Privacy Policy

Who we are

Sonenta ("we", "us") provides software that helps teams manage, translate and deliver multilingual content. The data controller is Sonenta. For any privacy question, contact us at info@sonenta.com.

Data we collect

• Account data — your name and email address when you create an account.
• OAuth profile — if you sign in with Google or GitHub, we receive your email, name, avatar and provider account ID. We do not receive your password.
• Project content — the translation keys, source strings and translations you create or upload to your projects, plus related metadata (namespaces, languages, glossaries).
• Usage & logs — IP address, browser/device information, pages and API endpoints accessed, and timestamps, kept for security and debugging.
• Billing data — your plan, subscription status and billing identifiers. Card payments are processed by Stripe; we never store full card numbers.

How we use your data

We use your data to operate and secure the service, authenticate you, deliver translation bundles, process subscriptions, provide support, improve the product, and meet legal obligations. We do not sell your personal data.

Cookies

The application uses a strictly necessary, HttpOnly session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies. The marketing site uses Plausible Analytics, which is cookieless — that is why there is no cookie banner.

Service providers (subprocessors)

We share data with a small set of providers strictly to run the service, each processing only what is needed:

• Stripe — payment processing as Merchant of Record (billing, tax handling).
• Resend — transactional emails (verification, billing, notifications).
• Google & GitHub — optional OAuth sign-in.
• Bunny.net — CDN delivery of published translation bundles.
• Cloud hosting & MongoDB — application hosting and database storage.

International transfers

Our providers and servers may be located outside your country. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

Data retention

We keep account and project data for as long as your account is active and for a reasonable period afterwards. Logs are kept for a limited period. When you close your account or request deletion, we delete or anonymize your personal data, except where we must retain it to comply with the law.

Your rights

Subject to applicable law (including GDPR-style rights), you may request access to, correction of, deletion of, or a copy of your personal data, and you may object to or restrict certain processing. To exercise these rights, email info@sonenta.com. You may also lodge a complaint with your local data protection authority.

Security

We protect data with encryption in transit (TLS), access controls, and hashed credentials. No system is perfectly secure, but we work to protect your information and to notify you of incidents where required.

Children

Sonenta is a business tool not directed to children and is not intended for anyone under 16.

Changes to this policy

We may update this policy; the "last updated" date above reflects the latest version. Material changes will be communicated through the service.

Contact

Questions about this policy or your data? Email info@sonenta.com.