1Introduction & Scope
This Privacy Policy explains how we collect, process, disclose, and safeguard your personal information when you access our portal at portal.brand-localization.com and related services.
Our data processing practices are engineered to adhere strictly to the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), and Egyptian Data Protection Law No. 151 of 2020.
2Information We Collect
Name, professional email address, organization/company name, and timezone provided during portal registration.
Video and audio files, source transcripts, translated subtitle files, custom glossaries, and client instructions.
IP address, browser type, device information, operating system, and timestamped actions within the editor studio.
Encrypted transaction tokens, invoice references, and order numbers. We do not store credit card numbers or CVVs on our servers.
3Payment Processing & Merchant of Record Role
Financial transactions conducted on our platform are processed securely by our authorized third-party payment gateways and Merchants of Record (including 2Checkout / Verifone and Stripe).
- When you purchase credit packages or pay for orders, your payment details are transmitted directly via TLS 1.3 encryption to the authorized processor.
- Our payment partners operate under strict PCI-DSS Level 1 compliance (the highest standard in the payment card industry).
- When 2Checkout acts as the Merchant of Record, your transaction is subject to the 2Checkout / Verifone Privacy Policy in addition to our own.
4Legal Bases for Processing (GDPR Article 6)
For individuals in the European Economic Area (EEA), we process personal data under the following lawful bases:
- Contractual Necessity: Processing required to register your account, manage your prepaid balance, route your projects to native linguists, and deliver completed localized deliverables.
- Legitimate Interests: Improving platform reliability, detecting fraudulent chargebacks, maintaining studio security, and monitoring linguistic quality metrics.
- Legal Compliance: Maintaining tax records, generating legal receipts, and satisfying applicable regulatory audit obligations.
- Consent: Where you have explicitly opted in to receive non-essential product updates or newsletters (which you may withdraw at any time).
5Third-Party AI Zero-Training & Proprietary Adaptive Learning
To provide fast, cost-effective initial transcription, diarization, and synthetic vocal drafting, our platform integrates with vetted enterprise AI APIs (such as WhisperX diarization models and neural voice engines). We maintain a transparent, strict boundary between third-party foundation models and our proprietary platform learning:
1. Zero Third-Party Public Model Training:
We contractually enforce a strict Zero-Training Policy with all third-party foundation AI providers. Your proprietary video footage, confidential scripts, audio recordings, and translated dialogue are never ingested into public training corpuses or used to train, retrain, or improve public foundation AI models.
2. Tenant-Isolated Adaptive Learning & Continuous Translation Memory (TM):
Within the Brand Localization platform, when professional linguists and reviewers edit, refine, and approve translations, these verified golden pairs are captured into your account’s private, tenant-segregated Translation Memory (TM) and adaptive learning flywheel.
Our platform utilizes this continuous feedback loop strictly to: (a) preserve consistent brand voice and approved terminology across your future orders, (b) dynamically calibrate prompt alignment for your specific industry domain, and (c) accelerate turnaround times while driving down long-term per-minute localization costs.
• Strict Tenant Isolation: Your proprietary terminology, character glossaries, and linguistic revisions are strictly quarantined to your account and are never shared with, exposed to, or utilized for other client accounts or competitors.
Custom Enterprise NDAs & Air-Gapped Workflows:
For highly confidential materials (such as pre-release theatrical films, unreleased video game scripts, or sensitive corporate IP), we execute custom bilateral Non-Disclosure Agreements (NDAs) with options for fully offline, human-only workflows with zero external API calls upon request.
6Cross-Border International Data Transfers
Brand Localization operates globally with administrative operations managed from Egypt and cloud infrastructure hosted in ISO 27001-certified data centers. In providing services, your data may be accessed by verified native linguists residing in your target market languages.
When transferring personal data outside the European Economic Area (EEA), we implement recognized transfer safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, strict end-to-end encryption in transit (TLS 1.3), and encryption at rest (AES-256).
7Data Retention Schedule
We adhere to strict data minimization principles:
- Project Media & Audio: Uploaded video files, audio stems, and raw drafts are retained for six (6) months after project completion to facilitate requested client revisions, after which they are permanently purged from active production servers unless you explicitly request earlier deletion.
- Translation Memory (TM): Golden translation pairs approved into your account’s private Translation Memory are preserved until you request their export or deletion.
- Billing & Invoices: Transaction logs, invoices, and purchase records are archived for up to seven (7) years to comply with statutory accounting and tax regulations.
8Cookies & Tracking Technologies
Our platform uses strictly essential cookies and local storage items required for user authentication, session security, CSRF protection, and user preferences (such as editor display modes).
We do not deploy intrusive third-party behavioral advertising cookies, data harvesting trackers, or third-party marketing pixels within the authenticated client portal.
9Your Privacy Rights (GDPR & CCPA/CPRA)
Depending on your location, you hold the following enforceable rights regarding your personal information:
To exercise any of these rights, contact us at info@brand-localization.com. We will verify and process your request within thirty (30) days without charge.
10Children’s Privacy
Our services are strictly directed to commercial businesses, content creators, and individuals aged eighteen (18) and older. We do not knowingly solicit or collect personal information from children under the age of 18. If we become aware that personal information from a minor has been collected without parental consent, we will take immediate steps to delete such data.
11Right to Lodge a Complaint
If you reside in the European Union or United Kingdom and believe that our processing of your personal data infringes applicable data protection laws, you have the statutory right under GDPR Article 77 to lodge a formal complaint with an appropriate supervisory authority in your country of residence or place of alleged infringement.
12Data Protection Contact
For all privacy, data subject requests, or regulatory inquiries, please contact our designated Privacy Office:
26 Mohamed Mahmoud Kassem Street, Heliopolis, Cairo, Egypt
(Attention: Data Privacy Officer / Abdullah Alkady)