Legal
Privacy Policy
Last updated: 28 May 2026
The short version
When you translate a Google Slides, Docs, or Sheets file with NVlab, your document content never leaves Google. We never download, store, or read the file ourselves. We access it directly inside Google's infrastructure and return the result to a new file in your own Drive. NVlab only stores the metadata required to run the service and send you a receipt.
1. Who we are
NVlab is an AI tools company operated by Rifki Novrian, based in Indonesia. Our primary product is an AI-powered document translation service available at nvlab.id/translation. If you have questions about this policy, contact us at hello@nvlab.id.
2. What we never store
- ✓The text, images, or any content inside your Google Slides, Docs, or Sheets files
- ✓Any version of your original document (before or after translation)
- ✓Your Google Drive file listing, folder structure, or other files beyond the one you submit
- ✓Anthropic API prompts or completions after they are used for translation
3. What we do store
We store only what is necessary to operate the service, process payments, and help you access your translation history:
Account information
Your name and email address, obtained from Google OAuth or email/password sign-up. Used to identify your account and send receipts.
Google OAuth tokens
Access and refresh tokens required to read your selected file and write the translated copy back to your Drive. Stored encrypted. You can revoke access at any time via your Google Account settings.
Job metadata
File name, file ID (not content), language pair, page count, status, and timestamps. Used to display your translation history and calculate pricing.
Payment records
Transaction IDs, amounts, and payment status from Midtrans (IDR payments) or Stripe (USD/global payments). We do not store full card numbers.
API usage logs
Aggregated token counts and cost per job, used for internal billing and abuse prevention. No prompt text is stored.
Service logs
Technical logs (errors, job status transitions) retained for up to 90 days for debugging purposes. These do not contain document content.
4. How translation works (and why it's private)
When you submit a Google Slides link for translation:
- 1Our server uses your Google OAuth token to read the slide content directly via the Google Slides API — the file is never downloaded to our servers.
- 2The slide text is sent to Anthropic's Claude API for translation. Anthropic processes and returns the translation without retaining your content (see Anthropic's privacy policy).
- 3The translated content is written back to a new copy in your Google Drive via the Google Slides API.
- 4Your OAuth token and the translation text are discarded from memory when the job completes.
5. Third-party services
We use the following third-party processors to operate the service. Each has its own privacy policy governing how they handle data.
| Service | Purpose | Data shared |
|---|---|---|
| Google OAuth / Google APIs | Authentication; reading & writing Drive files | OAuth tokens; file content during translation only |
| Anthropic (Claude API) | AI translation engine | Slide text during processing only; not retained by Anthropic per their API policy |
| Supabase | Database & auth infrastructure | Account info, job metadata, logs — all stored in Singapore region |
| Midtrans | Payment processing (IDR) | Name, email, transaction amount |
| Stripe | Payment processing (USD/global) | Name, email, transaction amount |
| Resend | Transactional email (receipts) | Email address, job summary |
6. Cookies and tracking
We use only essential cookies for authentication (session token set by Supabase Auth). We do not use advertising cookies, tracking pixels, or third-party analytics. There is no Google Analytics, Facebook Pixel, or similar tool on this site.
7. Data retention
We retain account data for as long as your account is active. If you delete your account:
- –Your profile and credentials are deleted immediately.
- –Job history records are deleted within 30 days.
- –Payment records are retained for 7 years as required by Indonesian tax law.
- –Translated files in your Google Drive are yours — we have no ability to delete them.
8. Your rights
You have the right to:
- –Access the personal data we hold about you
- –Request correction of inaccurate data
- –Request deletion of your account and associated data
- –Revoke Google OAuth access at any time via Google Account → Security → Third-party apps
- –Receive a copy of your data in a portable format
To exercise any of these rights, email us at hello@nvlab.id. We will respond within 30 days.
9. Security
All data in transit is encrypted using TLS 1.2+. OAuth tokens are stored encrypted at rest. We apply Row Level Security (RLS) at the database level so that users can only access their own data. We conduct periodic internal security reviews and plan to commission an external audit before reaching 1,000 paying users.
10. Changes to this policy
We may update this policy as the service evolves. When we make material changes, we will update the "Last updated" date at the top and notify active users by email. Continued use of the service after notification constitutes acceptance of the updated policy.
11. Contact
Questions, concerns, or data requests: hello@nvlab.id
NVlab · nvlab.id · Indonesia