← Back to Rocco TranslationsOperational privacy notice · 26 August 2026

ROCCO TRANSLATIONS

Project data and privacy

This notice explains how information submitted through Rocco Translations is used in the project-inquiry and private-conversation workflow. It describes the current product behavior rather than promising retention or processing rules that the application does not enforce.

Information submitted

  • Company and contact details: contact name, company, business e-mail, optional phone and website.
  • Project details: language pair, material type, deadline, approximate volume, budget, intended use and additional notes.
  • Optional requirements: tone or brand voice, terminology or style-guide information, formatting preference and confidentiality/NDA requirement.
  • Source files and links supplied for assessment or delivery, plus messages exchanged in the private project conversation.

Why the information is used

Submitted information is used to assess the request, prepare scope and pricing, communicate about the project and, when accepted, carry out the translation or localisation work.

It is not collected for advertising profiles or sold to advertisers. Operational e-mail may be sent through the configured transactional e-mail provider when that service is enabled.

Legal bases

Project inquiries and accepted work are processed where necessary to take steps at your request before entering into a contract and to perform an agreed project. Service security, fraud and abuse prevention, operational records and the protection of the service may also rely on legitimate interests where those interests are not overridden by your rights.

Where accounting, tax, dispute-resolution or other legal duties require particular records, those records may be processed and retained to comply with the applicable legal obligation. Rocco Translations does not use consent as a blanket basis for ordinary project administration.

Private project access

A submitted inquiry can create a private project-conversation link. The application stores a cryptographic hash of the conversation token rather than the original token in the project record. The browser session uses a secure, HttpOnly, same-site cookie in production.

Conversation access is issued for 90 days and can be revoked or renewed from the private owner workspace. Revoking the link does not by itself erase the underlying project record.

Storage and deletion

The private company inbox uses the configured Redis-backed storage service. Project records do not currently receive an automatic deletion deadline merely because a conversation link expires.

Records are kept only for as long as they are reasonably needed for the inquiry or project, security, disputes and applicable legal obligations. Some accounting or contractual records may therefore need to be retained longer than the live project conversation.

The owner workspace provides an authenticated deletion operation that removes the application record, its private conversation messages and its inbox index entry together. A company can request deletion by using the project conversation or the contact details shown on the site; erasure may be limited where a legal obligation requires specific records to be kept.

Service providers and international processing

Hosting, Redis-backed storage and transactional e-mail providers may process the minimum project or technical information required to operate the service on behalf of Rocco Translations. Providers are not given project information for their own advertising purposes.

If a service provider processes personal data outside the European Economic Area, the transfer should rely on an applicable GDPR safeguard such as an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism provided by that supplier.

Your data-protection rights

Depending on the circumstances and legal basis, you may request access, rectification, erasure, restriction of processing, data portability, or object to processing. Send a privacy request to translations@roccoanalysis.me.

If you believe personal data is being processed unlawfully, you also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO) in Poland.

Files and confidentiality

If a project is confidential, mark the NDA/confidentiality requirement in the inquiry before sending sensitive material. Confidentiality requirements are preserved with the project brief for review before acceptance.

Do not send passwords, wallet seed phrases, private keys or unrelated sensitive credentials through the project form.

Contact

Questions about a submitted project, privacy rights, access-link revocation or deletion can be raised directly through the private project conversation or by e-mail at translations@roccoanalysis.me.

This page documents the current data-handling behavior of the service. Contractual confidentiality terms, if required, are agreed separately for the specific project.