Privacy Policy

Tarjuman Translate ("we", "our", "us") operates the website tarjumantranslate.com and provides certified Arabic document translation services. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

By using our service, you agree to the collection and use of information as described in this policy. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable laws.

Account data: Email address and password (stored as a bcrypt hash) when you create an account.

Order data: Document type, delivery speed selection, special instructions, order status, and payment reference.

Uploaded documents: Files you upload for translation (passports, diplomas, certificates, etc.). These are stored encrypted in our cloud storage.

Payment data: Payment is processed entirely by Stripe. We do not store your card number, CVV, or any raw payment details. We only receive a payment reference ID and confirmation status.

Technical data: IP address, browser type, device type, pages visited, and timestamps — collected automatically for security and analytics.

Communications: Any messages you send us via email or the support form.

We use your data solely to provide, improve, and secure the service:

• To process your document translation order
• To deliver the completed translation to your dashboard
• To send transactional emails (order confirmation, delivery notification)
• To process payments via Stripe
• To detect and prevent fraud, abuse, and unauthorized access
• To improve our platform based on aggregated, anonymized analytics
• To respond to your support requests

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Your uploaded documents are sensitive personal data. We treat them with the highest level of care:

• Documents are stored encrypted (AES-256) in Supabase cloud storage hosted in the EU.
• Access to documents is restricted to authorized translators and administrators assigned to your order.
• Documents are never shared with third parties, advertisers, or data brokers.
• Documents are automatically deleted 90 days after order completion (see Section 8 — Retention).
• All file access is performed via signed, time-limited URLs — raw storage paths are never exposed.

Tarjuman Translate uses a combination of professional human translators and automated processing tools to deliver certified translations.

Document content may be processed by automated systems for quality validation (checking resolution, readability, and completeness). The actual translation is performed and verified by certified human translators.

Any automated processing is covered by appropriate data processing agreements, and the data is not used to train third-party models or retained beyond the scope of your order.

Under GDPR, we process your data on the following legal bases:

• Contract performance — to fulfill your translation order.
• Legitimate interests — for fraud prevention, security, and service improvement.
• Legal obligation — to comply with applicable laws and regulations.
• Consent — for any optional marketing communications (which you can withdraw at any time).

We use the following types of cookies:

• Essential cookies: Required for authentication and session management. These cannot be disabled.
• Analytics cookies: We use anonymized analytics to understand how users navigate the site. No personally identifiable information is included in analytics data.
• Payment cookies: Stripe sets cookies required for fraud detection during checkout.

You can disable non-essential cookies in your browser settings at any time.

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Uploaded documents: Deleted 90 days after order completion.
• Completed translations: Available in your dashboard for 90 days, then deleted.
• Payment records: Retained for 7 years as required by financial regulations.
• Technical logs: Deleted after 30 days.

If you are located in the EU/EEA or UK, you have the following rights:

• Access: Request a copy of all personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure ("right to be forgotten"): Request deletion of your personal data.
• Restriction: Request that we limit processing of your data.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Withdraw consent at any time for consent-based processing.

To exercise any right, email us at privacy@tarjumantranslate.com. We will respond within 30 days.

• All data is transmitted over HTTPS (TLS 1.3).
• Stored files are encrypted at rest using AES-256.
• Passwords are hashed using bcrypt — we never store plaintext passwords.
• Access to production systems is restricted to authorized personnel only.
• Payment processing is handled by Stripe, which is PCI-DSS Level 1 certified.
• File access is controlled via signed, time-limited URLs.

Our infrastructure is hosted primarily in the EU (Supabase EU region). Some service providers (such as Stripe and Resend) may process data in the United States or other countries.

Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

We use the following third-party processors:

• Supabase — database and file storage (EU)
• Stripe — payment processing (PCI-DSS certified)
• Resend — transactional email delivery
• Vercel — website hosting

Each provider is bound by data processing agreements that comply with GDPR requirements.

For any privacy-related questions, requests, or complaints:

• Email: privacy@tarjumantranslate.com
• General support: support@tarjumantranslate.com

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice on our website. The updated policy will always be accessible at tarjumantranslate.com/privacy.