Cult Extensions follows a data minimization and security-first approach in the design and operation of Cult Connector and Cult Translator.
We process only the data necessary to provide the service, enforce licensing, and maintain operational integrity. We do not monetize, resell, or profile customer data.
Data Minimization
Cult Connector and Cult Translator is built to limit stored personal data to what is strictly required for:
- License validation and subscription management
- Fraud prevention and abuse detection
- Service performance monitoring
We do not store translation content in our application database.
Translation requests are transmitted securely for processing and are not retained after completion of the request lifecycle.
Translation Content Handling
When translation features are used:
- Text is transmitted securely via HTTPS to the configured translation processing API.
- Translation content is processed in real time.
- Translation content is not stored in Cult Extensions’ servers.
- Translation content is not used for training, resale, advertising, or profiling.
Customers remain responsible for ensuring that submitted content complies with applicable data protection laws.
License & Operational Metadata
To operate the service, we may process limited operational metadata, including:
- License key and subscription status
- Hashed device identifiers
- Usage metrics such as translation counts
- Limited infrastructure metadata (e.g., IP address for abuse prevention)
Where possible, identifiers are pseudonymized or hashed to reduce exposure.
Integration with Translation Management Systems (TMS)
When Cult Translator integrates with a Translation Management System (TMS) or localization workflow platform:
- Cult Extensions acts as a technical processor of content.
- The Customer (or TMS provider, as applicable) remains the data controller.
- Content transmitted via API is processed solely to fulfill the requested translation or localization task.
- Cult Extensions does not independently determine the purpose or means of content processing.
We do not extract, store, analyze, or repurpose content flowing through integrations.
All integrations operate under secure API communication protocols.
Subprocessors & Infrastructure
To operate the service, we rely on established third-party providers, including:
- Cloud infrastructure hosting
- Payment processing providers
- Translation processing APIs
- Website analytics services
Each provider operates under its own security and compliance standards. We select providers that maintain industry-appropriate safeguards.
Retention Principles
We retain:
- Subscription and billing records as required by law
- Operational metadata for a limited period necessary to maintain service integrity
Translation content is not retained.
Data is not kept longer than necessary for operational or legal purposes.
Regulatory Alignment
Cult Extensions operates in accordance with:
- Brazilian General Data Protection Law (LGPD)
- GDPR principles where applicable
We maintain internal safeguards proportionate to the scale and nature of our operations.