Crowdin
- The policy says your content is not used for AI training.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The policy describes staff access for safety and legal checks.
Localization SaaS: they collect account, files, and tracking data, run ads, and you them under Estonian terms.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account and billing info, files you upload, device IDs, cookies, and sometimes Google login data.
Read the exact line
Privacy policy
“Examples of Personal Data include name, email address, mailing address, and credit card or other billing information.”
Training
They run the service, improve it, send promos, and use cookies and partners for targeted ads.
Read the exact line
Privacy policy
“We work with a variety of third parties to attempt to understand the profiles of the individuals who are most likely to be interested in the Crowdin products or services”
Sharing
Hosters and other vendors see data; public profiles and public projects can be seen by anyone.
Read the exact line
Privacy policy
“These third parties may have access to, or process Personal Data or Client Data as part of providing those services for us.”
Kept
Closed accounts’ files go in about 3 months; backups 3 months; billing up to 7 years.
Read the exact line
Privacy policy
“the Client Data of closed accounts are deleted within 3 months of the date of closure”
Controls
You can edit account settings, unsubscribe from promos, and email them to access or delete data.
Read the exact line
Privacy policy
“You may update, correct, or delete your Account information and preferences at any time by accessing your Account settings page on the Service.”
Fine print
As-is service, you them, Estonia courts, class waiver, and fees charged in advance.
Read the exact line
Terms of service
“You agree to and Supplier and its affiliates, and their respective directors, officers, employees and agents,”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Update or delete account information in settings
Account settings page on the Service
Email privacy@crowdin.com to access or delete personal data
privacy@crowdin.com (How to Contact Us)
Opt out of Google Analytics on the public site
Google Analytics Opt-out feature described in Your Choices
Unsubscribe from promotional email
Link in the email or Settings tab on the account
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If someone sues Crowdin because of how you used the service, you may have to pay their legal bills.
Read the exact line
Terms of service
“You agree to and Supplier and its affiliates, and their respective directors, officers, employees and agents,”
For example, if a translation file you uploaded sparks a copyright fight, you could be on the hook for Crowdin’s lawyers.
Advertising networks help them guess your interests and show targeted ads.
Read the exact line
Privacy policy
“We work with a variety of third parties to attempt to understand the profiles of the individuals who are most likely to be interested in the Crowdin products or services”
For example, visiting Crowdin can lead to Crowdin ads following you on other websites.
If you post in a public project, others can keep using that content forever.
Read the exact line
Terms of service
“Client or User hereby grants Supplier and other Clients a , , nonexclusive, license under all rights necessary to incorporate, publish, reproduce, distribute, modify, adapt, prepare derivative works of, publicly display, publicly perform, exploit and use such Client Data, unless otherwise is stated in a written contract between Client or User and a respective party.”
For example, a translation you add to a public project can stay public even after you leave.
Payment records are kept for many years even after you leave.
Read the exact line
Privacy policy
“billing information is retained for a period of 7 years as of their provision to Crowdin in accordance with the Estonian accounting and taxation laws”
For example, your card and invoice history can sit in their books for seven years.
They can shut you off right away if they think you broke the rules.
Read the exact line
Terms of service
“immediately by the Supplier, in its sole discretion, in the event of material breach of these Terms or to prevent any unlawful or illegal activity or use.”
For example, they could lock the account without a warning email if they believe a file is illegal.
If they change the privacy rules, keeping using the site counts as agreeing.
Read the exact line
Privacy policy
“Your continued use of the Service after the revised Policy has become effective indicates that you have read, understood and agreed to the current version of the Policy.”
For example, you might not get a personal email before a new tracking practice starts.
Google Workspace data pulled through Crowdin is not used to train general AI models.
Read the exact line
Privacy policy
“We do not use this data to develop, improve, or train generalized artificial intelligence (AI) or machine learning (ML) models.”
For example, files from a connected Google Drive should not be fed into a public AI model.
You keep ownership of the files and translations you put in private projects.
Read the exact line
Terms of service
“Supplier respects your right to exclusive ownership of your Client Data.”
For example, your app’s source strings still belong to your company, not Crowdin.
They say the product is for adults, with a stated 18+ line.
Read the exact line
Privacy policy
“Our Service is not directed to children under the age of 18, and we do not knowingly collect Personal Data from children under the age of 18 without obtaining parental consent.”
For example, a 16-year-old should not create a normal Crowdin account.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- consent
- Your clear agreement to something, given by an action like ticking a box or tapping Accept. For example, a pop-up asking if the app may use your location is asking for consent.
How we got here · grade A · score 56/100 · 15 of 15 policy answers backed by a verified quote · 2 not stated
What does the app collect beyond what it needs to work?
They collect account and billing details, uploaded Client Data, plus IP, device IDs, cookies, pages viewed, and optional login data from Google and similar services.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
They say Google Workspace API data is not used to train general AI or ML models, and Client Data is only used for product improvement in anonymized or aggregated form.
Can employees or contractors read your conversations, and when?
Staff may access Client Data to run the service, fix problems, when the law requires it, or if the client allows it in writing—not as routine chat sampling.
Are you profiled or tracked for advertising?
They run interest-based ads with advertising networks, attribution partners, and cookies across sites.
Do they sell or share your data, and can you opt out?
Data goes to service providers and to ad and business partners; they say they do not intentionally disclose personal data without consent except as listed, and cookie/analytics opt-outs exist.
What rights do they take over what you type and what the AI makes?
They say you exclusively own Client Data for normal use; public project posts get a perpetual license to Crowdin and other clients.
How long do they keep your data after you delete it, and can you delete it in the app?
Closed-account Client Data is deleted within about three months (terms also say six months, or one month on request), but billing is kept 7 years and legal records 10 years.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They describe firewalls, passwords, SSL encryption, and access controls, but no independent audit or bug-bounty program.
Is there a real age gate, and are teens protected?
The service is not directed to under-18s and individuals must be 18 (or 13 with parent permission for a special student account); there is no described age-proofing.
Will they tell you when the rules change, and is the policy specific?
Policies are dated; they post updates and say continued use means you agree, with terms becoming effective on continued use or 30 days after posting.
Can they close your account without warning, and can you get your data out first?
You can cancel in the site; they may suspend or immediately terminate for breach or suspected illegal use, then delete the account within months.
If something goes wrong, who pays?
The service is as-is, liability is capped at six months of fees, and you must indemnify Crowdin for claims from your use.
Do subscriptions renew on their own, and can you get a refund?
Fees are charged in advance on monthly or annual cycles; you can cancel; unused prepaid time may be refunded except annual-discount amounts; plan changes take effect with 30 days’ notice.
The privacy policy is 5,556 words at a college graduate level (Flesch reading ease 34.3); the terms are 8,113 words at a college graduate level.
