Privacy Policy — Bauscribe Translator for Adobe InDesign

Effective date: July 28, 2026

Data controller: UnpickedAI d.o.o., Torkarjeva 10, 1000 Ljubljana, Slovenia (VAT ID: SI20902930, Registration No.: 7305818000)

Contact: [email protected]

This Privacy Policy explains how UnpickedAI d.o.o. ("Bauscribe," "we," "us") collects, uses, and protects information when you use the Bauscribe Translator plugin for Adobe InDesign (the "Plugin") together with the Bauscribe service at app.bauscribe.com (the "Service").

By installing the Plugin and signing in with a Bauscribe personal access token, you agree to this Policy.

1. Who we are

The Plugin is a companion to your Bauscribe account. It runs inside Adobe InDesign and communicates only with the Bauscribe Service at https://app.bauscribe.com. You must have a Bauscribe account and a personal access token (PAT) to use it.

2. Information we process

a) Document content you choose to translate. When you start a translation, the Plugin exports your active InDesign document to IDML format and uploads it to the Service so it can be translated. This upload includes the text, structure, and layout information contained in that document. Do not translate documents containing information you are not authorized to send to a cloud service.

b) Authentication credentials. Your Bauscribe personal access token (PAT) is stored locally on your computer using Adobe UXP secure storage (encrypted at rest where supported by the host application). It is transmitted to the Service as a bearer token to authenticate your requests. We do not store your PAT on our servers beyond what is required to validate it.

c) Translation settings. The source and target languages and any glossary selections you make are sent to the Service to perform the translation.

d) Account information. The Plugin retrieves basic account identity from the Service (via the account endpoint) to confirm you are signed in and to associate translation jobs with your account.

e) Job state stored locally. To let translations resume if the panel is closed and reopened, the Plugin stores non-sensitive job metadata (such as document and translation identifiers and selected languages) locally on your computer. This data contains no credentials.

The Plugin does not contain third-party advertising or analytics trackers.

3. How we use this information

We use the information above solely to:

  • authenticate you and authorize access to your account;
  • perform the translations you request and return the translated files to you;
  • maintain and improve the reliability of the translation Service;
  • provide support and respond to your requests.

We do not sell your personal information or your document content.

4. Sharing and sub-processors

To deliver translations, your document content may be processed by the following third-party service providers acting on our behalf:

  • Neon (database hosting, EU region — Frankfurt) — stores your account and job data.
  • Railway (application hosting, EU region — Amsterdam) — runs the Bauscribe Service.
  • Cloudflare (CDN, DNS, and abuse protection).
  • Clerk (user authentication and account management).
  • OpenRouter, routing to Google Gemini (machine translation) — performs the actual translation of your document content. We have Zero Data Retention (ZDR) enabled on our OpenRouter account, meaning the content of your translation requests and responses is not stored by OpenRouter or the underlying model provider once your translation is complete.

These providers are bound by contract to process data only as needed to provide their services to us. We do not otherwise share your content with third parties, except where required by law. An up-to-date list of sub-processors is available on request.

5. Data retention and deletion

  • Documents and translations: uploaded documents and translated outputs are retained for 90 days after the last activity on that translation job, after which they are automatically deleted, unless you delete them earlier via your account. (This is a default we've set — let us know if you'd like a different retention window before this goes live.)
  • Account data: retained for the life of your account.
  • Local data on your device: your PAT and job state remain on your computer until you sign out of the Plugin or uninstall it, which removes them.

To request deletion of your data, contact us at [email protected] or use the account controls at app.bauscribe.com.

6. Security

We use industry-standard measures to protect data in transit and at rest. All communication between the Plugin and the Service uses encrypted HTTPS connections. Your access token is held in encrypted local storage on your device. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. International data transfers

Our database (Neon) and application hosting (Railway) operate exclusively within the European Union. Some processing — specifically translation via OpenRouter/Google Gemini, our CDN (Cloudflare), and account authentication (Clerk) — may take place outside the EU/EEA, primarily in the United States. Such transfers are based on Standard Contractual Clauses (SCCs) under Article 46 GDPR and/or the provider's certification under the EU-U.S. Data Privacy Framework (DPF).

8. Your rights

Depending on your jurisdiction (including under the EU/UK GDPR), you may have the right to access, correct, delete, or export your personal data, to restrict or object to processing, and to withdraw consent. To exercise these rights, contact [email protected]. If you are in the EU, you may also lodge a complaint with the Slovenian data protection authority (Informacijski pooblaščenec RS, www.ip-rs.si) or your own local data protection authority.

9. Children

The Plugin and Service are not directed to children and are intended for professional use. We do not knowingly collect data from children.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted at this URL with an updated effective date.

11. Contact

UnpickedAI d.o.o.

Torkarjeva 10, 1000 Ljubljana, Slovenia

Email: [email protected]

For the contractual basis of our data processing (Data Processing Agreement), see our Terms of Service / DPA.