Privacy Policy
Last updated: 8 September 2026
This Policy explains how QUENTICS OÜ processes personal data in connection with QueTranslations.
Who We Are
Controller. QUENTICS OÜ, registration number 17569282, Rotermanni tn 6, Kesklinna linnaosa, 10111 Tallinn, Harju maakond, Estonia, is the controller of personal data processed for operating accounts, payments, customer support, website administration and its own legal obligations.
Service-related roles. When a business customer submits personal data contained in documents solely for translation, QueTranslations may act as a processor on that customer’s behalf. The parties may enter into a separate Data Processing Addendum where Article 28 of the GDPR applies.
Contact. Privacy questions and data-subject requests may be sent to info@quetranslations.com.
Scope
Coverage. This Privacy Policy applies to quetranslations.com, Accounts, Balance transactions, AI Translation, Human Translation, uploaded files, translated files, support communications and related technical records.
Third-party services. Third-party websites, banks, card issuers and services linked from the website are governed by their own privacy notices. QueTranslations is responsible only for processing within its control.
Personal Data We Process
Account and contact data. This may include name, email address, authentication identifiers, organisation details, country, preferred language and Account settings.
Order data. This includes source and target languages, selected AI or Human Translation, word count, pricing, status, delivery information, instructions, revision requests and complaint history.
Customer Content. Uploaded and translated files may contain names, contact details, identification data, employment information, financial information or other personal data relating to the user or third parties. QueTranslations does not intentionally require special-category or highly sensitive data unless it is genuinely necessary for the requested translation.
Payment data. QueTranslations receives transaction references, currency, amount, payment status, limited card metadata and refund or chargeback information. Full payment-card details are generally collected directly by the payment processor rather than stored by QueTranslations.
Strong customer authentication and 3D Secure. Card payments are authenticated using 3D Secure (for example Visa Secure or Mastercard Identity Check). During that step the payment processor, the card scheme and the card issuer exchange data needed to verify the cardholder, which may include the device, browser and network information of the person paying, the transaction details and the outcome of the authentication. This processing is carried out by the payment processor and the card issuer under their own notices, is required by law for strong customer authentication and for fraud prevention, and QueTranslations receives only the authentication result rather than the credentials used.
Technical data. This may include IP address, device and browser information, timestamps, security logs, cookie identifiers, consent choices and diagnostic events.
Communications. QueTranslations processes emails, support requests, feedback, notices, identity-verification information and records needed to address complaints or exercise legal rights.
How We Obtain Data
Direct collection. Most data is provided when a user creates or uses an Account, adds funds, uploads a file, confirms an Order, requests support, seeks a refund or changes cookie preferences.
Automatic collection. Technical and cookie data may be collected automatically when the website or Services are used, subject to consent requirements described in the Cookie Policy.
Third-party data. Payment processors, fraud-prevention providers and infrastructure providers may return transaction, security or service status information. Customer Content may also contain data about individuals who are not the Account holder.
Purposes and Legal Bases
Contract performance. Account administration, Balance management, Order processing, translation, delivery, revision, support and refunds are processed because they are necessary to enter into or perform a contract with the user.
Legal obligations. Transaction, tax, accounting, sanctions, consumer-complaint and regulatory data may be processed to comply with legal duties binding on QueTranslations.
Legitimate interests. QueTranslations may process limited data to secure the Services, prevent fraud, investigate misuse, maintain business records, improve reliability, establish or defend legal claims and understand service performance, provided those interests are not overridden by individual rights.
Consent. Consent is used where required for non-essential cookies or optional communications. Consent may be withdrawn at any time without affecting processing already carried out lawfully.
Special-category data. Where Customer Content contains special-category data, QueTranslations processes it only to the extent a lawful Article 9 GDPR condition applies or, when acting as a processor, under the documented instructions and responsibility of the relevant controller.
AI Translation
Automated processing. For AI Translation, necessary portions of Customer Content are transmitted to third-party AI infrastructure and model providers to generate the requested translation. The output is then returned to QueTranslations and made available to the user.
No training use. QueTranslations does not use Customer Content or translations to train AI models and does not opt in to provider programmes that share API content for model training.
