Data processing and sub-processors
Who controls which data, what we do with it on your behalf, and every company that processes it for us.
Draft. Text in brackets, such as [Company name], is a placeholder that will be filled in before hosted translation opens. Hosted translation is not open yet; the open-source QA gate needs no account and sends nothing anywhere.
Roles
- For the content you send (strings, files, glossaries, comments), you are the controller and Shipglot is your processor. We process it only to provide the service and on your instructions.
- For account, billing and security data (who signs in, invoices, the audit log), Shipglot is the controller, as described in the privacy policy.
Processing details
| Subject matter | Translating, checking, reviewing, storing and delivering your application's strings. |
|---|---|
| Duration | While your account exists, then deletion as the terms of service describe. |
| Personal data | Whatever personal data your strings, code lines, comments and glossaries contain (usually none; the personal-data check flags emails, phone numbers, IBANs, card numbers and API keys in strings), and the names and email addresses of your users of the editor. |
| Data subjects | Your staff and contractors who use Shipglot, and anyone your content mentions. |
Our commitments as processor
- We process your content only to provide the service and on your documented instructions.
- Everyone who can access it is bound by confidentiality.
- We apply the measures on the security page.
- We use only the sub-processors below, under written terms that protect the data at least as well as these. Before adding or replacing one, we update this page and email account owners, 30 days ahead unless a provider has to be replaced urgently to keep the service running. You may object by replying to that email.
- We help you answer data subject requests and meet your security obligations. Requests are handled by hand: email hello@shipglot.com.
- If we become aware of a personal data breach that affects your content, we email account owners without undue delay with what we know, and follow up as we learn more.
- At the end of the service we delete your content by hand and confirm by email. If you ask before the account closes, or within 30 days after, we first send you a copy.
- Notices under these terms go by email to account owners. There are no in-product notices or self-service export yet.
- We make available the information you need to verify these commitments.
A signed data processing agreement (DPA) with these terms will be available before hosted translation opens. To request one, email hello@shipglot.com.
Sub-processors
| Sub-processor | Purpose | Data |
|---|---|---|
| OpenAI | AI model provider. Translation, cross-checks and back-checks, as the routing file assigns them. | Source strings and plural forms, key names, nearby keys, lines of code that use a key, glossary and style guide, translation memory entries, previous translations. |
| Anthropic | AI model provider. Translation, cross-checks and back-checks, as the routing file assigns them. | Source strings and plural forms, key names, nearby keys, lines of code that use a key, glossary and style guide, translation memory entries, previous translations. |
| Google (Gemini API) | AI model provider. Translation, cross-checks and back-checks, as the routing file assigns them. | Source strings and plural forms, key names, nearby keys, lines of code that use a key, glossary and style guide, translation memory entries, previous translations. |
| Stripe | Payments: checkout, subscriptions, invoices, the billing portal. | Billing name and email, payment method (held by Stripe, never by Shipglot), subscription and invoice records. |
| GitHub | Sign-in with GitHub, and the Shipglot GitHub App on repositories that install it. | GitHub account id, login, name and email; for the App, the repositories and files it is installed on. |
| Hetzner Online | Hosting: the server and storage for the hosted service and this website, in the EU. | Everything the hosted service stores (see the privacy policy), and web server request logs. |
| Cloudflare | Network proxy in front of this website and the hosted service: DNS, TLS, caching and protection against attacks. | IP addresses and every request and response in transit, including content sent to the API and the editor. |
| Email provider (to be confirmed) | The hello@shipglot.com mailbox: support, privacy and security requests, and the notices these pages promise. | Messages you send us and our replies, with names and email addresses. |
Which model provider handles a given string is set by the routing file that Shipglot's model test battery produces; every role has a fallback on a different provider, so any of the three can receive a string. No other AI provider receives data. Processing locations and transfer mechanisms for each sub-processor will be listed here before hosted translation opens.
The open-source CLI's check command and the browser tools use no sub-processors: nothing leaves your machine.