Privacy Policy

This Privacy Policy explains how Matheus Rezende Figueira ("we," "us," or "our"), operating the Lin service, collects, uses, and protects your information when you use our website `iamlin.com`, our application `dashboard.iamlin.com`, and our related services (collectively, the "Service"). We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) 2016/679 and the French Data Protection Act.

We collect information to provide and improve our Service.

a. Information You Provide to Us

• Account Information: When you register, you provide your name, email address, and a hashed password.
• Organization Information: You provide your organization's name and subscription details.
• Payment Information: Our payment processor, Stripe, collects your payment details. We do not store your full payment card information but do store a reference to your subscription (e.g., Stripe Customer ID).
• Platform Credentials: To connect to third-party services, you provide credentials such as API keys or grant access via OAuth. These credentials are encrypted at rest in our database.

b. Information We Collect Automatically

• Log and Usage Data: We collect information such as your IP address, browser type, operating system, pages visited, and timestamps.
• Cookies: We use essential cookies for functionality like keeping you logged in. We also use analytics cookies if you provide consent.

c. Information from Third Parties

• Authentication Providers: If you sign up using Google, we receive your name and email address.
• Connected Platforms: When you interact with our Service (e.g., submitting a translation in Slack), we receive user identifiers (like your Slack User ID) to attribute actions correctly.

d. User Content

We process content you provide through the Service, such as i18n source text and user-submitted translations, solely to operate the Service. This is treated as your confidential information.

We use your information for the following purposes, based on these legal grounds:

• To Provide and Maintain the Service (Legal Basis: Contract Performance): We use your account information, platform credentials, and User Content to operate the application, manage your account, and process your subscription.
• To Provide AI-Powered Features (Legal Basis: Contract Performance): For applicable plans, we send User Content (source text) to AI providers to generate translation suggestions.
• To Communicate With You (Legal Basis: Contract Performance & Legitimate Interest): We use your email to send transactional messages (e.g., welcome emails, password resets, billing notifications) and to respond to your support requests.
• For Security and Performance Monitoring (Legal Basis: Legitimate Interest): We use log data and monitoring tools to protect against threats, prevent fraud, and analyze the performance of our Service.
• For Legal Compliance (Legal Basis: Legal Obligation): We may use your information to comply with legal obligations, such as financial and tax reporting.
• For Analytics (Legal Basis: Consent): With your consent, we use tools like Google Analytics to understand how users interact with our website and application to improve them.

We do not sell your personal information. We may share it in these limited circumstances:

• With Service Providers (Sub-processors): We share information with third-party vendors who help us operate the Service. Our key sub-processors include:
• Google Cloud Platform (GCP): For cloud hosting, database, and storage services in the EU.
• Stripe, Inc.: For payment and subscription processing.
• Mailgun Technologies, Inc.: For sending transactional emails.
• OpenAI, L.L.C.: For providing AI-powered features.
• New Relic, Inc.: For application performance monitoring (using their EU data center).
• Google LLC: For website and application analytics (Google Analytics).
• With Your Connected Platforms: We transmit your User Content between your connected i18n and communication platforms as directed by you.
• Within Your Organization: Your name, email, and actions within the Service are visible to other users in your organization according to their roles.
• For Legal Reasons: We may disclose your information if required by law or in response to a valid legal process.

Your information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country.

Specifically, our service providers such as Stripe, Mailgun, OpenAI, and Google are based in the United States. When we transfer your personal data outside the European Economic Area (EEA), we take steps to ensure it is protected by appropriate safeguards. We rely on:

We implement appropriate technical and organizational measures to protect your personal information. This includes using TLS encryption for data in transit, encryption at rest for our databases, application-level encryption for sensitive credentials, and hashing for passwords. However, no security measure is 100% secure.

We retain your personal information as long as your account is active or as needed to provide you with the Service. When your subscription ends, we will retain your data for a ninety (90) day grace period, after which it will be permanently deleted. We may retain certain information for longer periods if required for legal or tax obligations.

If you are a resident of the EEA, you have the following data protection rights:

• Access: The right to request copies of your personal data.
• Rectification: The right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Erasure: The right to request that we erase your personal data, under certain conditions.
• Restrict Processing: The right to request that we restrict the processing of your personal data, under certain conditions.
• Object to Processing: The right to object to our processing of your personal data, under certain conditions.
• Data Portability: The right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

To exercise any of these rights, please contact us at `support@iamlin.com`. You also have the right to lodge a complaint with a supervisory authority, such as the CNIL in France.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Data Controller:
Matheus Rezende Figueira
57 Quai de Grenelle
75015 Paris, France
Email: `support@iamlin.com`