Legal
Privacy notice
What we collect, why, where it goes, how long we keep it, and how to ask for it. Last updated 10 September 2026.
The short version
We need your email to take an order, and your file to translate it. We keep the file for days, not months. Only product text reaches our AI provider, never your email, and it keeps none of it. No cookies, no tracking, no marketing, and we sell nothing to anyone.
Who is responsible
QUIKFORGE LIMITED, a company incorporated in Hong Kong (Business Registration No. 79555262), registered office Unit 2A, 17/F, Glenealy Tower, No. 1 Glenealy, Central, Hong Kong, operates ProductTranslator and decides how your personal data is used. Requests about your data go to our Privacy Officer at the same address, or by email to hello@producttranslator.com.
What we collect, why, and whether you must give it
| What | Why, and on what basis |
|---|---|
| Your email address, when you order. Required to order: without it we cannot send you the payment details or your files. | To take, deliver and support your order, and to keep our business records. Basis: performing our contract with you. |
| The file you upload. Required for a quote. It is your commercial data, a product catalogue, but it can contain personal data such as a person's name. | To quote, to translate the free sample, and, once you have paid, to translate your file. Basis: performing our contract with you. For personal data inside your file, we act on your instructions. |
| Your IP address, which your browser sends with every request. | Only two uses. If you ask for a free sample, we store a salted, one-way hash of it to allow one sample per visitor every 7 days. Our server's security log can record an address when a connection fails. Basis: our legitimate interest in preventing abuse and keeping the service secure. |
| What you write to us by email. | To answer you. Basis: performing our contract, or answering your request. |
We do not collect anything else: no account, no password, no phone number, no payment card details, and no tracking of what you do on the site. The site sets no cookies (see cookies).
What we never do
- We never send you marketing. If that ever changes, we will ask for your consent first, and you can say no.
- We never sell or rent your data, and never share it for anyone else's own use.
- We never use your files to train AI models, and never let our AI provider keep them.
- We never make decisions about you by automated means. Our automated checks judge translations, not people.
Who else receives it
| Who | What they receive, and why |
|---|---|
| Hostinger, our hosting provider. Our server is in Malaysia. | Everything we store is on that server. Hostinger provides the machine; it does not use the data for itself. |
| OpenRouter, Inc., United States, and the AI model provider it routes our request to. | Product text only: the product names, descriptions, attribute values and variant names we translate, with every number replaced by a placeholder. Never your email or IP address. Every request is sent with instructions that route it only to providers that keep no copy and do not train on it; if no such provider is available, the request fails instead of going elsewhere. |
| Our email provider. | Your email address and the messages we send you, to deliver them. |
| Banks and payment services that handle your payment. | The payment reference and amount, to move the money. |
| Our accountants and auditors, and authorities where the law requires it. | Order records, for our accounts and audit, or where we are legally obliged to disclose. |
Where your data is
We are a Hong Kong company, our server is in Malaysia, and product text is translated by an AI provider in the United States. So your data is processed outside your own country, whatever it is. When you order, we ask for your separate consent to this. We protect each transfer with the measures described on this page: product text only for the AI provider, with zero retention, a server we control, and deletion on a fixed schedule.
How long we keep it
| What | How long |
|---|---|
| An uploaded file you do not order | 24 hours, then deleted automatically |
| The file of an order not yet paid | 5 days, then deleted if the payment has not arrived |
| Your original and translated files after delivery | 7 days after delivery, then deleted |
| The salted hash of your IP address, after a free sample | 7 days, then deleted |
| Our server's security log | 7 days, then deleted |
| Your email, for an order that was never paid | 30 days from the order, then erased |
| The record of a paid order: reference, email, amount and dates | 7 years, for our accounts, then erased |
Deletion runs on a daily schedule on the server, not by hand.
Your rights, and how to use them
You can ask us to:
- tell you what personal data we hold about you, and give you a copy;
- correct it if it is wrong;
- delete it, or stop or limit using it, unless the law requires us to keep it;
- withdraw a consent you gave, without affecting what was done before;
- send it to you, or to another company, in a common machine-readable format;
- explain how and why we use it.
Write to hello@producttranslator.com, addressed to the Privacy Officer, and tell us which email you used. We may ask you to confirm it is yours. There is no charge. We act on a request for access or correction within 72 hours, and on any other request within 21 days. If we refuse, we tell you why.
You may also complain to the data protection authority where you live.
How we protect it
Everything travels over HTTPS. Files and the order database are readable only by the service's own user on the server, and the service runs in a locked-down container that can write to one directory only. Visitor addresses are stored only as salted one-way hashes. Files are deleted on the schedule above. If a breach ever affects your data, we will tell you within 72 hours of learning of it, with what happened and what we are doing about it.
Children
The service is for businesses and is not meant for anyone under 18. We do not knowingly collect children's data.
Changes, and the language of this notice
We will update this notice before we change how we use your data, and the date at the top will show when it last changed. This notice is written in English; if we publish it in another language, the English version controls wherever the two differ.