1. Controller
UnitedLang – George MikhailAlte Regensburger Str. 28a
84030 Ergolding, Germany
Email: support@unitedlang.com
Phone: +49 (0) 152 5579 0583
No data protection officer has been appointed. Please send privacy requests to the email address above. Our Legal Notice contains further provider information.
2. What this policy covers
This policy applies to the UnitedLang marketing website, user accounts, live translation sessions, support communications, and related online services. Depending on how you use UnitedLang, we may process:
- account and contact data, such as name, email address, organization, and login details;
- contract and payment data, such as plan, credits, invoices, transaction status, and usage;
- content data, including live audio, source and translated text, synthesized audio, recordings, and messages;
- session and usage data, such as language choices, timestamps, session identifiers, settings, and feature interactions; and
- technical and log data, such as IP address, browser, device, operating system, requested pages, referrer, and security events.
We process this data to provide and bill the Service, translate live audio, manage accounts, communicate with users, secure our systems, comply with law, and—with consent where required—understand and improve website use.
3. Legal bases
Where the GDPR applies, we rely on one or more of these legal bases:
- Contract and pre-contractual steps (Art. 6(1)(b) GDPR), including accounts, translation, billing, and support requested by you.
- Consent (Art. 6(1)(a) and, where applicable, Art. 9(2)(a) GDPR), for optional storage, analytics, or processing requiring explicit consent.
- Legal obligations (Art. 6(1)(c) GDPR), including tax, accounting, and lawful authority requests.
- Legitimate interests (Art. 6(1)(f) GDPR), including secure hosting, fraud prevention, service operation, and business administration, provided your rights do not override those interests.
4. Live audio translation and recordings
UnitedLang processes audio sent by a host so it can generate live captions, translations, and optional translated speech. This processing is necessary to deliver the requested Service. Session metadata is used to route audio and outputs to the correct host and attendees and to measure billable usage.
If recording or session-history features are enabled, source audio, translated text, and generated audio may be stored for later playback or download. Where the product offers a storage choice, the host can manage that choice through the available session or account settings.
Spoken content can reveal sensitive information, including health information, beliefs, or other special categories of personal data. Session hosts are responsible for informing participants and for having a valid legal basis for the audio they submit. Avoid transmitting sensitive content unless it is necessary and lawful.
5. Accounts, contracts, and support
We process registration, profile, security, organization, session, and usage information to create and administer accounts, authenticate users, provide purchased functions, prevent misuse, and respond to support requests. Required fields are marked at collection.
If an organization provides access to UnitedLang, that organization may be a separate controller for its users and event participants. Its privacy notice may therefore apply in addition to this policy.
6. Payments and billing
Payments and subscription administration are handled through payment and billing providers. They process the details needed to complete a transaction, such as name, billing address, payment method, amount, and authentication data. UnitedLang generally receives payment status, customer and invoice references, and billing records rather than full card or bank credentials.
We retain invoice and transaction information for contract administration and statutory tax and accounting periods.
7. Website, hosting, and server logs
When you visit our website or app, the server processes your IP address and request information so it can deliver the page. Logs may include the requested URL, time, transferred data, browser and operating system, referrer, IP address, and provider. We use logs to maintain stability, investigate errors, prevent abuse, and defend against attacks.
Routine server logs are normally deleted or anonymized within 30 days unless a security incident, legal claim, or legal duty requires longer retention.
8. Cookies and optional analytics
The app uses cookies or similar browser storage where necessary for login, session security, language or consent choices, and requested functions. These technologies are used on the basis of the contract or our legitimate interest in a secure, usable Service, as applicable.
If optional Google Analytics is enabled on a UnitedLang page, it is loaded only after consent where required. Analytics can process pseudonymous identifiers, page interactions, approximate location derived from IP address, device and browser information, and visit duration. You can withdraw consent through the cookie controls made available on that page. The current marketing site does not require optional analytics to display the legal pages.
9. Security and abuse prevention
We use technical and organizational safeguards designed for the risk, including access controls, transport encryption, backups, monitoring, and procedures for security incidents and data-subject requests. No internet service can guarantee absolute security.
Login and signup pages may use Cloudflare Turnstile to distinguish legitimate activity from automated abuse. For this purpose, Cloudflare can process IP and device information, browser characteristics, interaction data, and the result of the security check. The legal basis is our legitimate interest in protecting accounts and infrastructure.
10. Contact, email, and notifications
When you contact us, we process your contact details, message, and related metadata to respond and keep necessary records. Transactional emails such as account verification, security notices, and invoices are sent to perform the contract or protect the Service. Marketing messages are sent only where legally permitted; you can object or unsubscribe at any time.
11. Service providers and recipients
UnitedLang uses providers including:
- OpenAI, L.L.C., United States, for automated speech, translation, and related AI processing. See OpenAI’s privacy policy.
- Hetzner Online GmbH, Germany, for hosting and infrastructure. See Hetzner’s privacy policy.
- Chargebee Inc. / Chargebee B.V., United States / Netherlands, for checkout, subscriptions, invoices, and billing administration. See Chargebee’s privacy policy.
- Sandcrater Ltd (SMTP2GO), New Zealand, for transactional email. See SMTP2GO’s privacy policy.
- Cloudflare, Inc., United States, for Turnstile security checks where used. See Cloudflare’s privacy policy.
- Google Ireland Limited, Ireland, for consent-based website analytics where enabled. See Google’s privacy policy.
We may also disclose data to professional advisers, authorities, or other recipients where necessary to establish or defend legal claims, comply with law, protect users, or complete a business reorganization. Providers receive only the data needed for their assigned function.
12. International data transfers
Some providers process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, the EU–U.S. Data Privacy Framework for certified recipients, Standard Contractual Clauses, or another lawful transfer mechanism. New Zealand is covered by an EU adequacy decision.
13. Retention and deletion
We retain personal data only as long as needed for the relevant purpose or as required by law. The period depends on the type of data, account status, recording choices, security needs, and statutory retention duties. German commercial and tax law can require billing records to be retained for several years.
When data is no longer required, it is deleted or anonymized. Legal holds, backups, fraud-prevention records, and the establishment or defense of claims may delay final deletion. Backup copies are removed on their normal rotation.
14. Your data-protection rights
Subject to the statutory requirements, you may have the right to:
- request access to and a copy of your personal data;
- correct inaccurate or incomplete data;
- request deletion or restriction of processing;
- receive data you provided in a portable format;
- withdraw consent at any time for future processing; and
- object to processing based on legitimate interests or to direct marketing.
Contact support@unitedlang.com to exercise a right. We may need to verify your identity. You may also complain to a data-protection authority. Our local supervisory authority is the Bavarian State Office for Data Protection Supervision (BayLDA), 91522 Ansbach, Germany.
We do not make decisions producing legal or similarly significant effects solely through automated processing within the meaning of Art. 22 GDPR.
15. Children and policy updates
UnitedLang is not directed to children under 16, and we do not knowingly allow them to create accounts. We may update this policy when the Service, providers, or law changes. The date above identifies the current version.