Privacy Policy
Effective date: November 1, 2026
This policy explains how Your Company SRL, [company address] ("we") processes personal data when you use HomeDialect, as required by the EU General Data Protection Regulation (GDPR). Contact us about privacy at support@homedialect.com.
Summary
- We collect only what we need to run your account, your broadcasts and your billing.
- We do not record or store broadcast audio or translations.
- Listeners don't need an account and we don't track them.
- We use no advertising or analytics cookies.
- Payments are handled by Paddle, our merchant of record.
1. Data we process, why, and on what legal basis
- Account data (name, email address, password hash, sign-in method, language and time zone): to create and run your account. Basis: contract (Art. 6(1)(b) GDPR).
- Channel settings (channel name, listener link, languages, limits): to provide the Service. Basis: contract.
- Usage and billing records (broadcast times, duration, languages, minutes used, number of listeners, plan and balance): to provide the Service, bill correctly and show you your history. Basis: contract; legal obligation where records are needed for accounting.
- Security data (IP address, browser and device type, sign-in events, security-relevant changes): to protect your account and detect abuse. Kept for 12 months. Basis: legitimate interest in keeping the Service secure (Art. 6(1)(f)).
- Free-trial check: a keyed one-way hash of your email address, kept after account deletion, so the free trial can be used once per person. Basis: legitimate interest in preventing abuse.
- Emails: we send service emails (verification, security, billing, broadcast summaries you can turn off). Product news only with your consent, which you can withdraw at any time. Basis: contract; consent (Art. 6(1)(a)) for product news.
- Support requests: to answer you. Basis: contract or legitimate interest.
2. Broadcast audio
When you broadcast, the audio from your computer is sent to our relay servers and to translation providers, translated in real time by artificial intelligence, and delivered to your listeners. We process it only in memory and don't store it. Translation providers may keep it for a limited time under their own terms, as stated on our sub-processors page. Speech can contain personal data (for example the voice of the speaker, names mentioned). For this audio, your organization is the controller and we are the processor, under our Data Processing Agreement. Please inform speakers that the service is translated live.
3. Listeners
Listeners don't create an account. To deliver the stream, their device's IP address and browser information are processed for the duration of the connection and in short-lived server logs (at most 14 days). We count listeners in aggregate. We set no tracking cookies for listeners.
4. Payments
Purchases are handled by Paddle.com as merchant of record. Paddle processes your payment details, billing address and tax information as an independent controller under its own privacy policy. We receive only what we need: a customer reference, subscription status, the items bought and your country.
5. Recipients and sub-processors
We use carefully selected service providers who process data on our behalf under contracts that protect it. The current list is on our sub-processors page. If you sign in with Google or Facebook, those companies receive the information needed for sign-in under their own policies.
6. International transfers
Our main servers are in the European Union. Where a provider processes data outside the EU/EEA, we rely on an adequacy decision (such as the EU-US Data Privacy Framework) or the European Commission's Standard Contractual Clauses, with additional safeguards where needed.
7. How long we keep data
- Account, channel, usage and billing history: as long as your account exists, then deleted.
- Security log: 12 months.
- Payment notification records: 90 days.
- Backups: overwritten within 30 days.
- Invoices: kept by Paddle as long as tax law requires.
8. Your rights
You can access, correct or delete your data, download it in a portable format, restrict or object to processing, and withdraw consent at any time. Most of this is self-service in Settings › Privacy & data; otherwise write to support@homedialect.com. You also have the right to lodge a complaint with a supervisory authority; in Romania this is the ANSPDCP.
9. Cookies
We use only cookies that are strictly necessary (signing you in, remembering your language and time zone). See the Cookie Notice.
10. Security
We use encryption in transit (TLS), hashed passwords, optional two-step verification, access controls, short-lived signed tokens for broadcasts, and audit logs. Administrator access requires two-step verification.
11. Children
The Service is meant for organizations and adults. We don't knowingly collect data from children under 16 through accounts.
12. Changes
We will announce material changes to this policy by email or in the app.