Privacy Policy

LinguaLive ("LinguaLive", "we", "our") is operated by Rafael Dejesus Atencia Mercado, a natural person residing in Bogotá, Colombia. We act as the data controller for the personal data we process about you when you use our website and applications.

We collect: (a) account data (email, name, password hash, profile preferences, preferred languages); (b) usage data (conversations metadata, credit transactions, call duration, device and browser information, IP address, approximate location derived from IP); (c) content you submit (chat messages, dictated audio, translated text, optional images); and (d) payment metadata returned by our payment provider (last four digits of card, country, transaction identifiers). We do not store full card numbers — they are handled exclusively by Paddle.

We use your data to: (a) create and maintain your account; (b) provide real-time translation, voice, video and dictation features; (c) bill your subscriptions and credit packs through Paddle; (d) prevent fraud and abuse and enforce rate limits; (e) provide customer support; (f) improve product quality and security through aggregated telemetry. We do not sell your personal data and we do not use your conversation content to train third-party AI models.

We process your data on the basis of: performance of our contract with you (providing the service), our legitimate interests (security, fraud prevention, product improvement), your consent where required (optional cookies, marketing communications), and legal obligations (tax, accounting, responding to lawful requests).

We use cookies and browser local storage that are strictly necessary to keep you signed in, remember your language preference and maintain your session. We do not use third-party advertising cookies. Some product features (such as Paddle checkout) may set their own essential cookies when you initiate a purchase.

We share the minimum data necessary with trusted providers acting as our processors: Supabase (authentication, database hosting and file storage in the EU/US), OpenAI (real-time speech-to-text, translation and voice synthesis — audio and text are processed transiently and are not used to train their public models under our API agreement), Paddle.com Market Limited (Merchant of Record, payment processing, invoicing and tax compliance), and Cloudflare (content delivery, WebRTC TURN relays, DDoS protection and edge runtime). Each provider operates under contractual data-protection terms.

Some of our processors are located outside your country of residence. When international data transfers occur, we apply appropriate contractual and security measures required by applicable law to protect personal information.

We keep your account data for as long as your account remains active. Conversation history and call recordings are retained for the period associated with your plan and can be deleted by you at any time from your settings. Billing records are retained for the period required by applicable tax law (typically up to 10 years). You can request full account deletion at any time by contacting us — we will erase your data within 30 days, except information we are legally required to retain.

Subject to applicable law, you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to withdraw consent at any time. Depending on your country of residence, you may also have the right to lodge a complaint with the relevant data protection or consumer protection authority. To exercise any right, contact us at rafaelatencia053@gmail.com.

We protect your data with industry-standard technical and organisational measures, including encryption in transit (TLS), encryption at rest, row-level security in our database, least-privilege access controls and continuous monitoring.

Questions about this Privacy Policy or your personal data? Write to rafaelatencia053@gmail.com.