Legal
Privacy policy
Libris Translate runs on your server, so the publisher handles very little about you: what a licence needs, your messages to support, and nothing of your books. Here is all of it.
Last updated:
Who is responsible
The controller is Sébastien Charles Julien ANGERARD (EI), publisher of Libris Translate (see the legal notice). For any question or request about your data, write to licences@libris-translate.com.
This website
This site sets no cookie, carries no advertising and loads nothing from anyone else. The servers that deliver it keep technical access logs (IP address, page requested, date, browser) for security.
Audience measurement. To know which pages are read and where visitors come from, each page tells GoatCounter, installed on the publisher’s own server (stats.libris-translate.com), its address without parameters, its title, the site you came from and the width of your screen; a few actions (sending the trial form, paying online, opening the installation, downloading a file) add their name. GoatCounter uses your IP address only to find the country, and records neither the address nor any identifier: it cannot tell that two pages were read by the same person, here or on another site. It keeps only counts (per page, day, source site, browser, system, screen size and country) for 24 months at most, to measure the audience of this site and nothing else: they are not combined with other data and are passed on to no one.
The purpose is this site’s audience statistics, on the basis of the publisher’s legitimate interest. The measurement is set up to meet the conditions under which the CNIL exempts audience measurement from consent (article 82 of the French Data Protection Act). You can object at any time: with your browser’s “Global Privacy Control” or “Do Not Track” setting on, nothing is sent; blocking stats.libris-translate.com has the same effect.
The trial form sends your email address straight from your browser to the licence server; this site never receives it. The server uses it to send a confirmation link, then a key once you confirm, and to grant only one trial per address. If you tick the box for tips, it also sends you up to four short emails of advice during the trial.
The waiting-list form of the hosted version works the same way: your address goes straight to the licence server, which sends a confirmation link; the address is on the list only once you follow it.
What is collected, and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Sending the trial confirmation link, then the key, or delivering a purchased licence; answering your messages and invoicing | Performance of the contract (licence, trial) |
| Name or company if you give them, billing address, VAT number | Invoicing | Legal obligation |
| Fingerprint (SHA-256) of the licence key, installation identifier, hashed machine fingerprint, Libris version, word counters, number of active accounts | Running the licence: activation, machines, quota | Performance of the contract |
| IP addresses (trial requests, activations, event log, sessions, access logs) | Security, preventing trial abuse | Legitimate interest |
| Event log (activations, renewals, administrative actions) | Security, keeping proof of what happened | Legitimate interest |
| A fingerprint (HMAC) of each address that has had a trial | Granting only one trial per address | Legitimate interest (preventing fraud) |
| Email address and language of a trial that ticked the box for tips, with the date of that choice | Sending up to four tips during the trial (installation, first book, end of the trial) | Consent, withdrawn in one click from any of these emails |
| Email address and language on the hosted-version waiting list, dates of request and confirmation | Telling you when the hosted version opens, and nothing else | Consent, withdrawn in one click from any of these emails |
Support and quotes
The emails you send to support@libris-translate.com and to licences@libris-translate.com are received in the publisher’s support desk, Libris Ambrosium (support.libris-translate.com), hosted by IONOS SE in Germany. It keeps your address, your name if the message gives it, and your messages with their attachments, to handle your request and answer it (performance of the contract, or steps taken at your request before a purchase).
Reply drafts may be prepared by an AI assistant, OpenAI’s Codex (OpenAI, United States), from the text of your request; it is the only AI assistant that prepares them. This relies on the publisher’s legitimate interest in answering you quickly and well. No reply is sent without being checked by a person. This transfer outside the European Union relies on OpenAI’s contractual safeguards (the European Commission’s standard contractual clauses). You can object at any time, without giving a reason: say so in your message, or write to support@libris-translate.com, and your request will be handled without any AI assistant.
Enterprise quotes: to draw up a quote, the publisher records the company, the contact person, their email address, the postal address and the VAT number (steps taken at your request before a contract). They are kept with the quote. A quote is paid through Link (Stripe), like online purchases.
