Last updated: 4 November 2026

Localize.io Data Processing Addendum

This addendum is part of the Terms of Service between Alconost Inc. and each client of Localize.io, and applies whenever the content a client sends contains personal data. The client is the controller of that data; Alconost is its processor. A signed copy is available on request at [email protected].

1. What it covers

Personal data that appears in what the client sends: strings and their context, screenshots, glossaries, translation memory, style guides and instructions, and the translations and reviews made from them. Typically this is names, email addresses or other details of the client’s own users that appear in product text or screenshots. The service is not meant for special categories of personal data, and the client will not send them.

2. Instructions

Alconost processes that data only to translate, check, review and deliver the client’s jobs, and to keep the client’s material for its next jobs, as the client’s configuration and orders direct, and for no other purpose.

3. AI models

Each job is sent to the AI models the client’s configuration or order names, directly or through OpenRouter, and every call asks the model provider for zero data retention, so that it keeps nothing after answering. Models whose providers may keep data are offered only to a client that turns zero data retention off on its own OpenRouter key; those calls then run under the client’s own agreement with OpenRouter.

4. Linguists

A review sends its strings, their context and screenshots to the linguist the client names. Alconost’s linguists are bound to confidentiality by their agreement with Alconost. Linguists the client adds itself are the client’s own.

5. Subprocessors

The client authorises the subprocessors listed on the subprocessors page. Alconost gives account owners at least 30 days’ notice by email before adding or replacing one. The client may object on reasonable data protection grounds; if no solution is found, it may end the service, and is not charged for the notice period. Alconost imposes data protection obligations on each subprocessor no less protective than these, and remains responsible for them.

6. Confidentiality and security

Everyone Alconost lets process the data is bound to confidentiality. The measures in place include: access to the servers only over an authenticated private network; encryption of all traffic in transit; API keys stored only as hashes; linguists’ signing keys stored encrypted; each client’s material kept apart and never shown to another client; and every action in an account recorded in its activity log.

7. Personal data breaches

Alconost notifies the client without undue delay, and within 72 hours of becoming aware of a breach affecting its data, with what is known, and keeps the client informed as more is learned.

8. Assistance

Alconost helps the client respond to requests from data subjects, and with data protection impact assessments and consultations with authorities, as far as the service allows. The client can download and delete its material through the API at any time.

9. Deletion and return

When the agreement ends, the client can download its material for 30 days; Alconost then deletes the client’s content, unless the law requires it to be kept.

10. International transfers

Alconost’s servers are in the European Union. Where personal data goes to a subprocessor outside the EEA or the UK without an adequacy decision, the transfer relies on the Standard Contractual Clauses adopted by Commission Decision (EU) 2021/914, and the UK addendum to them, which are incorporated in this addendum by reference.

11. Audits

Alconost makes available the information needed to show compliance with this addendum, and answers a reasonable security questionnaire once a year. Any further audit is agreed in advance, at the client’s cost, and under confidentiality.

12. Order of precedence

Where this addendum and the Terms of Service disagree about personal data, this addendum prevails; where the Standard Contractual Clauses apply, they prevail over both.