1. INTRODUCTION
Ahlan, Inc. respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.
2. INFORMATION WE COLLECT
Information You Provide
- Email address, username, password (hashed)
- Profile information (picture, bio, phone number)
- Communications (messages, audio, video calls)
- Payment information (via secure processors)
- Support tickets and feedback
Information Automatically Collected
- IP address (masked for privacy), browser type, device information
- Usage data (pages accessed, interactions, translation frequency)
- Session cookies and authentication tokens
- Location data (approximate from IP, precise with permission)
3. HOW WE USE YOUR INFORMATION
- Create and manage your account
- Process translations and video calls
- Provide customer support and security features
- Detect suspicious activity and prevent fraud
- Analyze service usage for security and reliability
- Use eligible anonymized language data for model improvement only when you opt in
- Send notifications, billing info, and marketing (opt-in)
- Comply with legal requirements
4. DATA PROTECTION
- In Transit: Encrypted connections using TLS where supported
- At Rest: Managed infrastructure encryption and access controls where supported
- Database: Encrypted password fields, 2FA secrets
- Access: Role-based access, MFA for admins, 30-min session timeout
- Training: Annual security training for all staff
5. DATA RETENTION
- Account data: Until account deletion
- Communications and media: Retained while needed to provide the service or until deletion is requested, subject to backups, legal holds, and operational limits
- Eligible raw language-quality data: Sanitized or anonymized after 90 days; model-training use is opt-in only
- Audit logs: 1 year where legally required, subject to legal holds
- Payment records: 7 years where required for tax and accounting purposes
- Session data: 30 days
- Backups: 90 days, then securely expired
6. YOUR PRIVACY RIGHTS
GDPR Rights (EU Users)
- Right to access your personal data (30 days)
- Right to correction of inaccurate data (7 days)
- Right to erasure (7-day recovery period)
- Right to restrict processing (30 days)
- Right to data portability (JSON/CSV export)
- Right to object to processing
- Right to lodge complaint with your Data Protection Authority
CCPA Rights (California)
- Right to know what data is collected (45 days)
- Right to delete personal information (45 days)
- Right to opt-out (we do NOT sell data)
- No discrimination for exercising rights
7. COOKIES & TRACKING
- Essential: Session, authentication, security cookies (required)
- Analytics: Google Analytics (anonymized, opt-out available)
- Preferences: Theme, language, accessibility settings
- We respect "Do Not Track" headers and have no fingerprinting
8. THIRD-PARTY SERVICES
- Email: SendGrid (verification, password reset)
- Payments: Paddle (payments)
- Translation: Hugging Face (translation AI processing)
- Storage: AWS S3 (encrypted)
- Analytics: Google Analytics (anonymized)
- Monitoring: Sentry (error tracking)
Each service has its own privacy policy. We have data protection clauses with all vendors.
9. DATA BREACHES
If your data is compromised:
- Investigation within 24 hours
- Affected users notified within 72 hours
- Regulatory authorities notified if required
- Public disclosure if affecting > 500 users
- Clear guidance on next steps provided
10. CHILDREN'S PRIVACY
- Service not intended for children under 13
- COPPA compliant (no marketing to children)
- Parental consent required for ages 13-17
- Report children's accounts to ahlandev@ahlantranslationapp.com
11. CONTACT US
For privacy inquiries, contact:
Email: ahlandev@ahlantranslationapp.com
Address: Ahlan, Inc., San Francisco, CA 94105
Response Time: 30 days (GDPR standard)