Privacy Policy

Last updated: 2026-05-30

1. What we collect

When you create an account with Project Y we collect your email address, your name (optional), and the password hash. When you connect an OAuth provider we additionally receive the external account ID from that provider. We log IP addresses and user-agent strings on each request for fraud and abuse detection.

2. What we don't collect

We don't sell your data, share it with advertisers, or use it to train models that benefit third parties. Translation content you store with us is yours; we read it only to render it to you and the people you've invited into your workspace.

3. Sub-processors

• Stripe — billing + invoice generation
• Resend — transactional email
• Cloudflare R2 — screenshot & logo storage
• Cloudflare or Vercel — hosting + edge delivery

4. Your rights

Under GDPR and similar regimes you have the right to access, correct, export, and delete your personal data. Email privacy@project-y.app and we'll respond within 30 days.

5. Contact

Data controller: Project Y. Reach us at privacy@project-y.app.