Privacy Policy

This Privacy Policy explains how Opus Lingua processes personal data when you use the Opus Lingua website, create an account, purchase credits, upload files for translation, contact us, or otherwise interact with our services.

We process personal data in accordance with Regulation (EU) 2016/679 (the GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and other applicable Spanish and European data protection laws.

Unless expressly stated otherwise, Opus Lingua acts as the controller for account, billing, website, and support data described in this policy.

We process personal data only where we have a valid legal basis under Article 6 GDPR. In particular:

• Contract performance (Art. 6(1)(b) GDPR): to register and manage your account, authenticate you, provide the translation service, process uploads, deliver translated files, manage credits, and provide customer support related to the service.
• Legal obligation (Art. 6(1)(c) GDPR): to comply with accounting, tax, fraud prevention, consumer protection, and other legal obligations that apply to us in Spain or the EU.
• Legitimate interests (Art. 6(1)(f) GDPR): to secure the platform, prevent abuse, investigate incidents, maintain service availability, improve product performance, and defend legal claims, provided those interests are not overridden by your rights.
• Consent (Art. 6(1)(a) GDPR): where required for optional communications or any non-essential cookies or similar technologies that we may implement in the future. You may withdraw consent at any time.

We may use personal data to:

• Create and maintain user accounts.
• Authenticate users, including sign-in via third-party identity providers.
• Store, analyze, translate, and make available uploaded files and translation outputs.
• Process purchases, payments, credits, refunds, invoices, and related customer records.
• Send transactional emails, service notices, password reset messages, and account-related alerts.
• Respond to support requests and contact form submissions.
• Maintain logs, detect suspicious activity, prevent misuse, and protect the security of the service.
• Comply with legal obligations and enforce our Terms of Service.

Opus Lingua is primarily a business translation platform. Files uploaded by users may contain personal data relating to customers, employees, or other third parties.

For your account, billing, support, and website-use data, Opus Lingua acts as a data controller.

For personal data contained in files you upload for translation, Opus Lingua will generally act as a processor or sub-processor on your behalf, and you are responsible for ensuring that you have an appropriate legal basis and all required permissions to upload and use that content.

We process uploaded files only to provide the requested service, maintain the platform, ensure security, and comply with applicable law.

We may share personal data with service providers and recipients that help us operate the service, including:

We do not sell your personal data. We do not disclose your uploaded files to other users. We only share data where there is a legitimate operational reason or a legal requirement to do so.

Some of our service providers may process personal data outside the European Economic Area, including in the United States. Where this happens, we use a lawful transfer mechanism under Chapter V GDPR, such as:

• A European Commission adequacy decision, where available.
• Standard Contractual Clauses or other appropriate safeguards.
• Additional technical and organizational measures where appropriate.

You may request more information about the safeguards relevant to your data by contacting legal@opuslingua.com.

We retain personal data only for as long as necessary for the purpose for which it was collected, including:

• Account data: for as long as your account remains active and for a limited period afterwards where needed to complete deletion requests, resolve disputes, or comply with legal obligations.
• Uploaded and translated files: generally for up to 30 days, unless deleted earlier by you or retained longer where necessary for security, troubleshooting, or legal reasons.
• Billing and transaction data: for the periods required by applicable accounting and tax laws.
• Support and contact data: for as long as reasonably necessary to manage the request and any follow-up.
• Logs and security records: for limited periods necessary to maintain platform security, investigate incidents, and prevent abuse.

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

• Access controls and role-based permissions.
• Authentication and password hashing.
• Encryption in transit where supported.
• Logging, monitoring, and security review processes.
• Controlled retention and deletion workflows for uploaded files.

No internet-based service can be completely secure, so we cannot guarantee absolute security. You should also protect your credentials and enable two-factor authentication where available.

We use cookies and similar technologies that are necessary for the operation of the website and the security of your session. These may include authentication cookies, anti-forgery tokens, and technical session identifiers.

We also use browser local storage to remember your cookie-consent choice and similar user preferences.

If we introduce analytics, advertising, or other non-essential cookies in the future, we will request consent before placing them where required by law.

Under the GDPR, and subject to the legal conditions and exceptions that apply, you may have the right to:

• Request access to your personal data.
• Request rectification of inaccurate or incomplete data.
• Request erasure of your personal data.
• Request restriction of processing.
• Receive personal data in a portable format where the right applies.
• Object to processing based on legitimate interests.
• Withdraw consent at any time where processing is based on consent.

You can manage certain account data directly through your account settings, request a data export, or contact us at legal@opuslingua.com.

We will respond within the time limits required by the GDPR, usually within one month, subject to lawful extensions where a request is particularly complex.

If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with the competent supervisory authority. In Spain, this is normally the Agencia Espanola de Proteccion de Datos (AEPD).

We would appreciate the opportunity to address your concern first, so please consider contacting us before filing a complaint.

A core feature of Opus Lingua is AI-assisted translation. To provide that feature, uploaded content may be transmitted to third-party AI providers selected by us for translation or related processing.

This processing is carried out to perform the contract with you. It is not intended to produce decisions with legal or similarly significant effects about you as an individual.

The service is not directed to children under 16 years of age, and we do not knowingly collect personal data from children under that age.

We may update this Privacy Policy from time to time to reflect legal, operational, or product changes. When we do so, we will update the date shown at the top of this page. If the changes are material, we may also notify users by email or through the service.

If you have questions about this Privacy Policy or wish to exercise your rights, please contact: