PewTranslate privacy policy

PewTranslate is operated by [OWNER TO FILL: operator's legal name and country], [OWNER TO FILL: postal address for legal notices] ("we"). We decide how the data described here is used. Questions and requests go to hello@pewtranslate.com.

When someone creates an account and uses it to stream services, we store:

• Login data: your email address, a hash of your password (never the password itself), whether your email is verified, and your active sign-in sessions.
• Your account: email address, church name, the church's web address on our site, its description, location and website, whether the church is listed publicly, your balance and a referral code.
• Your services: titles, whether each is private, the language the preacher speaks, translation mode, and which listener languages are offered and preselected.
• Each stream: when it started and ended, the speaker language, seconds of speech, billable minutes and cost, how many listeners joined, and how many listened in each language.
• The transcript of each stream: every recognised sentence with its time and length, and its translation into each language that was being listened to.
• Balance history: the sign-up credit, top-ups and refunds, with dates, amounts and payment references.
• Top-up orders: amount, product, status, refunded amount, the payment page link and the payment provider's order number.
• Payment notifications we have processed: event type, the payment provider's event and order numbers, and the outcome. These contain no name, email or card details, but the provider can link its numbers to the buyer.
• Sign-up credit records: a keyed hash of your email address (made after removing "+" tags and, for Gmail, dots) and when the credit was given. Without our secret key the hash cannot be turned back into the address. We keep it after the account is deleted, so the sign-up credit is given only once per address.
• Refund requests made when an account is closed: the closed account's id, the same keyed hash of its email address, the amount, the payment provider's order numbers to refund, and whether the refund is done.

We use this data to run the service: to sign you in, show your dashboard and history, translate and deliver each stream, charge the balance for what was translated, and process payments. We do not sell it and we do not use it for advertising.

Listeners do not create an account. Their browser remembers the chosen language, display settings and a random listener number in its own storage. While someone listens, that random number is sent to us so we can count distinct listeners; we keep only the counts per language, not the number itself.

Flag images in the language list are loaded from flagcdn.com, which therefore sees the listener's IP address and browser type, as any website does.

Translations are read aloud with the voice built into the listener's browser or phone. Depending on the browser, that voice can be an online service of the browser maker (for example Google's voices in Chrome), which then receives the translated text. Listeners who turn the voice off only read.

The preacher's audio is sent to our speech recognition provider while the stream runs and is not stored by us. The recognised text and its translations are stored as the stream's transcript, which the church can read and download in History.

Some of these providers are located outside your country, including in the United States and the European Union. Each processes the data only to provide its service to us.

Our host keeps server logs for operating and securing the service. To limit abuse of the sign-up credit, we keep the network address of each sign-up attempt in the server's memory and forget it about an hour after the last attempt; it is never written to the database.

To learn how the website and dashboard are used and to find problems, we use Microsoft Clarity and PostHog (see the providers above). They set cookies and browser storage to recognise a returning browser; Clarity's cookies are Microsoft's. Analytics does not start when someone opens a listener link or an emailed password or verification link. We do not show advertising. Signing in keeps a session token in your browser's storage until you sign out.

We keep account data, services, transcripts and payment records while the account exists. Deleting a service deletes its streams and transcripts. Deleting the account deletes the data listed above for that account, including sessions, services, transcripts, orders and balance history, with three exceptions. Records of processed payment notifications are kept, because they contain only the payment provider's reference numbers and no name, email or card details. The sign-up credit record (a keyed hash of the email address, never the address itself) is kept after the account is deleted, so the credit is given only once per address. A refund request is kept as a payment record. The payment provider keeps its own records of payments as the law requires.

• See and correct your church profile at any time in Account.
• Ask for a copy of your data, or for your account to be deleted, by writing to hello@pewtranslate.com.
• Download any stream's transcript from History.
• Depending on where you live, you may also object to or restrict processing, and complain to your data protection authority.

PewTranslate is a tool for churches and is not directed at children. Listeners of any age can follow a stream without giving us personal details.

When we change this policy we update the effective date above, and we email account holders about significant changes before they apply.