Provider retention. Depending on the technical endpoint and contractual controls used, an AI provider may temporarily retain prompts, outputs or related security metadata for service operation, abuse monitoring or legal compliance. QueTranslations seeks to minimise submitted data and uses available contractual and technical controls appropriate to the service.
No significant automated decisions. AI Translation generates language output but is not used by QueTranslations to make decisions producing legal or similarly significant effects about an individual.
Human Translation
EEA translators. Human Translation is performed by translators located within the European Economic Area. They receive only the Customer Content and instructions reasonably necessary for the assigned Order.
Confidentiality. Human translators are subject to contractual confidentiality and data-protection obligations and may not use Customer Content for their own purposes.
Recipients
Service providers. Personal data may be disclosed to hosting and storage providers, AI infrastructure providers, payment processors, email and support providers, security and fraud-prevention providers, analytics providers used with valid consent, and professional advisers where necessary.
Authorities and transactions. Data may be disclosed to courts, regulators, law-enforcement bodies or other authorities where legally required, and to a buyer or successor in a genuine corporate transaction subject to appropriate confidentiality safeguards.
No sale. QueTranslations does not sell Customer Content or personal data for money and does not permit human translators to exploit it independently.
International Transfers
EEA and other locations. Although human translators are located within the EEA, some technology providers or their subprocessors may process data outside the EEA. Where the destination is not covered by an adequacy decision, QueTranslations relies on an approved transfer mechanism such as Standard Contractual Clauses and supplementary safeguards where required.
Further information. Users may request information about the relevant transfer safeguards by contacting info@quetranslations.com. Confidential or commercially sensitive details may be redacted where permitted.
Retention
Files and translations. Customer files and completed translations may remain available in the Account while it is active. They are automatically deleted after 24 consecutive months of Account inactivity and may be deleted earlier through Account controls or a valid request, unless temporary preservation is necessary for an active dispute, security incident or legal obligation.
Provider and backup copies. Deletion from active systems does not always remove residual encrypted backup copies immediately. Such copies are isolated from ordinary use and removed through the applicable backup cycle. AI providers may retain limited content or logs for their own defined security or legal periods as described above.
Account data. Core Account data is retained while the Account remains open and for a reasonable period after closure to complete deletion, prevent fraud, resolve disputes and comply with law.
Transaction records. Accounting, tax, payment and business records may be retained for at least seven years where required under Estonian law, even if associated files are deleted.
Support and claims. Support correspondence and complaint records are retained for as long as reasonably necessary to resolve the matter and establish, exercise or defend legal claims.
Security
Safeguards. QueTranslations uses proportionate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure and destruction. Measures are reviewed in light of the sensitivity of Customer Content, available technology and implementation cost.
No absolute guarantee. No internet service can guarantee absolute security. Users should protect Account credentials, avoid unnecessary sensitive data, maintain local copies and notify QueTranslations promptly of suspected compromise.
Individual Rights
GDPR rights. Subject to applicable conditions, an individual may request access, correction, deletion, restriction, portability or objection, and may withdraw consent at any time.
How to exercise rights. Requests should be sent to info@quetranslations.com. QueTranslations may request proportionate information to verify identity and authority, particularly where Customer Content concerns third parties or a business customer controls the data.
Limitations. A request may be limited or refused where permitted by law, including where retention is legally required, disclosure would adversely affect another person’s rights, or QueTranslations processes the data solely on documented instructions of another controller.
Complaint. Individuals may lodge a complaint with the Estonian Data Protection Inspectorate at https://www.aki.ee/en or with the competent supervisory authority in their EU or EEA country of residence or work.
Children
Age restriction. The Services are intended for adults and are not directed to persons under 18. QueTranslations does not knowingly create Accounts for children. A parent or guardian who believes a child has submitted personal data should contact QueTranslations.
Changes and Contact
Updates. This Privacy Policy may be updated to reflect legal, technical or service changes. The current version and date will be published on the website, and material changes will be communicated where reasonably appropriate.
Contact details. Privacy correspondence may be sent to QUENTICS OÜ at info@quetranslations.com or Rotermanni tn 6, Kesklinna linnaosa, 10111 Tallinn, Harju maakond, Estonia.