Privacy Policy

Effective Date: January 6, 2025

Welcome to StringLock! This Privacy Policy is designed to help you understand how CardPlanet ("we," "us," or "our") collects, uses, and protects your personal data when you use our AI-powered game localization translation service at https://stringlock.app/ (the "Service"). Your privacy and data security are our top priorities.

This policy applies to all users of our Service. By using StringLock, you agree to the collection and use of information in accordance with this policy.

Key Commitment: We will never use your identifiable Customer Content (such as game text, dialogue, or proprietary terminology) to train our general AI models without your explicit consent.

1. What Information We Collect

We collect various types of information to provide and improve our Service to you.

1.1 Account Information

Name, email address, password, and contact details collected during account creation
Company or organization name (if applicable)
Profile information you choose to provide

1.2 Customer Content

Excel/CSV files and spreadsheet data you upload for translation
Game text, dialogue, UI strings, and other content you submit
Custom terminology glossaries and translation rules you create
Placeholder patterns and formatting specifications

1.3 Payment Data

Billing information and payment method details
Payment data is handled through secure, PCI-compliant third-party payment processors
We do not store full credit card details on our servers

1.4 Usage Data

IP address, browser type, and device information
Pages visited, features used, and time spent on the Service
Translation project statistics (word counts, language pairs, processing times)
Error logs and diagnostic data

1.5 AI Interaction Data

The prompts and instructions you provide to our AI translation engine
AI-generated translations and alternative suggestions
Quality assurance feedback and corrections you make

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide and Operate the Service

Process your translation requests using AI-powered engines
Apply terminology locking (StringLock) and placeholder protection
Maintain your account and provide access to your translation history
Enable collaboration features if you share projects with team members

2.2 To Improve and Personalize the Service

Analyze usage patterns to enhance features and performance
Develop new features based on user needs
Optimize translation quality and processing speed
Customize the user experience based on your preferences

2.3 To Communicate with You

Send service updates, security alerts, and administrative messages
Respond to your support requests and inquiries
Send billing information and payment confirmations
Provide marketing communications (which you can opt out of at any time)

2.4 To Ensure Security and Prevent Fraud

Detect, prevent, and investigate fraudulent or malicious activity
Monitor for security threats and vulnerabilities
Enforce our Terms of Service and protect user rights

2.5 To Comply with Legal Obligations

Meet legal and regulatory requirements
Respond to lawful requests from authorities
Protect our legal rights and interests

3. AI Processing and Model Improvement

3.1 Use of AI Translation Engines
StringLock uses third-party AI translation services (such as OpenAI, Google Translate API, or similar providers) to power our translation features. When you submit content for translation, it is transmitted to these AI providers for processing.

3.2 Protection of Your Content
We will never use your identifiable Customer Content to train our general AI models without your explicit consent. This means:

Your game text, dialogue, and proprietary content will not be used to improve general AI models
We configure our AI service providers to not retain or use your data for their own model training (where technically possible)
Any usage data we analyze is anonymized and aggregated to protect your confidential information

3.3 Opt-Out of AI Model Training
If you wish to explicitly opt out of any potential use of your data for AI model improvement, please email us at contact@stringlock.app with the subject line "StringLock Model Opt-Out" and include your account email address. We will flag your account to ensure maximum data protection.

3.4 Anonymized Analytics
We may use anonymized, aggregated data (which cannot identify you or your specific content) to:

Improve translation accuracy for specific language pairs
Enhance terminology locking algorithms
Optimize placeholder detection and protection
Develop better quality assurance features

4. How We Share Your Information

We do not sell your personal data. We only share your information in the following limited circumstances:

4.1 Service Providers
We share data with trusted third-party service providers who help us operate StringLock, including:

Cloud Hosting Providers: To store your account data and uploaded files securely
AI Translation Providers: To process your translation requests (OpenAI, Google, etc.)
Payment Processors: To handle billing and payment transactions securely
Analytics Providers: To understand service usage and improve performance
Email Service Providers: To send notifications and communications

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.2 Integration Partners
If you choose to integrate StringLock with third-party services (such as cloud storage platforms or project management tools), we will share necessary data to enable those integrations. These integrations are subject to the third party's own privacy policies.

4.3 Legal Requirements
We may disclose your information if required by law, such as:

In response to valid legal requests (court orders, subpoenas, warrants)
To comply with applicable laws and regulations
To protect the rights, property, or safety of CardPlanet, our users, or the public
To investigate potential violations of our Terms of Service

4.4 Business Transfers
If CardPlanet is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership or use of your personal data.

