Privacy policy.

Al-Andalus Group Ltd, a company registered in the United Kingdom, operates the platform and is the controller of the personal data described here. You can reach us about privacy at support@alandalusgroup.co.uk.

When an organisation (for example a publisher or institute) uploads content to the platform for translation, we process that content on the organisation’s behalf and under its instructions. Questions about that content are best raised with the organisation first.

• Account details: your name, email address, preferred language, and a securely hashed password. If you sign in with Google, Facebook or LinkedIn, we receive your name, email address and profile picture from that provider.
• Organisation and billing details: your organisation’s name, billing email, VAT number and purchase-order reference. Card details are entered on Stripe’s pages and never reach our servers.
• Your content: documents, images, audio, video, subtitles and text you upload, the translations and edits made to them, comments, glossaries, translation memory, reference books and messages to the project assistant.
• Work records: who edited which segment and when, workflow stages completed, and usage of AI features (model, amount used and cost), so work can be reviewed, credited and billed.
• Professional details you choose to give us, such as qualifications and credential documents submitted for Sharīʿah-reviewer verification, and payout details if you are paid for work on the platform.
• Messages you send us, such as support requests and their attachments.

We do not use advertising or analytics trackers, and we do not sell personal data.

• To provide the platform: running translation, transcription, subtitling and dubbing, storing your projects, and letting your team collaborate. This is necessary to perform our contract with you or your organisation.
• To take payment and keep financial records, including VAT invoices. This is necessary for the contract and to meet legal obligations.
• To keep the platform secure, prevent misuse and fix problems. This is in our legitimate interest in running a safe service.
• To send you service messages, such as invitations, verification and password emails, billing notices and replies to support requests.

We do not use your content to train AI models.

We use carefully chosen service providers to run the platform. They process data only to provide their service to us:

• Google Cloud (United States) — hosting, database and file storage for the whole platform.
• Anthropic and OpenAI — AI models that draft translations, read text in images and transcribe audio. They receive the text, images or audio being processed.
• Deepgram — speech-to-text for audio and video you ask us to transcribe.
• ElevenLabs — text-to-speech voices for dubbing. It receives the translated text being voiced.
• Stripe — payments, invoices and VAT calculation. It receives your organisation’s billing details and processes card payments directly.
• Hostinger — email delivery for the messages the platform sends.
• Google, Facebook and LinkedIn — only if you choose to sign in with them.

Within the platform, your content is visible only to members of your organisation and the specialists assigned to your project. We may also disclose data where the law requires it.

The platform is hosted in the United States, and several of our providers are based there. Where personal data leaves the UK, we rely on the safeguards UK law provides for such transfers, such as the UK International Data Transfer Addendum or the providers’ standard contractual clauses.

• Account and project data: for as long as the account is active, and until you or your organisation delete it or ask us to.
• Downloaded export files: removed after 7 days.
• Invoices and financial records: 7 years, as UK law requires.
• Sign-in sessions: access expires after 24 hours and a remembered session after 7 days.

Deleting a project or file removes it from the platform. Some records, such as the history of edits and billing records, may be kept for as long as we need them for the purposes above or the law requires.

Under UK data-protection law you can ask us for a copy of your personal data, ask us to correct or delete it, object to or ask us to restrict how we use it, and ask for data you gave us in a portable format.

To make a request, email support@alandalusgroup.co.uk from the address on your account. We will reply within one month. There is not yet a self-service button for deleting an account, so we handle deletion requests by email.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to help first.

We do not set advertising or analytics cookies. The platform keeps a few things in your browser’s local storage so it works: your sign-in session, your light or dark theme, your progress in the Learning Center and screen preferences such as panel layouts.

If you choose to sign in with Google or Facebook, those providers may set their own cookies. Our pages load fonts from Google Fonts, which receives your IP address to deliver them.

Traffic to the platform is encrypted, files are kept in private storage that is encrypted at rest, passwords are stored only as secure hashes, and access within the platform is limited by role. No system is perfectly secure, so please use a strong password and keep your sign-in private.

The platform is a professional tool and is not intended for children. Accounts are for people aged 18 and over.

We will update this page when our practices change, and change the date at the top. If a change is significant, we will tell account holders by email or in the platform.