Privacy Policy

Last updated: 16 September 2026

1. Who we are

XPRO d.o.o., Stegne 21C, 1000 Ljubljana, Slovenia ("XPRO", "we", "us") operates translate7, a real-time speech transcription and translation service. This policy covers:

• the translate7 mobile apps for iOS and Android,
• the translate7 web app at app.translate7.com,
• the translate7 for Microsoft Teams browser extension, and
• the XPRO sign-in and billing services these use.

XPRO is the controller of your personal data under the EU General Data Protection Regulation (GDPR).

2. Information we collect

2.1 Account information

When you sign in through XPRO's sign-in service (auth.xpro.si), we receive your name, email address and a unique account identifier. If you use email and password sign-in, your password is stored only in hashed form.

2.2 Purchases and usage balance

When you buy translation hours, payment is handled by Stripe. We never see or store your full card details. We keep records of your purchases, the hours you've bought and the translation time you've used.

2.3 Audio, transcripts and translations

When you start a translation session, we process:

• In the mobile and web apps: audio from your device microphone, a connected Bluetooth microphone, or supported smart glasses.
• In the Teams extension: the audio of the Microsoft Teams meeting tab (the voices of meeting participants) and, only if you turn it on, your microphone.
• The transcripts and translations produced from that audio, which are shown to you.

See How speech is processed for what happens to this content.

2.4 Saved transcripts (optional)

Saving is off by default. If you turn it on in the mobile app, the session's audio recording and/or text transcript is saved:

• On your device, if you choose local saving, or
• In our cloud storage (Microsoft Azure), in a folder tied to your account, if you choose cloud saving.

In the Teams extension, the transcript lives only in your browser tab for the current session. If you copy or download it, that happens locally on your computer.

2.5 Settings and device data

Your preferences (languages, translation mode, text size, save options) and sign-in session are stored on your device or in your browser's extension storage. Our servers automatically log technical data such as IP address, time of request and errors, for security and troubleshooting.

2.6 Smart glasses

If you connect supported smart glasses (such as LEION or Vuzix), captions are sent directly from your phone to the glasses over Bluetooth. Audio from the glasses' microphone is processed the same way as audio from your phone's microphone.

2.7 What we don't collect

We don't use advertising identifiers, third-party analytics or tracking cookies in translate7, and we don't build advertising profiles.

3. How speech is processed

• Audio is streamed over an encrypted connection (TLS) to Speech7, XPRO's speech platform, which transcribes and translates it in real time. Speech7 uses specialised AI speech-processing service providers (sub-processors) to do this.
• Audio, transcripts and translations are processed only to provide the live session to you, and they are not stored by translate7 or Speech7 after the session ends. The exception is transcripts you choose to save (section 2.4).
• We record how long each session lasted, so we can deduct the time from your balance.
• Transcription and translation are produced automatically by AI and may contain errors. Don't rely on them where accuracy is critical.

4. translate7 for Microsoft Teams

The browser extension shows live translated captions for Microsoft Teams meetings on the web. In addition to the rest of this policy:

4.1 What the extension accesses

• Tab audio: only for the Teams tab where you press Start translation, and only until you stop, close the tab or the meeting audio ends.
• Microphone: only if you turn on Include my microphone and allow access.
• The Teams page: the extension adds a caption overlay to the page. It does not read, collect or send your chats, messages, files, participant lists or any other page content.

4.2 What the extension stores in your browser

• Your sign-in tokens, so you stay signed in.
• Your settings (translation mode, languages, microphone choice) and the caption overlay's position and text size.

Signing out or removing the extension deletes this data from your browser.

4.3 Permissions

4.4 Other meeting participants

When you translate a meeting, other participants' voices are processed as described in section 3. You are responsible for informing participants and, where the law requires, obtaining their consent, just as you would when using any captioning or recording tool.

4.5 Limited use

Data the extension handles is used only to provide live translated captions and the features described above. It is not sold, not used for advertising, not used to determine creditworthiness, and not transferred to third parties except as needed to provide the service (section 6), to comply with the law, or as part of a merger or acquisition. People don't read your content unless you ask us to (for example, for support), or it's needed for security or legal compliance.

5. How we use your information and legal bases

6. Sharing and service providers

We don't sell your personal data. We share it only with:

• AI speech-processing sub-processors used by Speech7 for real-time transcription and translation.
• Stripe, for payment processing.
• Microsoft Azure, for storing transcripts you choose to save to the cloud.
• Cloud hosting providers that run our servers.
• Authorities, when required by law, court order or to protect rights and safety.
• A successor, in a merger, acquisition or sale of assets.

All service providers are contractually bound to protect your data and to use it only to provide their services to us.

7. Data retention

• Live audio, transcripts and translations: not stored after the session ends.
• Saved transcripts: until you delete them, or until your account is deleted.
• Account data: while your account is active, and up to 30 days after deletion.
• Payment and purchase records: 7 years, for tax and accounting purposes.
• Server logs: up to 12 months, for security and troubleshooting.

8. Security

All data is encrypted in transit (TLS). Saved cloud transcripts are encrypted at rest. Access is tied to your verified account, service credentials are kept on our servers and never in the apps or extension, and access to systems is restricted to authorised staff.

9. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you,
• correct inaccurate data,
• have your data deleted,
• restrict or object to processing,
• receive your data in a portable format, and
• withdraw consent where processing is based on consent.

You can request account deletion in the mobile app (Account → Delete account) or by emailing info@xpro.si. We respond to requests within 30 days.

You can also lodge a complaint with a supervisory authority. In Slovenia, this is the Information Commissioner of the Republic of Slovenia (www.ip-rs.si).

10. International transfers

Some of our service providers may process data outside the European Economic Area. Where they do, we rely on appropriate safeguards, such as European Commission adequacy decisions or Standard Contractual Clauses.

11. Children

translate7 is not intended for children under 16. We don't knowingly collect their personal data, and we delete it if we learn we have.

12. Changes to this policy

We may update this policy. We'll post the new version on this page and change the "Last updated" date. For material changes, we'll also notify you in the app or by email.

13. Contact