DualTrans Privacy Policy

DualTrans ("we", "us", or "our product") respects and values your privacy and data security. This Privacy Policy outlines how we collect, process, and protect your personal information when you use the DualTrans browser extension and our website (https://dual.productcool.com).

1. Information We Collect and Purpose

We strictly follow the principle of data minimization, collecting only information necessary to deliver our translation and membership services:

• Account Identification: When you sign in using Google OAuth, we receive and store your email address, display name, and avatar URL. This information is used solely to identify your account, synchronize Pro subscription privileges across your devices, and provide customer support.
• Pro Token Consumption: If you subscribe to Pro, we record your aggregated monthly cloud AI token usage to power quota dashboards and ensure fair usage across our infrastructure.
• Anonymous Crash & Telemetry Diagnostics: To resolve compatibility bugs across various browser versions, we may collect anonymous technical telemetry (e.g., browser release, OS platform, extension version). This never contains web page text, personal identifiers, or browsing URLs.

2. Information We Never Collect

• Browsing History & Activity Logs: The extension only reads text nodes within the active tab when you explicitly trigger translation or enable auto-bilingual mode. We never monitor, log, or store your browsing path or URL history.
• Custom Third-Party API Keys (BYOK): Keys entered in the extension settings (such as OpenAI, DeepSeek, Gemini, Claude, Groq) are saved strictly inside your browser's chrome.storage.local. Translation requests are sent directly from your browser to the respective model provider; our backend never intercepts or accesses your keys.
• Sensitive User Inputs: Password fields, credit card inputs, and forms marked with sensitive attributes are automatically bypassed by the DOM parser and never extracted.

3. Browser Permissions & Justification

To deliver seamless bilingual injection, the extension requests the following minimum required permissions:

4. Third-Party AI Providers & Data Transmission

When you translate web content, text blocks are partitioned into segments and sent over encrypted TLS/HTTPS connections to your chosen translation service provider (Google Translate, Microsoft Edge, DeepSeek, OpenAI, Google Gemini, Claude, etc.). Each third-party provider operates under its own privacy policy and security standards.

5. User Rights & Account Deletion

Under applicable data protection laws (including GDPR and CCPA), you have the right to access, rectify, or request the deletion of your personal data held on our servers. To delete your account or clear stored records, email [email protected]. We will verify and permanently delete your data within 3 business days.