Privacy Policy
Last updated 2026-08-14
JukeLingo is a certified document translation service. We handle sensitive identity documents, so we treat your privacy as a load-bearing part of the product. This policy explains what we collect, why, who we share it with, and what control you have over your data.
Who we are
"JukeLingo," "we," "us," or "our" refers to JukeLingo and its operator. You can reach us at [email protected].
What we collect
We collect only what we need to provide the translation service and run the business.
| Category | What's in it | Why we need it |
|---|---|---|
| Account | Email address (encrypted at rest) | Magic-link login, order receipts, delivery emails |
| Uploaded documents | The source document(s) you upload — typically birth certificates, passports, marriage certificates, transcripts, DMV records, and similar identity or filing documents. Stored encrypted at rest in our document-storage layer. | The thing we're translating. Without it there is no service. |
| Payment metadata | Charge ID, last 4 digits of card, billing ZIP, supplied by our payment processor. We never see your full card number — you enter it directly into the processor's payment form. | Charge you, issue receipts, handle refunds and chargebacks |
| Phone number (optional) | Encrypted at rest. Collected only when you opt in to SMS notifications. | Text you when your translation is ready |
| Shipping address (optional) | Collected only if you purchase the Print add-on | Ship the printed copy via USPS |
| Technical metadata | IP address, user agent, request timestamps, action logs | Abuse prevention, rate limiting, security audit trail |
| Affiliate attribution | If you arrived via an affiliate link, a tracking cookie identifies the referring affiliate | Pay the affiliate the commission they're owed |
How your document is translated
Your uploaded document is processed by JukeLingo's translation system — a proprietary pipeline that produces the formatted translation, runs completeness and quality checks, and prepares the certification page. Depending on the service tier you select, human review may also occur — on the Pro tier, a JukeLingo translator reviews and signs the certification.
As part of this pipeline, document content is transmitted to one or more trusted commercial technology providers under our enterprise or API contracts, whose language-processing models perform translation steps within our workflow. Each provider receives the document content and our processing instructions; we do not send your account email, payment details, or other identifying metadata alongside the document. Each provider processes the content under its applicable terms of service and, on the plans we use, does not train its models on submitted content. We will update this policy if any provider's terms change in a way that affects this commitment.
The current list of these providers — and every other third party that handles your data — is maintained at /subprocessors.
Who else receives your data
We use third-party "subprocessors" — vendors that handle specific functions on our behalf. The full list with what each receives and where they're located is at /subprocessors. Highlights:
- Payment processor: handles card transactions (you enter card details directly into the processor's iframe — we never touch them)
- Database and authentication provider: hosts the database and runs the magic-link authentication
- Document-storage provider: stores your uploaded documents and translated outputs (encrypted at rest)
- Malware-scanning provider: scans uploads for malware before they enter our pipeline
- Email and SMS providers: deliver transactional email; SMS only if you opt in
- Error-monitoring and product-analytics providers: help us diagnose issues and improve the product
What we do NOT do
- We do not sell your personal information. No data-broker relationships, no advertising-network sales.
- We do not use your documents to train AI models. Neither our own — we don't train models — nor the third-party AI providers we use for translation, under the API plans we use.
- We do not share your data with advertisers.
Retention
We retain different categories for different periods.
- Customer-controlled deletion of uploaded documents and translated outputs. You can request deletion at any time via /api/gdpr/delete. When you do, we permanently delete your uploaded documents and translated outputs from our storage, and we irreversibly clear identifying account PII (email, phone, name). Order records are retained in an anonymized form for accounting and fraud-prevention purposes.
- Automatic retention period. We are implementing an automated retention process under which uploaded source documents and translated outputs will be deleted on a fixed schedule following order completion. We will update this policy with the specific window when that process is in place. Until then, customer-controlled deletion (above) is the canonical mechanism.
- Account email and order history. Retained while your account is active. On deletion, identifying PII is zeroed but anonymized order records may be retained for refund auditability, tax compliance, and fraud-detection reference for the period required by applicable law (typically up to 7 years for financial records).
- Legal exceptions. Certain records — including those required for tax, accounting, audit, fraud-prevention, or other legal obligations — may be retained for longer periods as required by law, even after a deletion request.
- Audit logs. Retained for security, abuse prevention, and incident investigation. Audit logs reference user IDs and event metadata; PII is redacted from log payloads where applicable.
- Analytics events. Retained by our analytics provider according to its own retention policy.
Your rights
Depending on where you live, you have some or all of the following rights regarding your personal information:
- Right to know / access: see what data we hold about you
- Right to delete / erasure: ask us to delete your data
- Right to correct / rectify: fix inaccurate data
- Right to portability: receive your data in a machine-readable format
- Right to opt out of "sale" or "sharing" (CCPA / CPRA and similar state laws): we don't sell data, but you can formally opt out at /do-not-sell
- Right to non-discrimination: we will not deny service or charge you more for exercising any of these rights
- Right to object to processing (GDPR): contact us
How to exercise your rights
- Export your data: sign in and call /api/privacy/export — you'll receive a JSON file with everything we have linked to your user ID, with PII decrypted for your benefit.
- Delete your data: sign in and call /api/gdpr/delete — we will permanently delete your uploaded documents from storage, zero out your encrypted PII (email, name, phone), and mark your account as deleted. Order history is retained in an anonymized form for accounting compliance.
- Unsubscribe from marketing: click the unsubscribe link in any marketing email. Transactional emails (order receipts, delivery notifications) cannot be opted out of while you have an active order.
- Opt out of "sale or sharing" (CCPA / CPRA): visit /do-not-sell
- Other requests: email [email protected]. We respond within 30 days (often faster).
Cookies and tracking
We use a small number of cookies:
- Authentication (essential): keeps you signed in
- Order access tokens (essential): set when you click an order-status link from email so you can view your order without re-signing-in
- Partner attribution (essential for affiliate payments): set when you arrive via affiliate or partner links
- Analytics: track page views and feature usage to help us improve the product
- Marketing: attribute affiliate referrals
International data transfers
JukeLingo is operated from the United States. Most of our subprocessors are also U.S.-based or operate U.S. data centers. If you access JukeLingo from outside the U.S. (including the EU, UK, Canada, or elsewhere), your data will be transferred to and processed in the United States. We rely on the standard contractual clauses and similar transfer mechanisms with our subprocessors where applicable.
Children's privacy
JukeLingo is intended for adults handling their own or family members' documents for immigration, DMV, education, or travel purposes. The service is not directed at children under 18, and we do not knowingly collect information from anyone under 18. If you believe we have collected information from a minor, please email [email protected] and we will delete it.
Security and breach notification
We protect your data with industry-standard administrative, technical, and organizational safeguards, including encryption in transit and at rest, authentication controls, access restrictions, logging, and monitoring. We continuously evaluate and update these safeguards as the threat environment evolves. No system is unbreakable. If a security incident affects your personal data, we will notify you within the timeframes required by applicable law (e.g. 72 hours under GDPR for affected EU residents; varying state-law deadlines in the United States).
Changes to this policy
We may update this policy. Material changes will be posted here with a new "Last updated" date. Where the change materially expands what we collect or share — or where applicable law requires it — we will notify active users via email.
Contact
Privacy questions: [email protected]
Security disclosures: [email protected]