Privacy Policy

Localize.dev rewrites hardcoded UI strings in your code and translates them. This page explains what we collect to do that, what we don't, and how to remove it. The short version: your source code stays on your machine or your CI runner, and we only receive the strings being translated.

What we collect

• Account details: your name, email address and profile picture, from the sign-up form or from GitHub or Google when you sign in with them. Passwords are stored only as hashes.
• Strings sent for translation: the extracted UI text, the path of the file it came from and short component context (for example "button text in <Checkout>"). They're translated and returned; our database keeps only counts, not the text.
• Usage records: for each translation request, the number of strings and languages, duration, the API key used and, when sent, the repository and CI run. These enforce plan limits and power the usage pages.
• Run reports from the GitHub Action: repository, branch, outcome, pull request link, counts and any error message.
• GitHub connection: the accounts where you installed the Localize.dev GitHub App, and the names, default branches and language statistics of repositories you chose to connect. We use short-lived installation tokens and never store your code.
• API keys: only a hash and a short prefix; the full key is shown to you once.
• Cookies: a session cookie that keeps you signed in. We don't use advertising or third-party tracking cookies. Your theme choice is stored in your browser.
• Playground: code you paste is processed to produce the result and isn't saved.

What we don't collect

Whole files or repositories. The CLI and the GitHub Action parse and rewrite your code locally or on your CI runner; only the strings listed above are sent to us. Scans and offline runs make no network requests at all.

Who processes it

• Vercel hosts the website and API.
• Neon hosts the database with accounts, usage records and run reports.
• DigitalOcean hosts the server that runs our translation model, in the United States. Strings are processed there and not shared with third-party AI providers.
• GitHub and Google, when you sign in with them or connect repositories.
• Resend sends account emails such as verification and password reset.

We don't sell your data or use your strings to train models.

Keeping and deleting your data

Deleting a workspace (Dashboard → Settings) removes its API keys, projects, usage records and run reports, uninstalls the GitHub App and signs you out on every device. Pull requests already opened stay on GitHub, where you control them. To delete your account itself, or to get a copy of your data, contact us.

Changes

If this policy changes in a way that matters, we'll update the date above and tell signed-in users. See also the Terms of Service.