GDPR COMPLIANCE STATEMENT

Last Updated: 7 January 2026

WordsTalk Pte. Ltd. ("we", "us", "our") is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"). This statement explains how we collect, use, and protect your personal data when you use our WordsTalk browser extension.

1. Data Controller

Data Controller: WordsTalk Pte. Ltd.

Registered Address: 8 Lorong Pisang Emas, Hoover Park, Singapore 597825

Data Protection Officer:

General Contact:

2. Data We Collect

Our extension collects the following categories of data:

Data Category
Description
Purpose
Account Information
Mobile phone number, username (if registered)
Account management, service delivery
Translation Content
Text submitted for translation (real-time processing, stored for History feature)
Providing translation services (NOT used for AI model training)
Usage Data
Feature usage, language preferences, settings
Service improvement, personalization
Technical Data
Browser type, extension version, error logs
Technical support, bug fixing
Payment Information
Transaction details (processed by third-party payment providers)
Subscription management, billing

We do NOT collect: browsing history, website content (other than text you explicitly select for translation), passwords, financial information, or any sensitive personal data as defined under GDPR Article 9.

3. Legal Basis for Processing (GDPR Article 6)

We process your personal data under the following legal bases:

  • Consent (Art. 6(1)(a)): For processing translation content and optional analytics.
  • Contract Performance (Art. 6(1)(b)): For providing translation services you requested.
  • Legitimate Interests (Art. 6(1)(f)): For service improvement, security, and fraud prevention.

4. Your Rights Under GDPR

As an EU/EEA resident, you have the following rights:

  • Right of Access (Art. 15): Request a copy of your personal data.
  • Right to Rectification (Art. 16): Request correction of inaccurate data.
  • Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten").
  • Right to Restrict Processing (Art. 18): Request limitation of data processing.
  • Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
  • Right to Object (Art. 21): Object to processing based on legitimate interests.
  • Right to Withdraw Consent (Art. 7): Withdraw consent at any time without affecting prior processing.

To exercise these rights, contact our DPO at . We will respond within 30 days.

5. Data Retention

  • Translation content: Processed and stored encrypted to provide History access. Data remains stored until you close your account. You have the right to request deletion of specific records or your entire history by contacting us.
  • Account data: Retained while your account is active; deleted within 30 days of account closure.
  • Technical logs: Retained for up to 90 days for troubleshooting purposes.

6. International Data Transfers

Your data may be transferred to and processed in Singapore and other countries where our servers or service providers are located. For transfers outside the EU/EEA, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection of your personal data.

7. Third-Party Data Sharing

We may share your data with:

  • AI Service Providers: For processing translation requests (subject to data processing agreements).
  • Cloud Infrastructure Providers: For hosting and data storage (with appropriate security measures).
  • Legal Authorities: When required by law or to protect our legal rights.

We do NOT sell your personal data to third parties.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including: encryption of data in transit (TLS/SSL) and at rest; access controls and authentication; regular security assessments; and employee training on data protection.

9. Cookies and Local Storage

Our extension may use local storage to save your preferences and settings. We do not use tracking cookies. Any data stored locally remains on your device and is not transmitted to our servers unless necessary for service functionality.

10. Children's Privacy

Our extension is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If we become aware of any such collection, we will promptly delete the data.

11. Updates to This Statement

We may update this GDPR Compliance Statement from time to time. Material changes will be notified through the extension or via email. The "Last Updated" date at the top indicates when this statement was last revised.

12. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your residence, place of work, or where the alleged infringement occurred.

13. Contact Us

For any privacy-related inquiries or to exercise your rights:

Data Protection Officer:

General Contact: