Troevo

Legal

Privacy Policy

This policy explains what information Troevo handles, why we handle it, and the choices available to you.

Last updated June 24, 2026

This Privacy Policy applies to the Troevo website, application, APIs, and translation delivery service (together, the “Service”). In this policy, “Troevo,” “we,” “us,” and “our” refer to the operator of the Service. For personal information we collect to operate Troevo, we act as the data controller. When we process personal information contained in customer content on a customer’s instructions, that customer is the controller and we act as its processor.

1. Information we collect

We collect the following categories of information:

  • Account and organization information. Your name, email address, authentication credentials, organization membership, role, preferences, and invitation details.
  • Customer content. Project and namespace names, translation keys, source text, translations, context, locales, workflow statuses, and version history that you or your teammates submit to the Service.
  • Billing information. Subscription plan, billing status, and related transaction information. Our payment provider processes payment card details; Troevo does not store full payment card numbers.
  • Usage and device information. Features used, actions taken, referring pages, approximate location derived from IP address, browser and device details, IP address, session information, and diagnostic data.
  • Communications. Information you send when you contact us for support, provide feedback, or otherwise communicate with us.

2. How we use information

We use information to:

  • provide, secure, maintain, and troubleshoot the Service;
  • authenticate users and manage organizations and permissions;
  • process subscriptions and send transactional communications;
  • generate AI-assisted translation drafts when you request them;
  • publish customer-selected translations to the delivery CDN;
  • understand usage and improve the Service;
  • prevent fraud, abuse, and security incidents; and
  • comply with law and enforce our agreements.

Where applicable law requires a legal basis, we rely on performance of our contract, our legitimate interests in operating and improving the Service, compliance with legal obligations, and consent where we ask for it. You may withdraw consent at any time without affecting earlier processing.

3. AI-assisted translations and CDN publishing

When you request an AI translation, Troevo sends the relevant source text, translation key, optional context, source locale, and target locale to our AI service provider, currently OpenRouter. Do not submit sensitive personal information or confidential information unless you have the right to do so and have assessed whether AI processing is appropriate for that information.

Translations are private within your organization until an authorized user publishes them. Published translation files are intentionally delivered through a public content delivery network and may be accessed by anyone who knows or discovers their URL. Do not publish secrets, personal information, or other content that should remain private.

4. How we share information

We do not sell personal information. We share information only as needed with:

  • Service providers that help us host and operate the Service, including database and infrastructure providers, Cloudflare for translation delivery, OpenRouter for requested AI translations, Polar for subscriptions and payments, Resend for transactional email, and PostHog for product analytics.
  • Your organization. Other members of your organization may see your profile, activity, and customer content according to their permissions.
  • Legal and safety recipients when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or enforce our agreements.
  • Transaction participants in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.

5. Cookies and analytics

Troevo uses cookies and similar technologies that are necessary for authentication, security, and session management. We also use PostHog to understand how people use the Service and to diagnose errors. This may involve collecting page views, interactions, device information, and account identifiers. You can control cookies through your browser, but blocking necessary cookies may prevent the Service from working.

6. Data retention

We retain personal information and customer content for as long as needed to provide the Service, maintain legitimate business records, resolve disputes, enforce agreements, and meet legal obligations. The exact period depends on the type of information and why we hold it. When information is no longer needed, we delete or anonymize it. Deletion from backups and logs may take additional time.

7. Security

We use reasonable technical and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your credentials secure and for promptly notifying us if you suspect unauthorized access to your account.

8. International transfers

Troevo and its service providers may process information in countries other than yours. Where required, we use appropriate safeguards for international transfers, such as adequacy decisions or approved contractual protections.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal information, and to receive a portable copy of it. You may also have the right to withdraw consent and lodge a complaint with your local data protection authority. These rights may be subject to legal exceptions.

To make a request, email us at [email protected]. We may need to verify your identity. If Troevo processes your information on behalf of a customer organization, please contact that organization first.

10. Children

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact us.

11. Changes to this policy

We may update this policy as the Service or applicable requirements change. We will post the revised policy here and update the date above. If a change is material, we will provide additional notice when reasonably required.

12. Contact

Questions or requests about this policy can be sent to [email protected].