Privacy Policy

1. Who we are

WeLocale is a website localization platform. This policy explains how we collect and process data when you use the admin dashboard, and when your websites use the WeLocale widget. For your account and billing data, WeLocale acts as a data controller. For the content of your websites that you send us for translation, WeLocale acts as a data processor on your behalf.

2. Data we collect

We do not intentionally collect sensitive personal data. Source strings may contain personal information only if your website content contains it - you are responsible for your content.

3. How we use data

• Provide and operate the service (scanning, translation, widget delivery)
• Process payments and manage subscriptions (via Paddle, our Merchant of Record)
• Secure the platform (fraud prevention, abuse detection, rate limiting)
• Improve reliability and performance (error monitoring, diagnostics)
• Send transactional and account emails (password reset, billing receipts, subscription updates)

4. Legal bases (GDPR)

For users in the European Economic Area (EEA), we process your data under the following legal bases:

• Contract performance - processing necessary to provide the service you subscribed to
• Legal obligation - retaining billing and tax records as required by law
• Legitimate interests - security, fraud prevention, service reliability, and product improvement
• Consent - analytics or marketing communications, where applicable (you may withdraw consent at any time)

5. Third-party service providers

We share data with trusted service providers solely to operate WeLocale. We use only the minimum data required and do not permit providers to use your data for their own purposes. Categories of providers we work with:

• Payment processing (Paddle) - Paddle acts as our Merchant of Record and handles all payment transactions, tax collection, and billing on our behalf. Paddle's privacy policy applies to payment data
• Cloud infrastructure - to host and run the service
• Transactional email - to send account and billing notifications
• AI translation processing - your source strings are sent to our AI provider's API solely to generate translations. Content is not stored beyond the API request and is not used for model training. We do not send personal data to our AI provider unless it appears in your website content.
• Error monitoring - to detect and diagnose technical issues (may process IP addresses and request metadata)

6. International data transfers

Some of our sub-processors are based in the United States. When we transfer personal data from the EEA to the US, we rely on Standard Contractual Clauses (SCCs) or other appropriate transfer mechanisms as required by GDPR.

7. Cookies & local storage

We use essential cookies for login sessions and security (CSRF protection). The widget may store the visitor's selected language in localStorage to respect their choice across pages. See our

8. Data sharing

We share data only with the sub-processors listed above, strictly to operate WeLocale. We do not sell, rent, or trade personal data with third parties for their own marketing purposes.

9. Data retention

• Account and billing records : retained for 7 years for legal and tax purposes
• Website configuration and source strings : retained while your account is active
• Scan and access logs : retained for up to 90 days
• Deleted accounts : data is removed within 30 days of account deletion, except where retention is required by law

10. Your rights

Depending on where you are located, you may have the following rights regarding your personal data:

• Access - request a copy of the personal data we hold about you
• Rectification - request correction of inaccurate data
• Erasure - request deletion of your data ("right to be forgotten")
• Portability - request your data in a machine-readable format
• Restriction - request that we limit processing of your data
• Objection - object to processing based on legitimate interests

To exercise any of these rights, email us at

11. California residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect and how it is used, the right to delete your personal information, and the right to opt out of the sale or sharing of personal information. WeLocale does not sell or share personal information. To exercise your rights, contact us at

12. Security

We apply access controls, encryption in transit (TLS), and security best practices. No service can guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify affected users as required by applicable law.

13. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or in-app notification before they take effect.

14. Contact

Questions about privacy? Email us at [email protected]