How long it is kept
- Customer data: 3 years after the last contact, once no licence is active.
- A trial not followed by a purchase: deleted 12 months after the trial ends.
- IP addresses: 12 months.
- Audience counts of this site: 24 months; they contain no IP address.
- Event log: 24 months, then anonymised.
- Invoices: 10 years, as the law requires.
- The text of the emails we send: erased once delivered, or 30 days after a delivery that failed.
- Backups of the licence server: 35 days. Data deleted from the server disappears from the backups within that time.
- Support requests: 2 years after the request is closed.
- The original email file of a support message is deleted after 90 days; its cleaned text stays with the request until the request is deleted.
- Ambrosium's daily backups rotate after 35 copies (normally 35 days), so data erased from its active database may remain in those copies until rotation. Separate backups made before a version are not deleted automatically.
- Enterprise quotes: an issued quote stays identifiable while open. 183 days after it is paid, declined, expired, cancelled or replaced, its customer details and PDF are erased from the active quote record; an unissued draft inactive for 183 days is deleted. The company or person's name recorded when the quote was issued may remain in Ambrosium's event log for up to 730 days from that event. Deleted data may also remain in its backups as described above. The accounting record of a paid sale is kept with its invoice.
- Tips during the trial: they stop when you unsubscribe or when the trial ends; the choice itself stays with the trial's data.
- Waiting list: a confirmation link not followed is deleted after 24 hours; a confirmed address is deleted as soon as you unsubscribe, or 3 years after its confirmation.
- The trial fingerprint is kept with no time limit, so that the one-trial rule still holds after the rest is deleted. It is not your address in clear: it cannot be turned back into it without a secret key held by the licence server.
Your books stay with you
Libris runs on your own server. The publisher receives nothing of your books, translations, glossaries or titles. The passages being translated go only to the model provider you configured, under that provider’s own terms; for that processing, you or your organisation are the controller, not the publisher.
Who receives it
- Only the publisher. Your data is not sold, rented or used for advertising.
- Processors: IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany) hosts, in Germany, the virtual server that runs this site, the licence server and the support desk. OVH SAS (2 rue Kellermann, 59100 Roubaix, France) hosts, in France, the reverse proxy that public traffic goes through first and the publisher’s mail server. The reverse proxy, the mail server, the image registry and the source code are run by the publisher himself.
- Support reply drafts: OpenAI (United States), whose Codex assistant may prepare drafts from the text of a support request, as described above.
- Online payment: Link and Stripe (the Stripe group), which sell the online licence and the Pro subscription of a quote as reseller and merchant of record, receive the address you give, your name, your billing address and your payment details, to take the payment, compute the VAT of your country and meet their own legal duties (fraud prevention, anti-money laundering); for that sale they are controllers in their own right. The card number never reaches the publisher. Stripe may process data in the United States under the EU–US Data Privacy Framework and the European Commission's standard contractual clauses; see stripe.com/privacy and link.com/privacy. The licence server keeps only the payment references needed to deliver and renew the licence.
- Apart from online payment and support reply drafts, no data leaves the European Union.
Your rights
You may access, correct, delete, restrict, object to the processing of, and export your data. Write to licences@libris-translate.com from the address concerned; we answer within one month and send an export on request. You may withdraw a consent (trial tips, waiting list) at any time with the unsubscribe link in each of those emails. Invoices are kept for the period the law sets, and the trial fingerprint is kept to enforce the one-trial rule, even after an erasure request.
You may also lodge a complaint with the French data protection authority, the CNIL, or with the authority of the country where you live.
Security
The licence server is reached over HTTPS only, administered by the publisher alone and backed up every day; backups are kept 35 days. Messages from installations are signed. Passwords, API keys and book text are never sent to it.
Changes
This policy may change; the date at the top says when it last did. A change that affects how customer data is handled is announced by email.