IUROP Translate

IUROP Translate privacy policy

Last updated: October 5, 2026

1. Who we are

IUROP Translate is an app for Shopify stores that translates the store’s content and keeps it up to date. It is a service provided by:

  • Data controller: iUROP SLU

  • Tax registration number (NRT): L-717465-P

  • Address: Carrer Prat de la Creu 59-65, Escala D, Planta 1, 4DEF, Espai 2, AD500 Andorra la Vella, Andorra

  • Contact (including privacy): contact@iuropagency.com

In this policy, “we” means iUROP SLU; “you” or “the merchant” means the person or business that installs the app on their store. We process data in accordance with Andorra’s Law 29/2021 of October 28 on the protection of personal data and, where applicable, Regulation (EU) 2016/679 (GDPR). Andorra has an adequacy decision from the European Commission.

2. What data we process

The app works with your store’s content, not with your customers’ data. When you install it, you allow us, through Shopify, to read and write only what’s needed to translate:

Shopify permission

Purpose

Shopify permission

Store languages (read_locales, write_locales)

Purpose

Know which languages your store has and add or publish the ones you choose.

Shopify permission

Translations (read_translations, write_translations)

Purpose

Read translatable texts and save their translations in Shopify.

Shopify permission

Products (read_products)

Purpose

Read names, descriptions, options and alt texts.

Shopify permission

Content (read_content)

Purpose

Read pages, blogs and articles.

Shopify permission

Navigation (read_online_store_navigation)

Purpose

Read menus and links.

Shopify permission

Themes (read_themes)

Purpose

Read theme texts and know when you publish a new theme.

Shopify permission

Markets (read_markets)

Purpose

Know which languages your customers see in each market or domain.

We don’t request customer or order permissions, and we don’t receive or store your customers’ personal data (names, emails, addresses, orders or payments).

Specifically, we store:

  1. Store data: .myshopify.com domain, primary language, published languages, and your Shopify plan to the extent needed to know whether your store can publish languages.

  2. Your store’s texts and their translations: an index of translatable texts so you can search them, the status of each translation (when it was made, how, whether you edited it by hand), previous versions, and a translation memory so the same text isn’t translated twice.

  3. What you set up in the app: glossary, brand voice and instructions, learned corrections, exclusions, settings and preferences.

  4. Usage and billing data: translated store size, words translated per month, chosen plan and plan history, and the subscription status in Shopify. Billing is handled by Shopify: we never see or store card or payment details.

  5. Access credentials: the token Shopify gives us to act on your store, stored on our server. It belongs to the store, not to a person: we don’t store the name or email of the staff who use the app.

  6. Technical logs: error logs, translation run logs, and regular server logs (time and address of requests). They are deleted automatically as their reserved space fills up.

  7. Store check: we visit public pages of your store in each language, as a customer would, to tell you what’s missing. We only read what any visitor can see.

3. Why we use it and on what basis

  • To provide the service you sign up for (translating your store, keeping it up to date and showing you its status): performance of a contract.

  • To bill through Shopify and check that your store fits its plan: performance of a contract.

  • Security, abuse prevention and bug fixing: legitimate interest.

  • Legal obligations (for example, tax): legal obligation.

We don’t use your texts for advertising, we don’t sell them and we don’t build profiles. Our AI provider (Anthropic) doesn’t use data received through its API to train its models.

4. Who we share it with

Only with those we need to provide the service:

Provider

What it receives

Purpose

Where

Provider

Shopify

What it receives

The translations we save to your store; billing

Purpose

It’s your platform: translations live there

Where

Per your agreement with Shopify

Provider

Anthropic (Claude models)

What it receives

Your store’s texts to be translated, with your glossary, tone and instructions

Purpose

Generate the translations

Where

United States, with the safeguards of its data processing agreement (standard contractual clauses)

Provider

OVH (hosting)

What it receives

Everything described in section 2

Purpose

Host the app and its database. Part of the AI work (for example, the sample before you subscribe) runs on a model on this same server, without sending texts to third parties

Where

France (European Union)

Provider

Google (Google Drive)

What it receives

A daily copy of the database, encrypted: Google cannot read its contents

Purpose

Keep a backup outside our server

Where

Google servers, under the safeguards of its data processing agreement

The texts we send to the AI provider are content that is public, or that you’re going to publish, on your store (products, pages, menus). If your content includes personal data (for example, a person’s name in a blog post), that text is translated too: we recommend not putting third parties’ personal data in your store’s texts.

If we ever add a new provider, we’ll add it to this policy before using it (section 9).

We may disclose data to authorities when required by law.

5. How long we keep it

  • While the app is installed: everything needed to provide the service.

  • When you uninstall: we stop translating and accessing your store. Shopify cancels the subscription. The translations already published stay in your store: they’re yours and they’re stored in Shopify, not in our app.

  • 48 hours after you uninstall, Shopify sends us the shop/redact notice and we delete all your store’s data from our database (glossary, settings, translation memory, statuses, app logs). Until then we keep it so that, if you reinstall, you don’t have to set everything up again or pay again for what’s already translated.

  • Backups: the database is backed up daily on our server (kept for 14 days) and, encrypted, outside it (the last 2 are kept). Deleted data disappears from the backups when they expire.

  • The subscription invoice is issued by Shopify; we don’t keep separate billing data.

6. Privacy requests from your customers

Shopify forwards your customers’ data access and deletion requests to us (customers/data_request and customers/redact). Since the app doesn’t store customer data, there’s nothing to hand over or delete: we reply to Shopify confirming receipt. All these calls are verified with Shopify’s signature.

7. Security

  • Encrypted connections (HTTPS) between your store, Shopify, our server and the AI provider.

  • Access to your store only with the token Shopify gives us and only with the permissions in the table in section 2.

  • The server can only be accessed with cryptographic keys (never with a password). The database can’t be queried from outside the server, and the internal admin panel is password-protected.

  • Translations are saved through Shopify’s official translations API: the app doesn’t add scripts to your store or serve your store from our servers.

8. Your rights

You can request access, rectification, erasure, objection, restriction and portability of your data by writing to contact@iuropagency.com. Uninstalling the app triggers full deletion after 48 hours (section 5); if you want us to delete it sooner, write to us.

If you believe we haven’t handled your data properly, you can file a complaint with the Andorran Data Protection Agency (APDA, www.apda.ad) or, if you live in the European Union, with the data protection authority in your country.

9. Changes to this policy

If we change anything important (for example, a new provider), we’ll let you know inside the app before it applies and update the date above.