU) and Stripe (US). For EU users, data transfers to the US are covered by Stripe's Standard Contractual Clauses. If you require a Data Processing Agreement (DPA), please contact us.

10. Changes to This Policy

We may update this policy from time to time. We will notify active subscribers by email at least 14 days before material changes take effect. The effective date above will always reflect the latest revision.

11. Contact

Data Controller: Transila FZ-LLC · RAK Economic Zone, UAE · License 46000294
Privacy Contact: privacy@transila.me
General Contact: +971 56 953 4041 · contact@transila.me

Also see: Terms of Service · Cookie Policy · Acceptable Use Policy