Privacy Policy
2026-05-26
1. Data Controller
This Privacy Policy describes how WorldPrimeOnline (hereinafter "Provider") processes personal data when you use the Platform at https://www.wpotranslations.org/.
Provider: TOO World Prime Online
BIN: 260840011541
Legal address: Kazakhstan, Almaty, Auezov district, Ryskulbekova street 39A, postal code 050042
Email: wpotranslations@gmail.com
Website: https://www.wpotranslations.org/
2. Types of Personal Data Processed
The Provider processes the following categories of personal data:
Account information: email address provided at registration.
Uploaded documents: PDF files submitted for translation. These may contain personal data such as name, date of birth, document numbers, address, financial data, or medical information depending on document type.
Translation output: the translated PDF files generated by the Service.
Payment data: transaction identifiers and payment amounts. The Provider does not store payment card numbers or payment credentials.
IP address and technical metadata: the client IP address is collected at the time of document upload or payment order creation. This data is used exclusively for security, fraud prevention, payment order confirmation, and dispute/chargeback handling as required by the payment service provider (acquirer). IP addresses are not shared with third parties for marketing purposes and are not displayed to other users.
Usage data: timestamps, document types, language pairs, session identifiers, and basic technical logs used to operate and improve the Service.
3. Purpose of Processing
Personal data is processed exclusively for the following purposes:
Providing the document translation service requested by the Customer.
Processing and verifying payments.
Delivering the Translated Document and associated service notifications.
Responding to Customer support requests.
Improving the accuracy and reliability of the Service.
Fraud prevention, security monitoring, and payment dispute/chargeback handling.
Complying with applicable legal obligations, including requirements of the payment service provider (acquirer).
4. Legal Basis for Processing
Processing is carried out on the basis of the Customer's consent (provided at the time of registration and order placement), performance of the contract between the Customer and the Provider, and the Provider's legitimate interests in operating and improving the Service.
Where required by law, additional consent is obtained before processing special categories of personal data.
5. Storage Period and 30-Day File Retention
Uploaded source documents and Translated Documents are automatically and permanently deleted 30 days after the translation is completed.
Account information is retained until the Customer deletes their account.
Payment records are retained as required by applicable financial and tax regulations.
Usage logs are retained for a maximum of 12 months.
6. Deletion Request
The Customer may request immediate deletion of their uploaded files before the 30-day retention period expires. Deletion requests can be submitted through the Platform account settings or by contacting wpotranslations@gmail.com.
Account deletion requests will result in the permanent deletion of all personal data associated with the account, subject to mandatory retention obligations.
7. Third-Party Processors
The Provider uses the following sub-processors to operate the Service:
Supabase — database and authentication infrastructure.
Cloudflare R2 — encrypted file storage.
Mistral AI — optical character recognition (OCR) for extracting text from PDF files.
Anthropic — AI translation processing.
Resend — email notification delivery.
Atlassian (Jira Cloud) — operational management of official and notarized translation orders.
Sentry — error monitoring (anonymized technical data only).
Where the Official Translation or Notarization service level is selected, relevant document data may be shared with assigned translators, notaries, and other partners involved in providing the respective service, solely to the extent necessary to fulfil the order.
All sub-processors are bound by data processing agreements and are prohibited from using Customer data for purposes other than providing the contracted service.
8. Security Measures
Uploaded documents and Translated Documents are stored with encryption at rest. Data in transit is protected by TLS. Access to documents is restricted to the authenticated Customer account.
The Provider implements technical and organizational security measures appropriate to the risk of the data processed.
9. Cross-Border Data Transfer
Some sub-processors may process data outside the country of the Customer's residence. Where such transfers occur, the Provider ensures appropriate safeguards are in place in accordance with applicable data protection law.
10. Your Rights
Subject to applicable law, the Customer has the right to:
Access the personal data the Provider holds about them.
Correct inaccurate personal data.
Request deletion of personal data (subject to legal retention obligations).
Object to or restrict processing in certain circumstances.
Withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise these rights, contact the Provider at wpotranslations@gmail.com. Requests will be addressed within 30 calendar days.
12. Changes to This Policy
The Provider may update this Privacy Policy. Significant changes will be communicated by email or by a notice on the Platform. Continued use of the Service after the effective date of changes constitutes acceptance of the updated Policy.
13. Language Priority
In case of any discrepancy between the Russian version of this document and its translations into other languages, the Russian version shall prevail unless expressly stated otherwise by the Provider.