1. Data Controller
Juritas, based in Barcelona, Spain, is the data controller for personal data processed through the Platform. For data protection inquiries, contact us at hello@juritas.co.
2. Data We Collect
From Customers
Contact information provided during checkout (name, email address), documents uploaded for translation (which may contain personal data such as names, dates of birth, addresses, and identification numbers), payment information (processed securely by Stripe — we do not store card details), and technical data such as IP address, browser type, and device information.
From Translators
Registration details (name, email address, phone number), professional credentials and government authorization documents, banking or payment details for commission payments, and Telegram contact details (if provided for job notifications via our Telegram bot).
3. How We Use Your Data
We process personal data for the following purposes and legal bases under the GDPR:
Contract performance (Art. 6(1)(b)): Processing orders, facilitating communication between customers and translators, processing payments and commissions, delivering certified translations, and providing customer support.
Legitimate interest (Art. 6(1)(f)): AI-assisted document analysis for pricing and workflow optimization, fraud prevention and platform security, service improvement and analytics, and administrative notifications.
Legal obligation (Art. 6(1)(c)): Tax and accounting records, VAT compliance, and responding to lawful data access requests.
Consent (Art. 6(1)(a)): Marketing communications (where applicable) and non-essential cookies.
4. AI Document Processing
When customers upload documents, we use AI technology (powered by Anthropic Claude) to analyze the document for language detection, word count estimation, and document type classification. This analysis is performed solely to generate accurate price quotes and streamline the translation workflow. Documents sent to the AI service are processed in real-time and are not used to train AI models. We have a data processing agreement with Anthropic governing the handling of this data.
5. Data Sharing
Translators receive the customer's document and necessary context to perform the translation. Translators are bound by confidentiality obligations.
Service providers: Stripe (payment processing), Supabase (database hosting), Anthropic (AI document analysis), Resend (transactional email delivery), Vercel (platform hosting), and Telegram (translator notifications).
We do not sell personal data. We do not share personal data with third parties for marketing purposes.
6. International Data Transfers
Some of our service providers may process data outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions where applicable (e.g., the EU-US Data Privacy Framework), and binding data processing agreements with each provider.
7. Data Retention
Uploaded documents and translations are retained for 90 days after order completion for quality assurance and dispute resolution, then permanently deleted. Account data for translators is retained for the duration of their active registration plus 3 years for tax and legal compliance. Payment records and invoices are retained for 5 years as required by Spanish tax law. Technical logs are retained for 30 days.
8. Your Rights Under the GDPR
As a data subject in the EU, you have the right of access (request a copy of your personal data), right to rectification (correct inaccurate data), right to erasure (request deletion, subject to legal retention obligations), right to restriction of processing, right to data portability (receive your data in a structured, machine-readable format), right to object to processing based on legitimate interest, and the right to withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at hello@juritas.co. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — AEPD) or the supervisory authority in your country of residence.
9. Security
We implement appropriate technical and organizational measures to protect personal data, including encryption in transit (TLS/SSL) and at rest, access controls and authentication, regular security reviews of our infrastructure and service providers, and confidentiality obligations for all translators.
10. Children's Privacy
Our Platform is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. Documents uploaded for translation may contain personal data of minors (e.g., birth certificates); such data is processed solely for the purpose of completing the translation order.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated to registered users via email. The “Last updated” date at the top indicates the most recent revision.
12. Contact
For privacy-related questions or to exercise your data rights, contact us at hello@juritas.co.