1. Who this policy covers
- Website visitors — people browsing apektranslation.com.
- Clients — businesses that purchase our translation services or subscribe to Apek Flow.
- End customers — people who message a client's WhatsApp Business number. In this case the client is the data controller and Apek acts as a processor on the client's behalf.
2. Information we collect
Account information: name, business name, email address, phone number and billing details of client administrators and users.
Platform Data from Meta: when a client connects a WhatsApp Business account to Apek Flow, we receive and store, on that client's behalf: message content (text, images, documents, audio), sender and recipient phone numbers, contact display names, message timestamps and delivery statuses, message template content and approval statuses, and WhatsApp Business Account and phone number identifiers.
Technical data: IP address, browser type, log records and error diagnostics used to operate and secure the service.
Documents for translation: files and texts clients submit for translation, proofreading, localization or certification.
3. How we use information
We use Platform Data for one purpose only: to deliver the messaging and translation service to the client that owns the conversation. Specifically, to display conversations in that client's inbox, send the client's replies, provide translations of those messages where the client has purchased translation support, submit and manage message templates, and produce usage reports for billing.
We use account and technical data to operate the service, provide support, prevent abuse and fraud, meet legal obligations, and communicate service notices to clients.
We do not sell personal data, use Platform Data for advertising or profiling, use one client's data to serve another client, or use message content to train machine learning models for unrelated purposes.
4. Data separation and access
Each client's data is stored in a logically separated workspace. Access is limited to (a) users the client itself invites, and (b) Apek linguists and support staff assigned to that client's account, only to the extent needed to deliver the service. All Apek personnel and contracted linguists are bound by written confidentiality obligations, consistent with our ISO 17100:2015 certification.
5. Sharing with third parties
We share data only with service providers necessary to run the platform, under contracts that restrict their use of it:
- Meta Platforms — WhatsApp Business Platform, for sending and receiving messages.
- Supabase — database, authentication and application hosting (servers in the European Union).
- Cloudflare — content delivery and application hosting for the client dashboard.
We may also disclose information where required by applicable law or valid legal process.
6. International transfers
Our platform infrastructure is hosted in the European Union. Our teams operate from Kyrgyzstan, Kazakhstan and India. Where data is transferred across borders, we rely on contractual safeguards with our clients and providers.
7. Retention
Conversation and message data is retained for as long as the client's account is active, or until the client deletes it. On termination, client data is deleted within 90 days unless a longer period is required by law. Translation project files are retained per the client's service agreement. Backup copies are purged on a rolling schedule.
8. Your rights and choices
Depending on your jurisdiction, you may have the right to access, correct, export or delete personal data we hold about you, and to object to or restrict certain processing.
If you are an end customer who messaged a business using Apek Flow, please contact that business first — they control the conversation. You may also write to us and we will route your request to the relevant client.
To request deletion of your data, see our Data Deletion Instructions.
9. Security
We protect data with encryption in transit (HTTPS/TLS), encryption of access tokens and credentials at rest, row-level access controls in our database, role-based permissions inside the platform, and restricted administrative access. No system is perfectly secure, but we work to industry-standard practices and review our controls regularly.
10. Children
Apek Flow is a business service and is not directed to children under 16. We do not knowingly collect data from children.
11. Changes to this policy
We may update this policy as the service evolves. Material changes will be communicated to clients by email, and the “last updated” date above will change.
12. Contact us
Questions about this policy or your data: Apek Translation Service 16 Chingiz Aitmatov Ave, Bishkek 720017, Kyrgyz Republic Email: apektranslation@gmail.com Phone: +996 700 447475