Privacy Policy
Effective date: 1 June 2026 · Last updated: 23 May 2026
This Privacy Policy applies to all products and services operated by Omnivest Global Enterprises (PTY) Ltd under the Translyx brand, including TranslyxCAT (cat.translyx.app) and the LínguaProz translation portal. It complies with the General Data Protection Regulation (GDPR) and the Protection of Personal Information Act (POPIA).
1. Who We Are
Omnivest Global Enterprises (PTY) Ltd is a South African company and the responsible party (controller) for personal information processed through the Translyx platform.
- Registered address: Cape Town, Western Cape, South Africa
- Information Officer: JP Zietsman
- Contact email: [email protected]
References to “we”, “us”, or “our” throughout this policy refer to Omnivest Global Enterprises (PTY) Ltd.
2. Data We Collect
Account and Identity Data
When you register for TranslyxCAT or are provisioned as a LínguaProz translator, we collect your name, email address, and password (stored as a one-way hash). We do not store plaintext passwords.
Usage and Translation Data
We collect data about how you use the platform, including projects created, segments translated, machine translation requests made, AI assistant queries, and features accessed. Translation content you upload or enter into the editor is stored to provide the service.
Technical Data
We collect standard technical information including IP address, browser type, operating system, and session identifiers. This data is used to operate and secure the platform.
Billing Data
Payment processing is handled entirely by Stripe. We do not store card numbers or sensitive payment details on our systems. We retain records of subscription status, plan tier, and transaction references.
Communication Data
If you contact us by email, we retain that correspondence to respond to your enquiry and for our records.
3. Legal Basis for Processing
We process your personal information on the following legal grounds:
- Contract performance — processing necessary to provide the TranslyxCAT service you have signed up for.
- Legitimate interests — product analytics, security monitoring, and improving our services, where these interests are not overridden by your rights.
- Legal obligation — where we are required to process data to comply with applicable law.
- Consent — where we have asked for and received your consent, for example for optional communications.
4. How We Use Your Data
- To create and manage your account and authenticate your sessions
- To provide translation memory, glossary, and AI-assisted translation features
- To process machine translation requests via third-party MT engines
- To track usage against your plan limits and enforce tier restrictions
- To send transactional emails (account confirmations, password resets, delivery notifications)
- To analyse product usage in aggregate to improve the platform
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal and regulatory obligations
We do not sell your personal data to third parties. We do not use your translation content to train AI models.
5. Third-Party Processors
We engage the following sub-processors to deliver our services. Each processor is bound by a data processing agreement and is required to maintain appropriate security standards.
Purpose: Database hosting, user authentication, and file storage for all TranslyxCAT data.
Data processed: All user account data, project data, translation segments, glossaries, translation memory, uploaded files.
Location: European Union (AWS eu-west-1) · Privacy Policy →
Purpose: Virtual private server hosting for the TranslyxCAT API, LínguaProz portal, and associated backend services.
Data processed: All data transiting through or processed by the API, including authentication tokens, project payloads, and file transfers.
Location: United Kingdom · Privacy Policy →
Purpose: DNS resolution, CDN, DDoS protection, and edge caching for translyx.app and all subdomains.
Data processed: IP addresses, HTTP request metadata. Cloudflare does not receive translation content or account data.
Location: Global (edge nodes worldwide) · Privacy Policy →
Purpose: Transactional email delivery for account confirmations, password resets, and platform notifications.
Data processed: Recipient email address, email content, delivery status.
Location: United States · Privacy Policy →
Purpose: Neural machine translation engine, used when you request MT suggestions in the CAT editor.
Data processed: Source text segments submitted for translation. DeepL does not use API-submitted text to train its models.
Location: European Union · Privacy Policy →
Purpose: Neural machine translation engine, used as an alternative MT provider in the CAT editor.
Data processed: Source text segments submitted for translation.
Location: United States (Google Cloud) · Data Usage Policy →
Purpose: Machine translation engine, used as an additional MT provider in the CAT editor.
Data processed: Source text segments submitted for translation.
Location: European Union · Privacy Policy →
Purpose: Product analytics to understand how features are used and improve the platform.
Data processed: User ID, email, anonymous usage events (features clicked, projects created, exports performed). Translation content is not sent to PostHog.
Location: United States · Privacy Policy →
Purpose: Bot protection on the account registration form to prevent automated sign-ups.
Data processed: Browser fingerprint, interaction data, IP address. Used only at the point of registration.
Location: United States · Privacy Policy →
Purpose: Payment processing for TranslyxCAT subscriptions and token packs.
Data processed: Cardholder name, payment card details, billing address, transaction records. We do not store card details on our systems.
Location: United States and European Union · Privacy Policy →
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the service. Specifically:
- Account data — retained for the duration of your account and deleted within 90 days of account closure on request.
- Translation projects and segments — retained for the duration of your account. You may delete individual projects at any time.
- Translation memory and glossaries — retained for the duration of your account and deleted on request.
- Usage logs — retained for 12 months for security and billing purposes.
- Billing records — retained for 7 years to comply with South African financial record-keeping requirements.
7. International Transfers
Omnivest Global Enterprises (PTY) Ltd is based in South Africa. Some of our processors are located outside South Africa and the European Economic Area, including the United States. Where data is transferred internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions where applicable
- Data Processing Agreements with each processor
The Section 5 processor list above indicates the location of each processor.
8. Your Rights
Under GDPR and POPIA you have the following rights regarding your personal information. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data, subject to legal retention requirements.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests, including profiling.
Right to Restrict
Request that we limit how we use your data in certain circumstances.
Right to Withdraw Consent
Where processing is based on consent, withdraw it at any time.
Right to Complain
Lodge a complaint with your supervisory authority (see Section 12).
9. Cookies and Analytics
TranslyxCAT uses the following cookies and similar technologies:
- Session cookies — strictly necessary to keep you logged in during your session. These cannot be disabled.
- Local storage — used to store your authentication token and user preferences. This is essential to the operation of the application.
- PostHog analytics — we use PostHog to collect anonymous usage data. PostHog sets cookies to identify returning users and track events. No translation content is included in analytics data.
The Translyx marketing site (translyx.app) does not use advertising cookies or third-party tracking beyond PostHog analytics.
10. Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- TLS encryption for all data in transit
- Encrypted storage via Supabase for data at rest
- Bcrypt password hashing — plaintext passwords are never stored
- JWT-based authentication with short expiry windows
- Row-level security policies on the database
- IP whitelisting for administrative interfaces
- hCaptcha bot protection on registration forms
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by GDPR and POPIA.
11. Children
TranslyxCAT is a professional tool intended for use by adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] and we will delete it promptly.
12. Contact and Complaints
Contact Us
For any privacy-related questions, requests to exercise your rights, or to report a concern, contact our Information Officer:
- Email: [email protected]
- Company: Omnivest Global Enterprises (PTY) Ltd, Cape Town, South Africa
South African Supervisory Authority
If you are a South African data subject and are dissatisfied with our response, you have the right to lodge a complaint with the Information Regulator (South Africa):
- Website: www.justice.gov.za/inforeg/
- Email: [email protected]
EU/EEA Supervisory Authority
If you are located in the European Economic Area, you may lodge a complaint with the data protection authority in your country of residence or where the alleged infringement occurred.
Updates to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or via a notice in the TranslyxCAT application. The effective date at the top of this page reflects the date of the most recent revision. Continued use of the platform after a policy update constitutes acceptance of the revised terms.