Privacy Policy

1. Introduction

Your privacy is important to us at Lemon Tree Ventures, LLC ("Company", "we", "us"), operating as Verbi. This Privacy Policy outlines how we collect, use, protect, and share information gathered from users of our website and the Verbi platform. By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect personal information such as your name and email address when you create an account.

We also collect data related to your website translation activities, including:

Websites you connect to Verbi
Language configurations and glossary settings
Translation usage metrics (character counts, page views per language)
DNS and domain configuration details
Billing and payment information (processed via Stripe)
IP addresses
Team member access logs

We gather this information through fair and lawful means, with your knowledge and consent.

3. Google User Data

Verbi uses Google Sign-In to allow you to create an account and log in using your Google account. This section describes how we handle Google user data in compliance with the Google API Services User Data Policy.

3.1 Data Accessed

When you choose to sign in with Google, we access the following information from your Google account:

Email address — used to identify your account.
Display name — used as your default username.
Profile photo URL — used as your default profile picture.

We only request the minimum scopes necessary for authentication. We do not access your Google contacts, calendar, drive files, or any other Google services data.

3.2 Data Usage

The Google user data we access is used solely for the following purposes:

Account creation and authentication: Your email address, display name, and profile photo are used to create and manage your Verbi account.
Communication: Your email address may be used to send you account-related notifications, such as billing updates or service announcements.

We do not use Google user data for advertising, analytics profiling, or any purpose unrelated to providing the Verbi service. Verbi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is not sold, rented, or shared with any third parties for their own purposes. Your Google account information may only be processed by the following services strictly to operate Verbi:

Google Firebase — stores your account record (email, display name, profile photo) as part of Firebase Authentication and Firestore.
Stripe — your email address is shared with Stripe solely for billing and payment processing when you subscribe to a paid plan.

No other third parties receive your Google user data.

3.4 Data Storage and Protection

Google user data is stored securely using Google Firebase infrastructure (Firebase Authentication and Cloud Firestore). We protect this data with the following measures:

All data is transmitted over HTTPS/TLS encryption.
Firebase Security Rules restrict database access to authorized users only.
Authentication tokens are managed by Firebase and are short-lived.
Server-side API calls are authenticated and validated before processing.
Access to production infrastructure is restricted to authorized personnel.

3.5 Data Retention and Deletion

Active accounts: Your Google user data is retained for as long as your Verbi account is active.
Account deletion: You can delete your account at any time from your account settings. Upon deletion, all associated Google user data (email, display name, profile photo) is permanently removed from our systems, including Firebase Authentication and Firestore records.
Revoking access: You can revoke Verbi's access to your Google account at any time through your Google Account permissions page. Revoking access will prevent you from signing in with Google but will not automatically delete your Verbi account data. To fully remove your data, please delete your account through the Verbi dashboard or contact us.

4. Translation Data Processing

When Verbi translates your website, we process the text content of your web pages to generate translations. This content is:

Passed to third-party translation services (DeepL) solely for the purpose of generating translations.
Cached at the edge (via Cloudflare) to improve performance and reduce translation costs.
Stored as translation dictionaries in our infrastructure to serve returning visitors without re-translating.

We do not use your website content or translations for any purpose other than providing the translation service.

5. Visitor Data

When visitors browse translated versions of your website through Verbi's proxy, we process the following:

The visitor's IP address (forwarded to your origin server)
The visitor's browser language preferences (for optional auto-detection)
Page view data aggregated by language and path (for your analytics dashboard)

We do not track individual visitors, set cookies on visitors, or build visitor profiles. Aggregated page view statistics are available to you through your Verbi dashboard.

6. Log Data and Usage Monitoring

For security and service improvement purposes, we automatically collect and store information about your use of our services, including your IP address, browser type, referring/exit pages, date/time stamps, clickstream data, and the resources you access. We monitor translation usage, API calls, and cache performance to ensure compliance with our Terms of Service and to prevent abuse.

