Privacy Policy

This Privacy Policy explains how Fumi ("we", "us") collects, uses, and shares information when you use the Fumi translation management platform at usefumi.com and app.usefumi.com (the "Service"). By using the Service, you agree to the practices described here.

1. Information we collect

Account information. When you sign up we collect your email address and, if you sign in with GitHub, Google, or Microsoft, the name and avatar those providers share with us. We do not receive or store your password for those providers.

Content you upload. The Service exists to manage translations, so we store the translation files, keys, source strings, translated strings, glossaries, and related metadata you or your team upload or create. You control this content and can delete it at any time.

Workspace and billing information. Workspace names, member roles, plan selection, and invoices. Payment card details are collected and stored by our payment processor, Stripe, not by us.

Usage and technical data. Server logs, IP address, browser type, the pages you visit, and actions you take in the Service, such as imports, exports, and translation runs. We use this to operate, secure, and improve the Service.

Cookies. We use strictly necessary cookies to keep you signed in, protect against cross-site request forgery, and remember preferences such as your interface language. We do not use advertising cookies.

2. How we use information

• To provide, operate, and maintain the Service, including generating AI translations you request.
• To process payments and manage your subscription.
• To send transactional messages such as sign-in links, invitations, and billing notices.
• To respond to support requests.
• To detect, prevent, and investigate abuse, fraud, and security incidents.
• To understand how the Service is used so we can improve it.

We do not sell your personal data, and we do not use the content you upload to train machine-learning models.

3. AI translation

When you request an AI translation, the relevant source strings, context, and glossary terms are sent to a third-party model provider to generate the translation. We currently use Anthropic, OpenAI, and Google as model providers. We use their API services under terms that prohibit using your content to train their models. Content is sent only when you trigger a translation, and only the content required for that translation.

4. Who we share information with

We share information only with service providers that help us run the Service:

• Hosting and infrastructure providers that store our databases and uploaded files.
• AI model providers, as described above.
• Stripe, for payment processing.
• Resend, for transactional email delivery.
• GitHub, Google, and Microsoft, when you choose to sign in with those providers.

We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition, or sale of assets, in which case we will notify you.

Within a workspace, your name, email address, and activity are visible to other members of that workspace.

5. Data retention

We keep your account and workspace data for as long as your account is active. When you delete a workspace, its content is deleted from our production systems promptly and from backups within 30 days. When you delete your account, we delete your personal data within 30 days, except where we are required to keep it for legal or accounting purposes.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to restrict or object to its processing, and to lodge a complaint with a supervisory authority. You can exercise most of these rights directly from your account settings. For anything else, contact us at the address below.

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your data on the basis of performing our contract with you, our legitimate interests in operating and securing the Service, and, where required, your consent.

7. International transfers

Our service providers may process data in countries other than your own. Where data is transferred out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

8. Security

We use industry-standard measures to protect your data, including encryption in transit, hashed session tokens, optional two-factor authentication, and role-based access control within workspaces. No system is perfectly secure, so please use a strong authentication method and report any concerns to us promptly.

9. Children

The Service is not directed at children under 16, and we do not knowingly collect their data.

10. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the date above. For material changes we will notify you by email or in the Service.

11. Contact

Questions or requests about your data? Email us at [email protected].