Lara Translate

GDPR overview

GDPR implementation is concrete and documented, not a badge. The privacy notice is issued under Article 13 of Regulation (EU) 2016/679 by a named controller, Translated s.r.l., Via Indonesia no. 23, Rome, VAT IT07173521001, info@translated.com; it is version 1.4, last updated May 2026. Legal bases are cited article by article: 6(1)(b) for contract performance, 6(1)(c) for accounting and tax duties, 6(1)(a) for cookies and marketing, 6(1)(f) for legitimate interest. Rights under Articles 15 to 23 are exercised at support@laratranslate.com, with a complaint route to the Italian supervisory authority. A Data Processing Addendum is published and folded into the terms, sub-processors are listed by name with their processing locations, and transfers rely on Standard Contractual Clauses and the EU-US Data Privacy Framework. Consent is managed through Cookiebot. No Article 27 representative is designated, and none is needed: the company is established inside the Union.

Who owns the data?

Users keep ownership of everything they submit, and stay responsible for holding the rights to it. For account data, the controller is Translated s.r.l. in Rome. For personal data sitting inside the content you send for translation, the roles invert: you are the independent controller and Lara acts as processor under its published Data Processing Addendum, with named sub-processors. What the vendor may do with your text depends on one switch. In Learning Mode you grant permission to use your content solely to refine the translation model, and nothing else; ownership stays yours and deletion can be requested from support. In Incognito Mode nothing is stored at all. Data is never sold on to third parties for their own marketing.

Reuse rights

You may reuse your source texts and your translations freely, without asking permission: nothing in the terms claims a licence over your output. Two limits are explicit and worth reading before you build on Lara. First, you may not use any output, data, feedback or metadata from the service to develop, train, fine-tune, validate or improve any machine-learning or large language model, competing or not, and you may not use it as training, evaluation or reference data for another product or model, commercially or otherwise. Second, if you use the share-by-URL feature, the source text, the language pair and any context you supplied travel inside the link, and anyone holding that link can read and edit them. Lara may also cite a customer by name and logo in its sales material, which the customer can refuse.

Data retention & training

Hosting summary

The controller is Translated s.r.l. in Rome, and disputes fall under Italian law before the Court of Rome. Hosting runs on AWS, which provides the application servers, translation processing, storage and backups, with the processing location declared as the EU or the USA under a data processing agreement with Standard Contractual Clauses and UK or Swiss addenda as needed. The sub-processor list, dated 3 December 2025, names every other party and where it operates: Stripe, PostHog, Cookiebot, ActiveCampaign and HubSpot in the EU; Sentry in the EU for EU data and in the US otherwise; Google Analytics 4, Google Ads and Google Workspace in EU data centres with extra-EU transfers covered by Standard Contractual Clauses and adequacy decisions; Meta and LinkedIn as joint controllers under Article 26. One caveat on geography: the domain resolves to a CloudFront edge node in Switzerland, which is a point of presence, not a place where anything is stored. Enterprise customers can negotiate data sovereignty and residency, and an ISO 27001:2022 badge is displayed site-wide.