Privacy Policy

Effective date: August 28, 2026

This is a courtesy translation. The Vietnamese version is the controlling version; in case of any discrepancy, the Vietnamese text prevails. Read the Vietnamese version.

1. Scope

This policy applies to the Semunio app on Slack, the semunio.com website, and information users send to Semunio by email or through the support form. In this policy, “Semunio” means the Semunio service. Semunio operates independently and is not affiliated with or sponsored by Slack.

2. Data Semunio processes

Data from Slack

• Message content that Semunio processes in order to translate it, and the translation produced.
• Workspace, channel, message and user identifiers; the workspace or channel name where needed to display information, provide support and deliver features.
• Semunio does not ask Slack for permission to read email addresses and does not store an email address for any Slack user. The only email address Semunio holds is the one a person writes from when they contact support themselves.
• App installation information, including the credentials issued by Slack, who installed the app and when the app was installed or uninstalled.
• Project and Glossary data created by users, such as the Project name, its field, description, assigned channels, term pairs, examples and notes.
• When a user uploads an Excel file to import a Glossary, Semunio reads the file to obtain the term pairs and then stores the Glossary data, the file name and the import result. Semunio does not keep a separate copy of the original Excel file after processing.

Operational data

• Character counts, the volume of data sent to the AI model, the translation direction, the model used, the delivery status of a translation, and the information needed to calculate quotas, produce statistics and maintain the service.
• Quality logs may include the content to be translated, intermediate translation results, the final translation and the Glossary terms applied. Semunio uses these logs to detect, investigate and fix translation errors, not to train or fine-tune AI models.
• Whether translation is enabled or disabled per channel, the Glossary import history, and the logs needed when a user deletes a Project or when Semunio deletes data whose retention period has expired.
• Plan, usage and session information needed to display and protect the plan management page. Semunio does not use a third-party checkout or subscription billing provider and has no automated checkout. A workspace on a paid plan pays Semunio by bank transfer, and Semunio activates the plan by hand after checking the transfer. Semunio never receives or stores card details and holds no payment account for the buyer. For each payment Semunio records the reference code shown on its transfer page, the amount, the plan and the period the payment covers. That reference code is derived from the workspace's own identifier, so it identifies the workspace rather than the person who made the transfer. Semunio does not copy the payer's name, bank account or email address into its app database; the banks involved may retain their own transaction records under their terms and applicable obligations.

Website and support

• The website currently does not use behavioural analytics or its own advertising tools. Infrastructure providers may process ordinary technical data such as the IP address, the time of the visit, the address of the page requested and browser information, in order to provide and protect the service.
• The website currently loads fonts from Google Fonts. The visitor's browser connects directly to Google to receive the font files; data processing within that connection is governed by Google's policies.
• When a user sends an email or opens the Google Forms form from the Support page, Semunio receives the content and information the user chooses to provide. Google Forms is an external service and data processing there is likewise governed by Google's policies.

3. Purposes for which data is used

Semunio uses data to:

• produce, check and deliver translations in Slack;
• provide Projects, Glossaries, channel management, quotas and the plan management page;
• authenticate workspaces and users, maintain the connection to Slack and protect the service;
• contact users for support, send necessary transactional, security or operational notices, and send marketing information where permitted by law and where the user has not opted out of receiving it;
• monitor stability, investigate errors, support users and improve translation quality;
• prevent abuse, act on data requests and comply with applicable obligations.

Semunio does not sell Slack data or user content, and does not use that data for targeted advertising.

4. AI processing

To produce and check translations, Semunio sends the content to be translated, the translation instructions and the relevant Glossary terms to OpenAI via its API. Semunio does not use Slack data to train or fine-tune AI models.

Under OpenAI's default policy, data sent through the API is not used to train or improve OpenAI's models. See OpenAI's API data documentation.

Under OpenAI's standard API controls, prompts and responses may be retained in abuse-monitoring logs for up to 30 days, unless OpenAI must keep them longer by law; the Chat Completions API does not create separate application-state storage. Semunio uses one OpenAI API account for the service rather than a dedicated OpenAI tenant for each workspace, and does not offer a workspace-specific processing or residency region. OpenAI acts as Semunio's subprocessor for this content.

