Privacy Policy

Who we are & what this covers

App Store Localize ("the Service") is operated by AppStoreLocalize Ltd ("we", "us", or "our"), a company registered in Ukraine.

This Privacy Policy describes how we collect, use, and share information when you visit appstorelocalize.com or use the Service. It applies to information collected through the website, the dashboard, and the hosted policy pages we generate for our customers (docs.appstorelocalize.com/<slug>).

Registered office: AppStoreLocalize Ltd, Lesi Ukrainky Blvd, 27/2, Kyiv 02000, Ukraine. Privacy contact: legal@appstorelocalize.com.

Information we collect

Information you provide

• Account information — when you sign up, we collect your email address and a hashed password. We do not store your plaintext password.
• Wizard inputs — when you use our privacy policy generator, your answers are stored so we can render hosted policy pages and let you edit them later.
• App Store Connect API credentials (paid users only) — if you connect your API key, we store the credentials encrypted at rest and use them solely to call the API on your behalf.
• Support correspondence — if you contact us by email, we keep a record of the correspondence to provide support and improve the Service.

Information we receive from third parties

Payment data from Paddle — Paddle provides us with your customer ID, subscription status, country code for tax purposes, and the email associated with your purchase. We do not receive or store payment card information.

Information collected automatically

Cookies — essential only

We set only strictly necessary cookies: a session cookie to keep you signed in and a CSRF protection cookie. We do not use analytics cookies, advertising cookies, or third-party tracking cookies.

How we use your information

• Operate the Service — authenticate you, render hosted privacy / terms / contact pages, process subscriptions, and provide product features.
• Translate App Store metadata — when you initiate translation, we send your source text to OpenAI's API and return the translated result. We do not use translation requests to train AI models.
• Process payments — through Paddle, our Merchant of Record.
• Provide customer support — respond to support requests.
• Improve the Service — analyze aggregate usage patterns through Plausible.
• Maintain security and prevent fraud — detect abuse, spam, attacks, and unauthorized access attempts.
• Comply with legal obligations — meet obligations under Ukrainian, EU, and other applicable laws.

Legal bases for processing (GDPR)

1. Performance of a contract — to deliver the Service you signed up for or purchased.
2. Legitimate interests — to improve the Service, prevent fraud, ensure security, and respond to support requests.
3. Consent — for optional features such as marketing communications, where applicable.
4. Legal obligation — to comply with applicable law, including tax-record retention.

How we share your information — subprocessors

Paddle is the seller of record on customer invoices and is responsible for VAT / sales-tax compliance globally. Your purchase is governed by these Terms together with Paddle's buyer terms.

We may also disclose information when required by law, court order, or to protect the safety of users, employees, or the public.

Rights under GDPR & CCPA

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your information, subject to limited legal exceptions.
• Object to certain processing.
• Receive a copy of your information in a structured, portable, machine-readable format.

To exercise these rights, email legal@appstorelocalize.com from the email address associated with your account. We respond within 30 days.

GDPR rights

If you are in the EEA, UK, or Switzerland, you have rights of access, rectification, erasure, restriction, data portability, objection, and the right to lodge a complaint with your national Data Protection Authority.

California rights

California residents may request to know, delete, or correct personal information and may opt out of sale or sharing for cross-context behavioral advertising. We do not sell or share personal information for those purposes.

How long we keep your data

Account deletion

1. Sign in to your dashboard at appstorelocalize.com.
2. Open Settings → Delete Account.
3. Confirm deletion.

Your account is queued for deletion immediately and permanently removed within 30 days. You may also request deletion by emailing legal@appstorelocalize.com.

How we protect your data

• Encryption in transit (TLS) for browser-to-server communication.
• Encryption at rest for sensitive data such as App Store Connect credentials and contact-form messages.
• Access controls restricting employee access on a need-to-know basis.
• Regular security review of infrastructure and dependencies.

No system is perfectly secure. If you suspect unauthorized access to your account, contact us immediately.

International data transfers

Some subprocessors operate outside Ukraine, the European Economic Area, or your country of residence. When we transfer data internationally, we rely on safeguards such as Standard Contractual Clauses, the UK International Data Transfer Agreement, or other mechanisms permitted by law.

Children's privacy

App Store Localize is not directed to children. You must be at least 16 years old to use the Service. We do not knowingly collect personal information from anyone under 16.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email at least 30 days before the changes take effect unless applicable law requires a shorter timeframe.

How to reach us

AppStoreLocalize Ltd
Lesi Ukrainky Blvd, 27/2
Kyiv, 02000
Ukraine

Email legal@appstorelocalize.com.

This privacy policy was prepared in accordance with applicable provisions of the GDPR, UK GDPR, CCPA, and Ukrainian data protection law. It is subject to legal review.