Legal · Updated October 28, 2026

Privacy Policy.

Your privacy is important to us. This policy explains what data we collect, how we use it, and what rights you have regarding it.

1. Data Controller

The data controller for your data is the owner of Lantis (hereinafter, "Lantis", "we"):

Owner
Pol Angrill Domingo
Tax ID
ES48021407Y
Address
Rambla Principal 92, 08800 Vilanova i la Geltrú (Barcelona), Spain
Email
hello@get-lantis.com

2. Data we collect

We collect the following data depending on how you use the service:

  • Account data: name, email and (hashed) password upon registration.
  • Payment data: processed directly by Paddle (Paddle.com Market Ltd), which acts as the reseller and Merchant of Record for orders. Lantis does not store card data.
  • Usage data: configured languages, number of translated words, registered sites.
  • Technical data: IP address, browser type, operating system and pages visited on the dashboard.
  • Web content: texts from your site that pass through our edge layer to be translated. We do not store them permanently beyond the necessary cache time.
  • Web platform integrations: if you connect a platform such as Webflow, the data described in section 5.

3. Purpose and legal basis

We process your data for:

  • Provide the service (legal basis: contract performance).
  • Manage payments and billing (legal basis: contract performance and legal obligation).
  • Send you service communications, such as confirmations and technical alerts (legal basis: legitimate interest).
  • Send you news and offers, only if you give your express consent.
  • Improve the service through anonymized usage analysis (legal basis: legitimate interest).
  • Comply with legal obligations when applicable.

4. Recipients and transfers

We share data with the following trusted providers, who act as data processors:

  • Supabase — database and authentication (servers in the EU).
  • Cloudflare — edge network and translation cache (international transfer with adequate safeguards).
  • Paddle — payment processing, invoicing, and taxes as Merchant of Record (United Kingdom, a country with an EU adequacy decision).
  • Bunny.net (BunnyWay d.o.o., Slovenia) — Content delivery network that serves translated versions when you connect your domain (servers in the EU and other countries, with adequate safeguards).
  • Railway — Hosting for the Lantis dashboard and API (United States, with standard contractual clauses).

To translate, we send your website's text (never your account data or visitor data) to the AI engine for each site, which you select in the dashboard:

  • Google (Gemini) — Default engine (United States, with standard contractual clauses).
  • Anthropic (Claude) — United States, with standard contractual clauses.
  • DeepL — Germany (EU).
  • DeepSeek — China (international transfer to a country without an EU adequacy decision).

If the chosen engine fails, the translation falls back to DeepSeek and, if that also fails, to Anthropic, to ensure your website remains translated. This is why DeepSeek may receive text even if you have not selected it. We do not sell your data to third parties.

5. Webflow integration

If you connect a Webflow site with the Lantis app, Webflow grants us a (OAuth token) permission limited to reading your websites, managing Lantis custom code on them, and publishing them when you ask us to. We use this to store the identifier, name, and address of the websites you authorize.

  • The token is stored encrypted (AES-256-GCM) exclusively on our servers. It is never sent to your browser and is not shared with anyone.
  • We only use it to list your websites, install, update, and remove the Lantis script, and publish the site when you request it.
  • We delete it when you click "Disconnect" in Lantis. If you uninstall the app or revoke permission from Webflow, we delete it in less than an hour, upon verifying that it is no longer valid.
  • We do not read or store your Webflow project content via the API: only the public text of your website, for translation purposes, just like with any other website.

6. Retention period

We keep your data for as long as we have a contractual relationship. After account cancellation, we delete or anonymize the data within 90 days, unless the law requires longer retention (e.g., billing data for 5 years according to Spanish tax regulations).

7. Your rights

You have the right to:

  • Access: know what data we have about you.
  • Rectification: correct inaccurate data.
  • Deletion: request that we delete your data.
  • Portability: receive your data in a structured format.
  • Opposition: object to processing based on legitimate interest.
  • Limitation: restrict processing in certain cases.

To exercise any right, write to us at hello@get-lantis.com. We will respond within a maximum period of 30 days. If you are not satisfied, you may file a complaint with the Spanish Data Protection Agency (AEPD).

8. Security

We apply technical and organizational measures to protect your data: encryption in transit (TLS), at rest, role-based access control and periodic security audits. In the event of a security breach affecting your data, we will notify you within the legally established timeframe.

9. Cookies

We use our own and third-party cookies. You can consult our Cookie Policy for more information and to manage your preferences.

10. Changes to this policy

We may update this policy when necessary. We will notify you by email before the changes take effect. The update date always appears at the beginning of the document.

Español English Deutsch Italiano Português Català Français