Privacy Policy

1. Introduction

LazyLocales ("we", "us", "our") operates the LazyLocales platform at lazylocales.com, the LazyLocales CLI, and related services (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

2. Information we collect

We collect the following categories of information:

• Account information — email address, name, and authentication credentials provided when you sign up via WorkOS.
• Project data — source locale files, translation keys, and generated translations you upload or create through the Service.
• API keys — AI provider keys you store via BYOK (Bring Your Own Key). These are encrypted at rest and never exposed in logs or to third parties.
• Usage data — CLI version, command names, error codes, and translation job metadata used for reliability and debugging purposes.

3. How we use your information

• To provide, maintain, and improve the Service.
• To authenticate you and manage your account.
• To process translation jobs using your configured AI provider.
• To send transactional emails (account verification, security alerts).
• To monitor and prevent abuse or fraudulent activity.

4. Third-party services

We use the following third-party services:

• WorkOS — authentication and user management.
• Convex — database and backend infrastructure.
• AI providers (OpenAI, Anthropic, Google, Mistral) — translation generation using your own API keys. Your source content is sent to your selected provider solely for translation purposes.
• Vercel — application hosting.

5. Data retention

We retain your account data and project data for as long as your account is active. You may delete individual projects or your entire account at any time. Upon account deletion, all associated data is permanently removed within 30 days.

6. Data security

We use industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. AI provider API keys are encrypted before storage and are never logged or shared with third parties beyond the provider you select.

7. Your rights

You have the right to access, correct, export, or delete your personal data at any time through your account settings or by contacting us. If you are in the EU/EEA, you may also exercise rights under the GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above and, where appropriate, through the Service or email.

10. Contact

If you have questions about this Privacy Policy, contact us at hello@astoniclabs.com.