Privacy Policy

LLM Catalyst (“we,” “our,” or “us”) operates the LLM Catalyst translation platform at llm-catalyst.com. We provide AI-assisted translation for XLIFF-based CAT tool workflows. For any privacy-related questions, contact us at hi@llm-catalyst.com.

2.1 Account Information

When you register, we collect your name, email address, and organisation details through our authentication provider, Clerk. If you subscribe to a paid plan, your billing details are handled directly by Stripe — we do not store card numbers or payment credentials.

2.2 Translation Content

When you upload a file, we extract and store the individual translation segments (source and target text) contained in that file. We use this content to perform translation, run quality checks, and populate your translation memory cache. We do not read or analyse your content for any purpose other than providing the service.

2.3 Usage Data

We collect standard server logs, feature usage metrics, and segment counts for billing and product analytics. This data is aggregated and does not contain your translation content.

2.4 Cookies and Local Storage

We use strictly necessary session cookies set by Clerk for authentication. We do not use tracking or advertising cookies.

• To provide, operate, and improve the translation service.
• To process your subscription and send billing-related communications.
• To cache translation results and populate your translation memory, reducing repeated API calls and cost.
• To run automated quality assurance checks on translated segments.
• To respond to support requests and communicate service updates.
• To enforce our Terms of Service and prevent abuse.

We do not sell, rent, or trade your personal information to third parties.

To perform translations, we send your source-text segments to the AI provider you select for each translation job. The current providers are:

• Anthropic (Claude) — Privacy Policy
• OpenAI (GPT models) — Privacy Policy
• Google (Gemini) — Privacy Policy
• DeepL — Privacy Policy

We send only the text of segments required for translation. We do not send file metadata, user identifiers, or account information to AI providers. We use API access agreements with each provider, which generally prohibit them from using API-submitted content to train their models. You should review each provider's policy for the most up-to-date terms. If you use your own DeepL API key, your content is transmitted under your direct agreement with DeepL.

Your files and segment data are stored on infrastructure hosted in the European Union and the United States, using Neon PostgreSQL (database) and Cloudflare R2 (file storage). We apply encryption in transit (TLS) and at rest, access controls, and routine security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

We retain your account data and translation segments for as long as your account remains active. Original uploaded files are deleted from storage within 30 days of upload. Translated output files are deleted within 7 days of download or 30 days of creation, whichever comes first. Cached translation memory entries are retained indefinitely to benefit your future translations; you may clear them from the project settings at any time.

If you delete your account, we delete your personal data and segment content within 30 days. Aggregated, anonymised usage records may be retained for longer for billing and audit purposes.

Depending on your location, you may have rights under applicable law (including the GDPR for EEA residents and UK GDPR for UK residents) to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at hi@llm-catalyst.com. We will respond within 30 days.

We use the following sub-processors to operate the service:

• Clerk — identity and authentication
• Stripe — payment processing
• Neon — database hosting
• Cloudflare — file storage (R2) and CDN
• Inngest — background job orchestration
• Vercel — application hosting

Each sub-processor handles data under its own privacy commitments and our data processing agreements where applicable.

The service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this policy periodically. We will notify you by email or by posting a notice in the dashboard at least 14 days before material changes take effect. Continued use of the service after that date constitutes acceptance of the updated policy.

LLM Catalyst
hi@llm-catalyst.com