Privacy Policy

SANTALIQ (santaliq.supersoftltd.com) is responsible for the personal data described here. Operator name and postal address: [to be added by the owner]. You can reach us any time through the contact form.

• Account: email address, display name, a password stored only as an Argon2 hash (we cannot read it), your role, and the dates you joined and last signed in. An optional public bio if you write one.
• Sign-in session: one essential cookie (santaliq_session) that keeps you signed in for up to 30 days. We store only a hash of it. There are no advertising, analytics or third-party cookies.
• What you contribute: dictionary entries, writing, heritage items, voice recordings, reports and contact messages, with their review status and reviewer notes.
• Voice recordings: the audio, the text you read, its length, and the optional speaker details you choose to give (dialect, region, age range, gender), together with the consent choices you made and when.
• Security log: important actions (for example sign-in, sign-up, review decisions, deletions) with time and IP address, to protect accounts and investigate abuse. IP addresses are also used briefly for rate limiting.
• AI usage: if SANTALIQ AI chat is enabled, we log only who asked, the model and the number of tokens, never the content of your questions or answers.

• To run your account and the features you use (legal basis: providing the service you asked for).
• To publish what you choose to publish, with credit to you (your choice and consent).
• To build verified, openly licensed Santali language resources, including speech technology, only where you consented (consent, which you can withdraw).
• To keep the platform secure and prevent spam and abuse (legitimate interest).
• To send emails you need: email confirmation, password reset, replies to your messages. No newsletters without asking.

You record only after giving consent, and you choose separately whether others may listen and whether your recordings may be used for research and Santali speech technology. Your voice is never used to clone or imitate you. Every recording is checked by a reviewer. You can change your choices, delete a recording, or delete all your voice data at any time on the Voice page. Deleted recordings are also removed from our backups.

Public: your display name, bio and join month on your profile; your published writing; verified dictionary entries and heritage items with your name as contributor; voice recordings only if you chose public listening. Never public: your email address, role, drafts, pending contributions, IP addresses and the security log.

Verified dictionary entries are released as an open dataset under CC BY 4.0. The dataset contains contributor display names, never emails.

• Hosting: SANTALIQ runs on a server rented from Contabo GmbH. Your data is stored there.
• Translator: the default translator runs on SANTALIQ's own server; your text is not sent to anyone else. Translations may be cached for up to 7 days to make repeated requests faster.
• Optional engines (currently switched off): if the Google engine is enabled and you choose it, the text you translate is sent to Google Cloud Translation. If SANTALIQ AI chat is enabled, your question and matching SANTALIQ sources are sent to Anthropic to generate the answer. These are clearly labelled in the tools when available.
• Email: sent through our own mail server.

We do not sell or rent personal data, and we do not share it for advertising.

• Account data: until you delete your account.
• Sign-in sessions: up to 30 days. Password-reset links: 1 hour. Email-confirmation links: 2 days.
• Contributions: until you delete or withdraw them, or delete your account (see below for verified dictionary entries).
• Backups: database backups are kept for up to 14 days on the server and up to 30 days in an offline copy.

• See and edit your profile and contributions in your account.
• Withdraw consent: delete heritage items, voice recordings, or all voice data whenever you want.
• Delete your account from your account page. This removes your account, writing, heritage submissions, voice recordings and consent. Verified dictionary entries you contributed remain in the open dictionary because they were published under an open licence, but your name and account are removed from them.
• Ask for a copy of your data, a correction, or anything else through the contact form (topic "My data"). We reply within 30 days.
• You may also complain to your data-protection authority.

Members under 18 need the agreement of a parent or guardian, especially for voice recordings. If you believe a child has shared data without that agreement, contact us and we will remove it.

Encrypted connections (HTTPS) everywhere, hashed passwords and session tokens, databases that are not reachable from the internet, role-based access for reviewers and admins, rate limits, and an audit log. No system is perfect; if we learn of a breach affecting you, we will tell you.

We will update this page when our practices change and show the date at the top. Important changes, such as a new consent for voice data, are announced on the site, and where consent is needed we ask again.