Privacy Policy

Effective date: 20 May 2026

1. Data Controller

The Service is operated by WHIZY, SASU with share capital €1,000, SIREN 938 696 143, VAT FR58938696143, registered office: 12 rue de la Part-Dieu, 69003 Lyon, France. WHIZY acts as data controller for the processing described in this Policy.

Contact: [email protected] — Discord: discord.itranslator.app.

2. What We Process

We do not create local user accounts. We rely on Discord OAuth. We process:

  • Discord identifiers: user ID, server (guild) ID, channel ID, message ID.
  • Language preferences and aggregated usage statistics.
  • Ephemeral translation / transcription / generation content: processed in memory only (not stored), except a temporary anonymous cache of repeated identical inputs (no link to a user).
  • Support tickets (deleted after resolution).
  • Payment data handled directly by Stripe (we receive status/metadata, never full card details).

We do not store IP addresses or device/User-Agent ourselves.

3. Purposes & Legal Bases

We process personal data for the following purposes:

  • Provide the Service (Discord bot features). Legal basis: performance of the contract (use of the bot).
  • Payment / invoicing. Legal basis: contract and legal obligation (accounting).
  • Technical operation, security, abuse prevention (logs, rate‑limit). Legal basis: legitimate interest.
  • Service improvement (optimisation, anonymous cache, statistics). Legal basis: legitimate interest.
  • User requests (support / deletion). Legal basis: legitimate interest / legal obligation.
  • Audience measurement (Google Analytics 4 with anonymised IP, Google Consent Mode V2). Legal basis: your consent.
  • Advertising measurement (Google Ads conversion tracking, when enabled). Legal basis: your consent.

We do not run marketing emails. Audience and advertising measurement are only activated after you accept them via our consent banner, and you can withdraw your consent at any time (see Section 4).

4. Cookies & Similar Technologies

Our website (https://itranslator.app) uses two categories of cookies and similar storage.

Strictly necessary (no consent required):

  • Session cookie (Discord OAuth): up to 365 days.
  • Referral cookie: 30 days.
  • CSRF protection token: session lifetime.
  • Consent preference (privacy_prefs_v2 in localStorage): stores your choice so we do not prompt you again.

Subject to your consent (off by default):

  • Google Analytics 4 (measurement ID G-6SC5LWPBD3): audience measurement and aggregated traffic statistics. Cookies _ga, _ga_* — up to 13 months.
  • Google Ads (conversion tracking, when enabled): measure conversions from advertising campaigns. Cookies _gcl_* — up to 90 days.

We use Google Consent Mode V2: no advertising or analytics cookie is set, and no measurement signal is sent, until you click Accept all on our banner. If you click Reject all, Google receives anonymous, cookieless pings used only for aggregated modelling — no identifier is stored on your device.

Withdrawing or changing your choice: you can re-open the consent banner at any time using the Manage cookies link in the footer of every page. Your new choice takes effect immediately.

5. Processors / Recipients

We use providers to operate the Service:

  • Hosting / infrastructure: OVH (France/EU), Contabo (EU), Hetzner (EU).
  • Payment: Stripe.
  • Platform integration: Discord.
  • AI / LLM APIs: OpenAI, Groq.
  • Audience & advertising measurement (after consent): Google Ireland Ltd. (Google Analytics 4, Google Ads).
  • Internal analytics / backups: our EU infrastructure.

We do not sell your data.

6. International Transfers

Some providers are located outside the EEA (e.g. OpenAI, Stripe group, Discord, Groq, Google LLC for some measurement infrastructure). Transfers rely on EU Standard Contractual Clauses, the EU–US Data Privacy Framework where applicable, or equivalent safeguards, and we minimise the data sent (mainly identifiers and ephemeral content).

7. Retention

  • Discord IDs & preferences: kept while you use the Service (deleted on request).
  • Technical logs (no IP): 12 months.
  • Ephemeral content: processed in RAM only, then discarded; anonymous cache kept as needed.
  • Payment / invoices: retained by Stripe and for legal accounting periods.
  • Support tickets: deleted after resolution.
  • AI provider processing: inputs sent to external AI providers may be retained briefly by those providers under their own policies (typically up to 30 days for abuse monitoring). We do not control these retention periods.

8. Security

We apply reasonable measures: restricted staff access, TLS encryption in transit, provider‑level encryption at rest, monitoring and backups. No method of transmission or storage is 100% secure.

9. Your Rights

You may request access, rectification, deletion, restriction, portability, or object to processing by emailing [email protected] or reaching us on our Discord server at discord.itranslator.app. We answer within one month and may verify your identity via your Discord account or email.

10. Children

The Service is intended for users aged 15 or older (French digital consent threshold) who also meet Discord’s own minimum age requirement. Where local law sets a higher age, the stricter rule applies. We do not knowingly process data of users below the applicable threshold.

11. Complaints

You can lodge a complaint with the French supervisory authority (CNIL) at www.cnil.fr.

12. Changes

We may update this Policy. The latest version is posted on our website. Continued use after changes means you accept the updated Policy.

Questions? Email [email protected] or join our Discord at discord.itranslator.app.