Privacy Notice v1.0-2026-07-24

Version 1.0 — last updated 24 July 2026. Hablexo is operated by Hablexo Ltd, a company registered in England & Wales (company no. 17354416), registered office 167-169 Great Portland Street, 5th Floor, London W1W 5PF. Hablexo Ltd is the data controller for the account and billing data described below. Contact: hello@hablexo.com.

Hablexo delivers real-time speech translation to attendees’ phones. We built it to hold as little personal data as possible: on our servers the live content is processed in memory and never stored, and the only data we retain is what we need to run your account and bill usage. Some event content can be stored — not by us, but on the event organiser’s own device: chat posts always, and transcripts or audio recordings only if the organiser turns those on. See below.

The short version

• Captions, translations and audio are never stored on Hablexo’s servers. They are fanned out to devices in memory and discarded — we keep no transcript or recording.
• Some content is stored on the event organiser’s own device — never on ours. If you post in an event’s chat forum, your message (and the chat name you chose, if any) is saved by the organiser’s Hablexo app so the forum survives a restart; it is kept for a limited period — 7 days by default — and the organiser can delete it at any time. And if the organiser switches on transcript logging or audio recording (both are off by default), the event’s captions or audio are stored on the organiser’s device too.
• Attendees do not have accounts. Scanning a QR code to read captions gives us no login and no identity. To deliver captions to your phone we necessarily handle its network (IP) address, and we store a few preferences on your own device — see If you are an attendee.
• We retain only account & billing data — the account holder’s email, aggregate usage counts, and payment records — never caption content.
• We never sell your data and we don’t use it for advertising.

Information we collect

• Account: the email address you sign up or sign in with, and either a password (stored only as a salted hash) or — if you use “Continue with Google” — your Google-verified email address.
• Usage & billing: aggregate counts of minutes and messages translated (numbers only, no content), your credit balance, and transaction records.
• Operational logs: minimal technical logs (e.g. connection and error events) to keep the service reliable and secure. These do not contain caption content.
• Support: if you contact support or send a problem report from the app, we receive what you choose to send — the report text, an optional reply-to email address, and a short technical log excerpt that is scrubbed of secrets before it leaves your machine.

We do not collect or store the audio, transcripts, translations, chat messages, or synthesized speech that pass through the service. Note the emphasis: a chat post — and, where the organiser has switched on transcript logging or audio recording, a transcript or recording — is stored by the organiser’s app, on the organiser’s own device, as described above and below.

If you are an attendee

You scanned a QR code to read captions in your language. You have no account with us and we do not ask who you are. For most attendees, this is everything that happens:

• Your phone’s IP address is handled by our server for as long as your device is connected, because a caption cannot be delivered to a device without one. We do not log it to build a profile, and we do not use it to identify you.
• The language you pick is sent to our server so it knows which caption stream to send you. It is not tied to any identity.
• A few preferences are stored on your own phone (language, theme, text size, and your chat name if you set one) so the page remembers them. They stay on your device; they are not transmitted to us as a profile, and clearing your browser data removes them.
• Captions and translations are not stored by us. The organiser’s app does not store them either, unless the organiser has switched on transcript logging or audio recording — both are off by default, and anything they capture is stored only on the organiser’s own device, under the organiser’s control (see Retention, below).

If you post in a chat forum, that is different, and it is worth reading twice: your message and your chosen chat name are saved on the event organiser’s device (not on Hablexo’s servers), kept for a limited period — 7 days by default — and deletable by the organiser at any time. The Hablexo app tells you this at the moment you open a chat forum, before you can post.

Who is responsible for your data. The organiser running the event decides to run it, what is said, and which languages are offered — so for the event’s content they are the data controller and Hablexo acts as their processor, on their instructions. If you want to exercise your rights over an event’s content or its chat history, contact the organiser. For the narrow part we do for our own purposes (delivering the stream to your phone, and the preferences stored on your device), contact us at hello@hablexo.com.