7. How We Use Your Information

The information we collect is used to:

Provide and improve our website translation service.
Deliver customer support and communicate with you about your account.
Process translation requests and manage caching.
Track usage against your plan limits.
Detect and prevent fraudulent or abusive use of our services.
Store your data using commercially acceptable means to prevent loss, theft, unauthorized access, or disclosure.

8. Stripe Integration

When you subscribe to a paid plan, your payment is processed by Stripe. We access specific information necessary to manage your subscription, including customer data, payment status, and invoice details.

We do not store your payment card information.
Your Stripe data is handled in accordance with Stripe's security standards and our own data protection measures.

9. Protection of Information

We implement appropriate technical and organizational measures to protect your personal data. We utilize secure cloud infrastructure (Firebase and Cloudflare) and industry-standard encryption. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. If we detect suspicious activities, we may temporarily suspend access to your account while we investigate.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to track the activity on our dashboard and hold certain information.

Essential Cookies: Required for authentication (logging you in to the Verbi dashboard).
Analytical Cookies: Used to measure dashboard usage and improve our service.
Preferences: To remember your UI settings.

Verbi's translation proxy does not set cookies on your website visitors.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use the full functionality of the Verbi dashboard.

We do not share any personally identifying information publicly or with third parties, except in the following circumstances:

When required by law.
When necessary for the operation of our services (e.g., sending website content to DeepL for translation).
To protect our rights, privacy, safety, or property.
In connection with a business transfer, such as a merger, acquisition, or asset sale.

12. Third-Party Services

Our platform uses third-party services for functionality. These services process data according to their own policies:

Authentication: Google Sign-In (Google Identity Services)
Translation: DeepL
Edge Infrastructure & CDN: Cloudflare
Database, Auth & Hosting: Google Firebase
Payment Processing: Stripe

We recommend reviewing the privacy policies of these third parties.

We act as both a "data controller" and a "data processor" under GDPR.

We are the data controller for the personal information of our users (account holders).
We are the data processor for the website content that passes through our translation proxy.

As a user of our service, you are responsible for ensuring that your website content complies with applicable data protection laws. We provide a Data Processing Agreement (DPA) upon request to govern our relationship as a data processor.

The legal bases for processing your personal information include:

Performance of the contract: To provide the translation services you have signed up for.
Specific consent: Where you have provided explicit consent for a specific purpose.
Compliance with legal obligations: When we are required to do so by law.
Legitimate interests: Such as improving our services, preventing fraud, and ensuring the security of our platform, provided these interests do not override your fundamental rights and freedoms.

14. Your Data Rights

Under GDPR and other data protection laws, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data ("Right to be forgotten").
Object to or limit the processing of your data.
Request data portability (to receive your data in a common, machine-readable format).
Withdraw consent at any time, where processing is based on consent.

You can exercise many of these rights directly through your account settings. For any other requests, please contact us at the email below.

15. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected.

Account Data: Retained while the account is active.
Deleted Accounts: Data is typically removed within 90 days, unless required for legal reasons.
Translation Dictionaries: Retained while your site is active on Verbi. Deleted when you remove a site or close your account.
Usage Statistics: Retained for up to 12 months for historical reporting.
Google User Data: Retained only while your account is active. Permanently deleted upon account deletion.

16. Children's Privacy

Our service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us.

17. International Data Transfers

Lemon Tree Ventures, LLC is incorporated in the State of Delaware, United States. If you are located outside the United States and provide information to us, please note that we transfer the data to the United States (and other regions where our cloud providers, including Cloudflare, operate) and process it there. We rely on appropriate safeguards, such as Standard Contractual Clauses (SCCs), for international transfers.

18. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the effective date.

19. Contact Us

If you have any questions about this Privacy Policy, please contact us.

By email: support@verbi.io

Effective Date: June 19, 2026