4.5 With Your Consent
We may share your information for other purposes with your explicit consent.

5. International Data Transfers

StringLock is operated by Petron K.K. Inc., based in Japan. Your information may be transferred to, stored, and processed in Japan and other countries where our service providers operate.

These countries may have data protection laws that differ from those in your country. When we transfer data internationally, we implement appropriate safeguards, such as:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions recognizing equivalent data protection standards
Binding corporate rules and certifications

6. Your Rights and Choices

Depending on your location and applicable data protection laws, you may have the following rights:

6.1 Access and Portability
You have the right to access the personal data we hold about you and request a copy in a structured, commonly used, and machine-readable format.

6.2 Correction
You can request that we correct inaccurate or incomplete personal data.

6.3 Deletion
You can request that we delete your personal data, subject to certain exceptions (such as legal obligations or legitimate business needs).

6.4 Restriction and Objection
You can request that we restrict or stop processing your personal data in certain circumstances.

6.5 Withdrawal of Consent
Where we rely on your consent to process your data, you can withdraw that consent at any time.

6.6 Opt-Out of Marketing
You can opt out of receiving marketing emails by clicking the "unsubscribe" link in any marketing email or by contacting us.

How to Exercise Your Rights
To exercise any of these rights, please contact us at privacy@cardplanet.me with your request. We will respond within 30 days (or as required by applicable law).

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data properly.

7. Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

7.1 Account Data
We retain your account information for as long as your account is active. If you delete your account, we will delete your account data within 90 days, except where we must retain it for legal or regulatory reasons.

7.2 Customer Content
Translation files and project data are retained according to your account settings. You can delete individual projects or files at any time. Deleted content is permanently removed from our active systems within 30 days, but may remain in backups for up to 90 days.

7.3 Usage and Log Data
We retain usage data and logs for up to 24 months for security, analytics, and service improvement purposes.

8. Data Security

We take data security seriously and implement industry-standard technical and organizational measures to protect your information, including:

Encryption: Data is encrypted in transit using SSL/TLS and at rest using AES-256 encryption
Access Controls: Strict access controls limit who can access your data (need-to-know basis)
Authentication: Multi-factor authentication options to secure your account
Security Monitoring: Continuous monitoring for security threats and vulnerabilities
Regular Audits: Periodic security audits and penetration testing
Employee Training: Security awareness training for all employees

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You can help by:

Using a strong, unique password for your StringLock account
Enabling multi-factor authentication
Not sharing your login credentials
Reporting any suspected security issues to us immediately

9. Children's Privacy

StringLock is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child under 16, please contact us immediately at privacy@cardplanet.me, and we will take steps to delete that information.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on StringLock.

10.1 What Are Cookies?
Cookies are small text files stored on your device that help us recognize you and remember your preferences.

10.2 Types of Cookies We Use

Essential Cookies: Required for the Service to function (login sessions, security)
Functional Cookies: Remember your preferences and settings
Analytics Cookies: Help us understand how users interact with the Service
Marketing Cookies: Track your activity for advertising purposes (if you consent)

10.3 Managing Cookies
Most browsers allow you to control cookies through their settings. You can choose to block or delete cookies, but this may affect your ability to use certain features of StringLock. Essential cookies cannot be disabled if you wish to use the Service.

11. Third-Party Links and Services

StringLock may contain links to third-party websites, services, or integrations that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you interact with.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

Update the "Effective Date" at the top of this policy
Notify you via email or an in-app notification
Post a notice on our website

We encourage you to review this Privacy Policy periodically. Your continued use of StringLock after we post changes constitutes your acceptance of the updated policy.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal data we collect, use, and share
Right to delete personal data (subject to certain exceptions)
Right to opt out of the "sale" of personal data (note: we do not sell personal data)
Right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact us at privacy@cardplanet.me.

14. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent
Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes:

Consent: Where you have given explicit consent
Contract: To fulfill our contract with you (providing the Service)
Legal Obligation: To comply with applicable laws
Legitimate Interests: To improve our Service, prevent fraud, and ensure security

15. Data Protection Officer

If you have questions or concerns about how we handle your personal data, you may contact our Data Protection Officer at:

Email: privacy@cardplanet.me
Subject Line: "Data Protection Inquiry - StringLock"

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

General Privacy Inquiries:
Email: privacy@cardplanet.me

General Support:
Email: contact@stringlock.app

Service: StringLock
Provider: Petron K.K. Inc. (CardPlanet)

We will respond to your inquiries within 30 days (or as required by applicable law).