Who we are
BlueSquark is operated by Helium22, the data controller for personal data processed through this website. Contact us through our contact page.
What we collect
- Account details — your name, email address, optional company and contact email, password (stored only as a one-way hash), two-factor secret (stored encrypted) and recovery key (stored only as a hash).
- Content you translate — text you type and documents you upload, the text extracted from them, and the translations produced.
- Security records — sign-in attempts, the IP address and a fingerprint of the browser used to sign in, approximate location derived from the IP address, and an audit log of account actions.
- Messages — what you send us through the contact form, and your name and email if you ask to be told when registration opens.
How and why we use it
- To provide the translation service you ask for (performance of our contract with you).
- To keep accounts and the service secure — detecting unusual sign-ins, blocking abuse, investigating problems (our legitimate interests in protecting you and the service).
- To answer your messages and, only if you asked, to tell you when registration opens (your consent, which you can withdraw at any time).
- To meet legal obligations.
We do not sell your data, do not use it for advertising, and do not use your documents to train translation models.
How your documents are translated
Translation runs on a translation service that we operate ourselves — your text is not sent to third-party translation services. Your text is encrypted before it leaves our website and can only be read by our own translation service.
How long we keep it
- Uploaded documents, extracted text and translations: 30 days, then deleted automatically — or sooner if you delete them.
- Account details: while your account exists. Deleting your account removes it and all your translations.
- Security and audit records: up to 12 months. Sign-in attempt records: 30 days.
- Contact messages and registration-interest details: until dealt with, or until you ask us to delete them.
Who else is involved
Our website and databases are hosted by our hosting provider (Hostinger) in data centres in the UK/EU. Emails are delivered through our email provider. If we introduce paid plans, payments will be handled by Stripe; we will never see your full card details. Each provider acts on our instructions under a data processing agreement.
Your rights
You can ask to access, correct, delete or receive a copy of your personal data, object to or restrict certain processing, and withdraw consent. Much of this you can do yourself under Account & security and My translations. Otherwise contact us and we will respond within one month. You may also complain to the Information Commissioner's Office (ico.org.uk).
Cookies
We only use cookies that are essential to run the service. See our Cookie Policy.
Security
Every account is protected by two-factor authentication. Connections use HTTPS, passwords are hashed, sessions end after 30 minutes of inactivity, and uploaded files are only available to their owner.
Changes
We will post any changes here and update the date below.