Privacy policy

Who we are

The Pearl service (“Pearl”, “we”). Data controller: individual entrepreneur Sergey Minailo, Georgia, identification code 322948398, registered address: Georgia, Ambrolauri district, Khvanchkari administrative unit, block #001, plot #047 “Namoshaklevi”.

You can reach us through “Write to us” in your account, or at sm7598342@gmail.com.

What we collect

• Your account: your email address, your name if you gave one, interface language and theme. Your password is kept only as a one-way hash (Argon2id): nobody can see it, us included.
• Signing in with Google: the Google account ID and email address Google passes to us. We never receive your Google password.
• Your texts: what you upload or paste. We take the text out of a file and keep it by chapter; the file itself is not kept, only its name. Also your translations, glossary, notes and rules for the translation, your edits and their history, and your answers to the editor's questions.
• Usage: how many characters you translate each day (for the daily allowance), price estimates, and a record of each model call: which model, how many tokens, what it cost. These records hold no text.
• Sign-in sessions: when you signed in and your browser's User-Agent string, so you stay signed in.
• What you send us: messages from “Write to us” and ratings of translations, with the screen they were sent from.
• Server logs: IP address, time and the address requested. They are there to find faults and abuse, and are kept for up to 7 days. IP addresses are not written to the database.

Without an account: text you paste on the home page to see a price is processed on the server and not kept.

There is no analytics or advertising tracking at present. If we add analytics, this policy will change before it starts.

Why

• To translate your texts and keep your work in your account.
• To sign you in and keep your account secure.
• To send the emails the service cannot work without: confirming your address and resetting your password. We send no newsletters or advertising.
• To count the daily allowance and our costs.
• To improve translation quality: there is a section on this below.
• To answer your messages and improve the service from your ratings.

We do not sell data and do not show your texts to other users.

Legal basis

• Performing our contract with you: your account, keeping and translating your texts, and the emails for signing in and resetting your password. Without these we cannot provide the service the terms of use describe.
• Legitimate interests: protecting the service from abuse, the daily allowance and cost accounting, improving translation quality, and answering your messages. You can object to this by writing to us through “Write to us” in your account, or at sm7598342@gmail.com.
• Consent: if we add analytics or anything else that needs consent, we will ask for it separately, and you can withdraw it at any time.
• Legal obligation: once there are payments, we will keep their records for as long as tax law requires.

How we improve translation

To make translations better, the Pearl team may look at the texts you upload and their translations: compare the source with the translation, find mistakes, and change the models' instructions and the way the service works as a result. Only the Pearl team has access to your texts.

We do not train or fine-tune artificial intelligence models on your texts, ours or anyone else's. Under their API terms, Anthropic and OpenAI do not train on them either.

We keep individual passages in a set of examples for checking quality only with your consent, and delete them when you ask.

If you do not want your texts looked at, write to us through “Write to us” in your account, or at sm7598342@gmail.com and we will leave your account out.

Who we share it with

Only those the service cannot run without, and only what the task needs:

• Anthropic and OpenAI (USA): their artificial intelligence models translate texts and do all the other work on text in the service. They receive the chapter's text and the book's context: glossary, notes, rules.
• Google: only if you sign in with Google.
• Resend (USA): delivering email. Receives the address and the message.
• Railway (USA), servers in the EU region (the Netherlands): the servers and the database everything is kept in.

The models receive texts and the book's context, never your email or name. Under Anthropic's and OpenAI's API terms, data sent through their APIs is not used to train their models by default and is kept for a limited time for abuse monitoring.

These companies may be in a different country from you, including the USA. By using Pearl you agree to that transfer.

How long we keep it

• While you have an account, everything in it is kept.
• A deleted book or chapter stays in the trash for 30 days, then is erased for good.
• Deleting your account is immediate and permanent: books, chapters, translations, glossaries, sessions and your messages. All that remains are anonymous records of what model calls cost: model, token counts, amount. They hold no text and no link to you.

Your rights

• See and take it: everything is in your account, and chapters and books download as DOCX, EPUB, FB2, PDF and TXT.
• Correct it: your name and settings in your account, texts right in the reader.
• Delete it: a book or chapter from its list, your whole account in your account settings.
• Get a copy of your data, object to processing or ask a question: write to us through “Write to us” in your account, or at sm7598342@gmail.com. We answer within 30 days.
• Complain to the data protection authority in your country.

Cookies and browser storage

• pearl_session: keeps you signed in. Not readable by the page's scripts; lasts 30 days.
• pearl-lang: your interface language; lasts a year.
• pearl_oauth_state and pearl_oauth_nonce: protect signing in with Google from forgery. They last up to 10 minutes and are removed as soon as you are in.
• In browser storage: your theme and language, and text you started before creating an account, so it can wait for your email to be confirmed. It is kept for at most a day and only on your device.

There are no advertising or third-party cookies.

Security

Passwords are kept only as hashes, connections use HTTPS, and only we can reach the database. Signing out ends the session in that browser, resetting your password ends every session, and deleting your account deletes everything.

Children

Pearl is not meant for children under 16.

Changes

We will tell you about changes to this policy in the service or by email. The date at the top shows when it last changed.