Glossia
Controller and scope
Pedro Piñera Buendía, Jessnerstrasse 27a, 10247 Berlin, Germany, pedro@glossia.ai, is responsible for personal data processed for operating Glossia's hosted website and service.
This notice concerns the hosted service, not independently operated self-hosted deployments. Where we process personal data on a customer's instructions, the applicable customer data-processing arrangements must also address that processing.
Data and purposes
Depending on your use, we process:
- Connection and security information: IP addresses, request information and browser details, to deliver and protect the service.
- Inquiries: email addresses and correspondence, to answer questions and arrange onboarding. The interest form emails the address you submit to the operator.
- Accounts and integrations: profile details, language preferences, organization membership, provider identifiers and authorization credentials, to authenticate users and manage access.
- Content and collaboration: project and repository information, source content, translation instructions, outputs and conversation messages, to provide the workflows you request.
- Usage and diagnostics: event information and error reports, to understand service operation, troubleshoot problems and analyze use.
Information necessary for a requested feature is required to use that feature. Avoid including unnecessary sensitive personal information in content or instructions.
Analytics and external resources
The website includes analytics served from analytics.glossia.ai. Configured service-event analytics can include account and user identifiers, event names, timestamps and resource identifiers. These records are not necessarily anonymous.
Glossia's localization-analytics feature processes page and referrer information, language, device and country information. It derives a daily, project-scoped visitor identifier from an IP address and User-Agent rather than storing those two inputs in the analytics event row. Depending on configuration, country lookup sends an IP address to ipapi.is, with country.is as fallback. A website using this feature is responsible for its own notice and any required consent.
Stylesheets request Google Fonts. Some signed-in pages request Gravatar images using a digest of the account email; that digest is not anonymous. Where enabled, Sentry receives error diagnostics and Cloudflare Turnstile processes browser challenges and verification tokens. These requests disclose connection information to the relevant service. Browser storage is described in the Cookie Policy.
Legal bases
Processing necessary to provide requested services or take pre-contractual steps at your request relies on Article 6(1)(b) GDPR. This includes onboarding inquiries and requested account, translation and integration workflows where that basis applies.
Necessary service security, troubleshooting and operational administration rely on Article 6(1)(f) GDPR, subject to balancing your rights and interests. Our interests are protecting accounts and infrastructure and maintaining a functioning service. Processing required by law relies on Article 6(1)(c). Where consent is required for optional processing or device access, it must be obtained separately and may be withdrawn. This notice does not itself constitute consent.
Recipients and international processing
Relevant information is handled by infrastructure, storage, email and diagnostics providers, and by repository, identity and model providers used for your requested workflows. The deployment uses Hetzner infrastructure and object storage and Cloudflare R2 for database backups. The providers receiving translation content depend on the configured models and integrations; relevant content and instructions are sent for inference.
External services and integrations can involve processing outside the European Economic Area. We do not represent that all processing stays in the EU. Transfers must comply with applicable data-protection requirements. Contact pedro@glossia.ai for details of the recipients and transfer arrangements relevant to your use, including applicable safeguards and how to obtain a copy. Do not submit content subject to specific processing restrictions without first agreeing suitable arrangements.
Retention and security
Retention depends on the record and its purpose. Account, project and conversation records support ongoing use; correspondence supports the inquiry and any resulting relationship; diagnostic and security records support investigating faults and abuse. Legal retention obligations, resolving claims and backup rotation may require different handling from active records. Contact us to request account closure or deletion and to discuss the records and retention requirements applicable to your use.
No online service can guarantee absolute security. Access to connected services depends on the credentials and permissions you provide; review those permissions and revoke integrations you no longer need.
Your rights
Subject to applicable conditions, you may request access, correction, deletion, restriction and portability of personal data, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it prospectively without affecting earlier lawful processing.
Contact pedro@glossia.ai. You may also complain to a competent supervisory authority, including the authority where you live, work or believe an infringement occurred. The local authority is the Berlin Commissioner for Data Protection and Freedom of Information.
Changes and other deployments
We publish dated versions of this notice. The Apache-2.0 core and software under the separate Glossia Enterprise License can be deployed by other operators under their applicable license conditions. Those operators are responsible for their own processing and notices. See the software licensing notice.