Signing in with Google

If you choose “Continue with Google”, Google shares with us only your verified email address and basic profile (name) so we can create or identify your account. We do not receive or store Google access or refresh tokens, and we request no access to your Gmail, Drive, contacts, or any other Google data. You can sign in with a password instead at any time.

Hablexo’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Payments

Card payments are processed by Stripe. Card details go directly to Stripe and never touch Hablexo’s servers. We receive only the confirmation and metadata needed to credit your account.

Why we process your data (lawful bases)

For the account and billing data we hold as controller, our lawful basis is the contract with you (running your account, metering and billing usage) and, for retained financial records, legal obligation (UK tax and accounting law). We rely on our legitimate interests for keeping the service secure and reliable (operational logs) and for handling support requests. For event content we act as a processor on the organiser’s instructions — the organiser is responsible for their own lawful basis for the event.

Service providers (processors)

We use a small set of providers strictly to deliver the service; they process data on our instructions and only as needed:

• Speech-to-text: Soniox and ElevenLabs process live audio transiently to produce transcripts. The audio captured at the event is streamed to the speech provider directly from the organiser’s device using short-lived access tokens — it does not pass through Hablexo’s servers. (Optional synthesized spoken audio travels to phones via our servers in memory only, like captions.)
• Translation: Makora and Google Cloud process transcript text transiently to produce translations. This content is not retained by us.
• Payments: Stripe.
• Email: Migadu (correspondence) and Resend (account and verification emails).
• Hosting: our servers run on cloud infrastructure (Oracle Cloud) in the United Kingdom (London region).

Where a provider processes personal data outside the UK or EEA, we put an appropriate transfer safeguard in place (such as the UK International Data Transfer Agreement or Addendum, or standard contractual clauses). The current list of content-plane sub-processors, with locations, is published in the Data Processing Addendum.

Retention

On Hablexo’s servers: content-plane data (captions, translations, chat, audio) is retained only in memory for the few seconds or minutes needed for live delivery, then discarded. Account and billing data is kept for as long as you have an account and, after closure, only as long as required for legal, accounting, and tax purposes, in aggregate/pseudonymised form.

On the organiser’s own device, the Hablexo operator app writes a small number of files. These are on the organiser’s machine, under their control, and never sent to us:

• Chat history — attendee posts and chat names, per forum. Newest 50 per forum, deleted after 7 days by default. A forum can be set to memory-only so nothing is written at all. Deletable from Settings › Diagnostics.
• Audio recordings — off by default. Only if the organiser turns on “Record audio input”; capped by a disk budget and deleted after 7 days by default.
• Transcripts — off by default. Only if the organiser turns on transcript logging.
• Unsent problem reports — only while a report cannot reach us (offline); deleted after 30 days by default.
• A technical diagnostics log — operational events and errors, size-capped by rotation. It is not a transcript, and it is scrubbed of secrets before any part of it is sent to us with a problem report.

An organiser who records audio or logs transcripts is processing that content on their own equipment and is the controller of it.

Your rights

Depending on your location (including under UK/EU GDPR), you may request access to, correction of, or deletion of your account data, and you may object to or restrict certain processing. To make a request or ask a question, email hello@hablexo.com. If you are in the UK you also have the right to complain to the Information Commissioner’s Office (ico.org.uk); if you are in the EU/EEA, to your local supervisory authority. We would appreciate the chance to help first.

Cookies & storage on your device

We use only the storage necessary to run the app, and we do not use advertising or third-party tracking cookies. Specifically:

• Operator console: a session cookie to keep you signed in.
• Attendee page: your chosen language, theme, text size, chat name, and whether you have seen the chat privacy notice — all kept in your browser’s local storage, on your own device. Nothing here identifies you to us, and clearing your browser data removes it.

Changes

We may update this notice as the service evolves; material changes will be reflected here with a new version date.

Hablexo Ltd · Registered in England & Wales · Company No. 17354416 · Registered office: 167-169 Great Portland Street, 5th Floor, London W1W 5PF · hello@hablexo.com

Hablexo home · Terms of Service · Data Processing Addendum · Sign up