Subprocessors
The third parties that process personal data on our behalf when you use Lingivio Translate. This list is compiled from what the running system actually calls, not from a vendor inventory.
Last reviewed — 2026-07-31
These documents are drafts written by the operator and reviewed against the running system. They are not legal advice, and they are subject to review by a qualified practitioner before launch.
Who you are dealing with
Lingivio Translate is operated by Velniq Labs Ltd, a company being formed in the Republic of Cyprus. Incorporation is not complete, so the registration number, registered office and VAT number below do not exist yet and are shown as gaps.
- Company
- Velniq Labs Ltd
- Company status
- In formation. Not yet registered.
- Jurisdiction of incorporation
- Republic of Cyprus
- Company registration number
- to be completed before launch
- Registered office
- to be completed before launch
- VAT number
- to be completed before launch
- Date of incorporation
- to be completed before launch
- Operator of record until incorporation completes
- to be completed before launch
- Effective date of these documents
- to be completed before launch
- Company website
- https://velniq.ai
- Service
- https://layoutlock.velniq.ai
- Support
- support@velniq.ai
- Privacy
- privacy@velniq.ai
- Data protection contact
- dpo@velniq.ai
- Abuse reports
- abuse@velniq.ai
- Legal and contracts
- legal@velniq.ai
Values marked as pending do not exist yet. They are shown as gaps rather than filled with placeholders that look real, and the service does not launch until every one of them is filled in.
Last reviewed — 2026-07-31
| Processor | What it does for us | What it receives | Where it processes |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, database, object storage, caching, job queue, platform logs, and — only if you allow analytics — cookieless page-view measurement | All request traffic, all account and billing records, uploaded documents and translated outputs, abuse counters keyed to IP address, account id or API key id, platform logs which for an unmapped error can contain a fragment of a document, and — with analytics allowed — the page address, referring site and general device type its measurement script reports, with no identifier of you | Global edge, with no region pinned to the EU today |
| Modal Labs, Inc. | Runs the translation engine, including document parsing, OCR and re-rendering | The complete bytes of every uploaded document, the storage key which contains the account id and filename, the job options and any glossary terms, and the translated output | United States |
| OpenRouter, Inc. | Model gateway that routes translation requests to the model provider | The translatable text of the document including OCR text, glossary terms, target and source languages, formality and structural labels. No account identifier, email, filename or job id | United States |
| OpenAI, L.L.C. | Provides the language model that produces the translation | The same request content the gateway forwards: document text, glossary terms and translation settings, with no identifier of you | United States |
| Paddle.com Market Ltd | Merchant of record: sells the subscription, takes payment, issues invoices and handles tax | Your account id and chosen plan from us; your name, email, billing address, tax identifier and payment details collected directly by it from you | United Kingdom, European Union and United States |
| Functional Software, Inc. (Sentry) | Error reporting: tells us when our website, our interface or the translation engine has crashed, so we can fix it | The technical detail of a failure and nothing else: the error type, the code that raised it, the page or operation it happened in, and an account reference that is a one-way hash rather than your identity. Your document text, your file names, your glossary terms and your email address are stripped out before anything is sent, so none of them reaches this processor. That is a statement about error reporting only: the rows above describe the processors that do receive your document text, because translating it is what they are for | European Union |
One dependency worth knowing about
Which model provider receives your document text depends on the model we have deployed. Changing the model changes the processor at the end of that chain, so this page is re-verified against the deployed model as part of every model change. If you have a contractual requirement about which model provider sees your content, tell us before you rely on this page.
Not currently in use
Sign-in with Google is only a processor when Google sign-in is enabled on the deployment you are using; when it is, Google receives the sign-in request and returns your Google account id, email, name and profile image. An alternative payment provider is implemented in the code but is not switched on, and is not a processor unless and until this page says it is. Error reporting is named in the table above ahead of being switched on, which is deliberate: we would rather list a processor before it receives anything than after. Two limits hold whenever it is on: it receives nothing at all from your browser unless you have allowed diagnostics, and what it receives from our own servers is the technical detail of a crash with your content already removed.
Deliberately absent
There is no third-party product analytics provider, no session recorder, no advertising or marketing platform, no separate email service provider and no content moderation or antivirus vendor in this product. None of them is listed here because none of them exists in the code. Page-view measurement is Cloudflare's own, on infrastructure already listed above, and the funnel we keep is in our own database rather than sent to anyone.
Changes to this list
We will publish any addition to this list here, with a new review date, before or at the point the new processor begins handling customer data, and we will notify business customers who have asked to be told. If you object to a new subprocessor on reasonable data protection grounds, write to the privacy contact; if we cannot resolve it, you may terminate the affected subscription and receive a pro-rata refund of any prepaid period.