StoreLocale policy
Privacy Policy
This policy explains how StoreLocale handles information when you visit the site, create an account, use the editor, purchase credits, or contact support.
Last updated:
1. Who operates StoreLocale
StoreLocale is operated by Oxbit Labs, based in Bursa, Turkey. Privacy questions and requests can be sent to [email protected].
2. Information we process
The information involved depends on the features you choose to use and may include:
- Account information, such as your name, email address, sign-in details, and account security settings.
- Projects, screenshots, text, generated assets, settings, and other content you upload, create, or save.
- Credit balances, package selections, purchase status, transaction references, and billing support history.
- Messages, feedback, and attachments you send to support.
- Technical and security information generated when the service is used, such as timestamps, request identifiers, device or browser details, and error or audit logs.
- Usage and analytics information, such as pages viewed, features used, pseudonymous identifiers, and an approximate location derived from your IP address, as described in sections 6 and 7.
Payment details entered during checkout are processed by the payment provider under its own privacy terms.
3. How information is used
Oxbit Labs uses information to provide and secure StoreLocale, including to:
- Create and protect accounts, authenticate sessions, and provide account support.
- Save projects, process requested localization or image tasks, and deliver generated files.
- Complete purchases, maintain credit balances, investigate billing problems, and review refund requests.
- Detect abuse, diagnose errors, maintain service reliability, and improve product workflows.
- Understand how the product is used, for example which steps of the localization workflow people complete, so we can fix problems and improve features.
- Respond to support, privacy, and product communications.
4. AI processing and service providers
When you request an AI feature, the content and instructions needed for that request may be sent to the configured AI provider. If you use your own API key, the provider you select also processes the request under that provider's terms and policies.
StoreLocale also relies on providers for services such as hosting and storage, authentication, email, payment processing, product analytics, and error monitoring. Those providers may process information needed to perform their services. Our analytics providers are PostHog, Inc. (United States), for product analytics, session recordings, and error tracking, and Google, for Google Analytics. Both act as processors on our behalf.
5. Browser and cloud storage
Some editor data and preferences may be kept in your browser, while account-linked projects and media may be stored using StoreLocale's cloud services. Clearing browser storage can remove local-only data. Do not upload content unless you have the right to process it.
StoreLocale uses cookies, local storage, and similar browser storage that are strictly necessary for sign-in, security, preferences, and editor state. These are always active. Your cookie choice itself is stored in your browser so we can respect it on your next visit.
6. Analytics cookies, session recordings, and your choice
On your first visit, a cookie banner asks whether you accept analytics cookies. No analytics events are collected before you choose. You can change your choice at any time with the Cookie settings link in the site footer or the dashboard footer.
If you accept:
- PostHog stores a pseudonymous identifier in a first-party cookie and local storage, and records events such as pages viewed, buttons clicked, and product features used.
- When you are signed in, these events are linked to your account identifier, and your email address, account role, and account milestones (for example, when you created your first project) are stored with your analytics profile.
- PostHog may record your session (a reconstruction of page structure and interactions) to help us find usability problems. Form inputs are masked, and your screenshots, project and slide names, detected or translated text, and other content you create are masked or excluded from recordings. Admin pages are never recorded.
- Browser errors are reported to PostHog error tracking so we can fix them.
- Google Analytics is loaded and sets its own cookies to measure visits and page views. Advertising features and Google signals are disabled.
- Your IP address is used to derive an approximate location (such as country and city).
If you reject, no analytics cookies are set, Google Analytics is not loaded, no session is recorded, and your browser is not linked to your account. PostHog then records usage events without cookies or stored identifiers and counts unique visitors with a privacy-preserving hash calculated on PostHog's servers, so these events are not linked to you or your account.
The legal basis for analytics cookies and session recordings is your consent, which you can withdraw at any time. Withdrawing consent does not affect processing that took place before.
7. Product telemetry for signed-in users
When you are signed in, our servers record key product events regardless of your cookie choice, such as account creation, sign-in and security changes, project creation and deletion, AI text detection, translation and image generation results, credit usage, refunds, and purchases. These events are linked to your account identifier and sent to PostHog so we can operate, secure, bill for, and improve the service.
These events contain counts, settings, and technical details, such as selected languages, quality tier, credits charged, duration, and error types. They never contain your screenshots, text, translations, prompts, file or project names, payment card details, or API keys. Server errors may also be reported to PostHog error tracking. The legal basis for this processing is our legitimate interest in providing a reliable and secure service. You can object by contacting us at the address below.
8. International data transfers
Oxbit Labs is based in Bursa, Turkey. PostHog, Google, and some of our other providers process information in the United States and other countries that may not provide the same level of data protection as your country. Where required, these transfers rely on appropriate safeguards, such as data processing agreements that include the European Commission's Standard Contractual Clauses, together with additional security measures.
9. Retention and security
Information is retained for as long as reasonably needed to operate the service, support users, maintain security and billing records, or meet applicable obligations. Retention can vary by information type and account status.
Session recordings are deleted automatically after at most 90 days. Analytics events are kept for up to 24 months and are then deleted or retained only in aggregated form. Google Analytics data is kept for up to 14 months. When you ask us to delete your account data, we also request deletion of the analytics data linked to your account identifier.
StoreLocale uses technical and organizational safeguards appropriate to the product, but no online service or storage method can guarantee absolute security. Keep your password and any personal API keys confidential.
10. Your choices and requests
You may contact support to request access to, correction of, or deletion of personal information associated with your account, or to object to processing based on legitimate interest, subject to applicable law and records that must be retained for security, billing, or other legitimate purposes. Oxbit Labs may need to verify your identity before completing a request.
You can accept or reject analytics cookies at any time with the Cookie settings link in the footer. You can also delete cookies and local storage in your browser settings; the cookie banner then appears again on your next visit.
11. Policy updates and contact
This page may be updated as StoreLocale changes. The date at the top shows the current published version. For questions or requests, email [email protected] or visit the Contact page.