5. Service providers

Semunio uses the following providers to operate the service:

• Slack: provides the platform, the installation flow, events and Slack's API.
• OpenAI: processes content to produce and check translations.
• Railway: runs Semunio's server services.
• Neon: provides Semunio's database.
• Cloudflare: delivers and protects the Semunio website. It also measures aggregate traffic statistics without using cookies.
• Google: provides Google Fonts and Google Forms.

Providers are used only to perform their respective function. They may process data in a country or region other than where the user lives, under their own terms and policies. Semunio does not commit to any specific data residency region.

6. Retention periods and data deletion

• Quality logs containing translation content are deleted automatically once they are older than 60 days.
• When a Project is deleted, its Project record, channel mappings, Glossary pairs, and Glossary edit/import records are deleted. Translation and usage logs may remain without the Project link, and an audit snapshot of the Project deletion may remain until the workspace's full-wipe deletion after uninstall.
• When the app is uninstalled from a workspace, Slack-associated product data is scheduled for complete deletion 14 calendar days after the time of uninstallation. The deletion process runs daily, so the deletion may be completed on the next run after the 14 days have elapsed.
• If the workspace reinstalls Semunio before the deletion process begins handling the data, the data that has not yet been deleted may be retained in order to continue providing the service.
• Semunio stores no email address linked to Slack data, so there is none to delete on the 14-day schedule described above. For an email address a person gives Semunio directly, by contacting support or by consenting to receive marketing information, Semunio keeps the contact details until that person asks to stop; after that, Semunio stops sending marketing information and keeps only the minimum data needed to record the opt-out or to comply with applicable obligations.
• Workspace identifiers in the deletion logs are removed after 30 days. Information that can no longer identify a workspace, such as the time, the result and the number of records processed, may be retained in order to operate and audit the deletion process.
• Financial transaction and audit records needed for accounting, tax, refunds, disputes or fraud prevention may be kept for up to 10 years. When Slack-associated product data is deleted, Semunio removes or detaches the direct Slack workspace and user mapping from those records; the remaining record does not keep a direct Slack identity.
• Data processed by a service provider may be subject to that provider's own retention period under its policies. Semunio does not restore product data that has been deleted merely in order to undo a deletion request.

7. Requests to access, receive a copy of, correct or delete data

Users may send a request to support@semunio.com. To help us verify the request and handle the correct scope, the request should state the workspace name or address, the Slack display name or user ID if known, and the type of request. Do not send passwords, app credentials or unnecessary sensitive information.

Semunio verifies the requester's identity and the scope of the request. To remove a workspace's Semunio product data, a workspace owner or administrator must uninstall Semunio in Slack. The Slack uninstall is the authorization step; Semunio does not act on unverified or unauthorized email requests. Uninstalling scrubs bot tokens immediately and starts the daily full-wipe process described in section 6.

Other members may request access to, a copy of, or correction of data associated with them. To protect the workspace, deletion of Slack-associated product data follows the owner-or-administrator uninstall process above.

A copy of data is provided in a reasonable format that Semunio currently has. Semunio does not commit to having an automated data export tool or to any specific format. Requests will be answered within a reasonable time and within the deadlines set by applicable law.

8. Security

Semunio applies technical and organisational measures appropriate to the scale of the service, including connections encrypted with HTTPS/TLS, verification of requests from Slack, access controls, and keeping secrets separate from the public website. No method of transmission or storage is absolutely secure; users should not send data that is not needed for translation purposes.

9. Children

Semunio is designed for collaboration in a workplace setting. It is not directed at children and does not intentionally collect personal data directly from children.

10. Changes to this policy

Semunio may update this policy when the product, its providers or applicable requirements change. A new version will be posted on this page with a new effective date. Material changes will be announced by a suitable means where necessary.

11. Contact

Questions or requests relating to data: support@semunio.com.