Privacy Policy

1. Who we are

GlobalAnnotate (“GlobalAnnotate”, “we”, “us”, “our”) is a language services and AI data company providing translation, localization, MTPE, subtitling, transcription, LQA, game localization, AI data annotation, and RLHF across 100+ languages. We operate the website globalannotate.com and deliver services to clients worldwide through an in-house team and a vetted network of linguists in 30+ countries.

This policy explains what personal data we collect, why, how we protect it, and the rights you have. It applies to our website, our contact and quote forms, our freelancer and linguist applications, and the personal data contained in client project content we process on our clients’ behalf.

Data controller: GlobalAnnotate— registered address to be confirmed. [Registered address — TODO]

Privacy contact: [email protected]

2. The information we collect

We collect the following categories of information:

• Website visitors.Aggregate, largely anonymized analytics (pages viewed, approximate region, device/browser type) and cookie data. Non-essential analytics cookies are set only after you consent — see “Cookies” below.
• Contact & quote forms. Your name, business email, company (optional), project description, budget, and timeline when you request a quote or contact us.
• Client project files & content.Documents, strings, audio, video, images, and other materials a client sends us to translate, localize, annotate, or validate. These may contain personal data (and, in some engagements, special categories such as health data) belonging to the client’s own users or employees. For this content we normally act as a processoron the client’s instructions.
• Freelancer & linguist applications.Name, contact details, country, language pairs, specializations, rates, experience, a link to a CV or portfolio, and — for engaged linguists — the payment and tax details needed to pay you.
• AI data project content. Text, prompts, responses, images, audio, or other data provided for annotation, evaluation, or RLHF, which may include personal data supplied by the client.
• Review submissions. Name, company, country, rating, and review text when you choose to leave a review.
• Email correspondence. The content of messages you send to us.

3. Lawful bases and how we use data

Where the GDPR, UK GDPR, or the Nigeria Data Protection Act 2023 applies, we rely on one or more of the following lawful bases:

• Contract— to prepare proposals, deliver and invoice services, and manage our relationship with clients and linguists.
• Consent— for non-essential cookies and for optional marketing communications, which you can withdraw at any time.
• Legitimate interests— to operate, secure, and improve our website and services, prevent fraud, and respond to enquiries, balanced against your rights.
• Legal obligation— to meet tax, accounting, and other legal requirements.

Client content is used only to deliver the engagement it was provided for. We do not use client content, or data contained within it, to train our own or any third party’s AI models unless the client has agreed to that use in writing.

4. Confidentiality & security

• Every in-house team member and network linguist works under a signed non-disclosure agreement (NDA) before receiving any client material.
• Access to project files follows the principle of least privilege — only the linguists and project leads assigned to a project can access its content.
• Files are transferred and stored over encrypted connections (TLS), and access to our systems is protected by authentication controls.
• Retention & deletion of project files: we keep client project files only as long as needed to deliver and support the engagement. Unless a contract, SOW, or legal obligation requires a different period, project files are deleted or anonymized after the project closes.
• Sensitive data— medical and other health information (including PHI), legal material, and personal identifiers (PII) — is routed to vetted specialists, handled under the relevant contract and NDAs, and subject to tighter access and retention controls. See our Security & Confidentiality page for details.

5. Subprocessors & international transfers

We use a small set of vetted subprocessors to run the business and deliver services — for example, hosting, form delivery, email, and secure file transfer providers — and our network of linguists is distributed across many countries. This means personal data may be transferred and processed outside your country of residence, including outside the EEA, the UK, or Nigeria.

Where such transfers happen, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum where relevant), together with confidentiality and data-protection terms in our subprocessor and linguist agreements. A current list of subprocessors is available to clients on request at [email protected].

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. Under the GDPR/UK GDPR and the Nigeria Data Protection Act 2023 you also have the right to lodge a complaint with your supervisory authority (in Nigeria, the Nigeria Data Protection Commission).

California residents (CCPA/CPRA):you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of any “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under the CCPA, and we do not discriminate against you for exercising your rights.

To exercise any right, email [email protected]. For personal data we process as a processor on a client’s behalf, we will refer your request to that client (the controller) and support them in responding. We respond within the timelines required by applicable law.

7. Cookies

We use a minimal set of cookies and similar technologies. Strictly necessary cookies (for core site functionality and your theme/consent preferences) are always on. Non-essential cookies, including any analytics, are set only after you consent through our cookie banner. You can change your choice at any time via Cookie settings in the footer. At present we do not load third-party analytics or advertising cookies without consent.

8. Children’s data

Our website and services are intended for businesses and professionals and are not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us personal data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new “Last updated” date.

10. Contact

Questions, requests, or complaints about privacy? Email [email protected]. For general enquiries, use [email protected] or our contact page.