Privacy Policy

Last updated 2026-08-24

DIY Certified Translations is a certified document translation service operated by Juke Brands LLC (Dallas, Texas). We handle sensitive identity documents, so privacy is a load-bearing part of the product. This policy explains what we collect, why, who we share it with, and the control you have over your data.

Who we are

"DIY Certified Translations," "we," "us," or "our" refers to the DIY Certified Translations service of Juke Brands LLC, which operates one processing platform across its translation brands; your data is handled under the same safeguards regardless of which brand site you use. Reach us at [email protected].

What we collect

• Contact details — the email address (and optional phone number, both encrypted at rest) you give at checkout, used for order receipts, delivery links, and opted-in SMS.
• Uploaded documents — the source documents you upload (typically birth certificates, marriage records, transcripts, licenses, and similar identity or filing documents), stored encrypted at rest. They are the thing we translate.
• Payment metadata — charge ID, card last-4, billing ZIP from our payment processor. You enter card details directly into the processor's form; we never see the full number.
• Technical metadata — IP address, user agent, timestamps, action logs, for abuse prevention and the security audit trail.

How your document is translated

Your document is processed by our translation and formatting software — a proprietary pipeline that produces the formatted translation, runs completeness and quality checks, and prepares the certification page. As part of this pipeline, document content is transmitted to one or more trusted commercial technology providers under our API contracts, whose language-processing models perform translation steps within our workflow. We do not send your email, payment details, or other identifying metadata alongside the document, and on the plans we use these providers do not train their models on submitted content. The current provider list — and every other third party that handles your data — is maintained at /subprocessors.

What we do NOT do

• We do not sell your personal information.
• We do not use your documents to train AI models — neither our own (we don't train models) nor the third-party providers', under the API plans we use.
• We do not share your data with advertisers.

Retention and deletion

• Customer-controlled deletion. You can request deletion of your uploaded documents and translated outputs at any time via the platform deletion endpoint or by emailing [email protected] from your order email. We permanently delete documents from storage and irreversibly clear identifying PII; anonymized order records are retained for accounting and fraud prevention.
• Automatic retention period. We are implementing an automated retention process for uploaded documents and outputs; this policy will state the specific window when it is in place. Until then, customer-controlled deletion is the canonical mechanism.
• Legal exceptions. Records required for tax, accounting, audit, or fraud-prevention purposes may be retained as required by law (typically up to 7 years for financial records), even after a deletion request.

Your rights

Depending on where you live, you may have rights to access, delete, correct, or port your personal information, to opt out of "sale" or "sharing" (we don't sell data — you can formally opt out at /do-not-sell), to non-discrimination for exercising these rights, and to object to processing. Email [email protected] — we respond within 30 days, usually faster.

Cookies

• Order access tokens (essential) — set when you open an order link from your email so you can view your order without an account.
• Analytics — page views and feature usage, to improve the product.

International transfers, children, security

The service is operated from the United States and your data is processed there; we rely on standard contractual clauses with subprocessors where applicable. The service is intended for adults and is not directed at children under 18. We protect your data with encryption in transit and at rest, access restrictions, logging, and monitoring; if a security incident affects your personal data, we will notify you within the timeframes required by applicable law.

Changes and contact

Material changes to this policy will be posted here with a new "Last updated" date. Privacy questions and security disclosures: [email protected]. See also our Terms of Service and Refund Policy.