EU-based controller
Sansa Group AB, Soldathemsgatan 20, 415 28 Gothenburg, Sweden, is the controller for account and website data, and a processor for business customers' cloud content. Our lead supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
Privacy by design
A screen recorder connected to an autonomous agent can see a lot. So the default is local: recordings stay on the Mac, secrets are redacted before anything is sent anywhere, and every AI feature is optional. You can use the complete Local product with DemoTake AI switched off.
How we meet key requirements
| Requirement | What DemoTake does |
|---|---|
| Data minimisation (Art. 5(1)(c)) | Local-first by default. AI receives only redacted, structured text needed for the decision at hand. |
| Privacy by design and by default (Art. 25) | No analytics in the app, website analytics only with consent, minimal-context AI on, auto-redaction on, foreground agent control off—out of the box. |
| Purpose limitation | Uploaded content is used only to provide the features you use. We don't train models on it. |
| Storage limitation | Local data is under your control. Cloud retention is configurable per workspace. The free-trial device record is deleted automatically 12 months after the trial ends. |
| Rights of data subjects (Arts. 15–22) | Access, export, correction and deletion by request, or self-service in the privacy section of your account. The DemoTake Agent free-trial record (a salted hash of the Mac's hardware identifier) isn't linked to any account, so it isn't part of an account export or erasure; it's deleted automatically 12 months after the trial ends. |
| Processors (Art. 28) | A public subprocessor list and a DPA for business customers. |
| International transfers (Chapter V) | Adequacy decisions or Standard Contractual Clauses; EU placement for cloud processing where available. |
| Security (Art. 32) | Loopback-only MCP, Keychain-stored secrets, encryption in transit and at rest for cloud data. |
| Transparency (Arts. 13–14) | Per-project indication of which AI mode is active and what may leave the device. |
For business customers
If your organisation uses DemoTake cloud features with personal data, see our Data processing addendum and subprocessors. For purely local use, DemoTake doesn't process your data at all—you remain in full control on your own devices.
Contact & complaints
Email privacy@demotake.my to exercise your rights or ask a question. You can also lodge a complaint with IMY or the supervisory authority where you live. Full details are in our privacy policy.