Privacy Policy

Last updated: 29.05.2026

This Privacy Policy explains how DRK Solutions Daniel Szczepanik ("Localesy", "we", "us") processes personal data when you use the Localesy localization platform and website (the "Service"). For business-customer content submitted for translation, our role and obligations are set out separately in our Data Processing Agreement (DPA).

1. Who we are (Controller)

The controller of your personal data is DRK Solutions Daniel Szczepanik, NIP 9372723082, contact e-mail contact@localesy.com.

2. What data we process

  • Account data - name, work e-mail, organisation, and sign-in identifiers when you register.
  • Billing data - handled primarily by our third-party merchant of record (see Section 4); we receive limited transaction and payout information.
  • Usage data - technical and product-analytics data about how the Service is used. Our default analytics is cookieless; we use additional analytics cookies (Google Analytics) only with your consent (see our Cookie Notice).
  • Customer Content - the text strings you submit for translation. This is intended to be application interface content, not personal data; where it nonetheless contains personal data, you are the controller and we act as your processor under the DPA, not under this Policy.
  • Communications - messages you send us (e.g. support).

3. Why we process it, and on what legal basis

  • To provide the Service (account, authentication, delivering translations) - performance of a contract (Art. 6(1)(b) GDPR).
  • Security, fraud prevention, and product improvement using anonymised/aggregated data - our legitimate interests (Art. 6(1)(f)).
  • Service and operational communications (e.g. breaking changes, security notices, billing) - contract performance / legitimate interests.
  • Tax, accounting, and legal compliance - legal obligation (Art. 6(1)(c)).
  • Optional product news/marketing, if any - only with your prior consent (Art. 6(1)(a)), which you may withdraw at any time.

4. Who we share it with (Processors and recipients)

We use the following processors and service providers, which act on our instructions:

  • Hosting / infrastructure - Vercel and Amazon Web Services (incl. CloudFront CDN)
  • Database / authentication - Supabase
  • AI translation & quality assessment - OpenRouter (as gateway), routing requests to AI model providers including Anthropic, OpenAI, xAI (Grok), and Google (Gemini); and DeepL for machine translation
  • Payments (merchant of record) - Lemon Squeezy
  • Product analytics - PostHog (cookieless) and Vercel Analytics (cookieless); Google Analytics (consent-based)
  • Error monitoring - Sentry

We do not sell personal data. We do not use Customer Content to train AI models.

5. International transfers

We host personal data primarily within the European Economic Area (EEA). Where any provider processes data outside the EEA, we rely on a lawful transfer mechanism (such as an adequacy decision or Standard Contractual Clauses).

6. How long we keep it

We keep personal data only as long as necessary for the purposes above or as required by law:

  • Account data - for the life of your account and up to 90 days after closure.
  • Billing and tax records - for 5 years, as required by Polish accounting and tax law.
  • Customer Content - for the duration of your account; on termination, deleted after your 30-day export window (see the DPA).
  • Product-analytics data - retained in aggregated/anonymised form only.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, and to object to certain processing. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, contact us at contact@localesy.com.

You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO).

8. Cookies

Our use of cookies and similar technologies is described in our Cookie Notice. We use essential and functional cookies, cookieless analytics by default, and additional analytics cookies (Google Analytics) only with your consent, which you can withdraw at any time.

9. Changes to this Policy

We may update this Policy from time to time. For material changes we will notify you by e-mail or through the Service; minor changes are reflected by updating the "Last updated" date.

10. Contact

Questions about this Policy or your personal data: DRK Solutions Daniel Szczepanik, contact@localesy.com.