Who we are
DemoTake is made by Sansavision, a division of Sansa Group AB, Soldathemsgatan 20, 415 28 Gothenburg, Sweden (“Sansavision”, “we”, “us”). Sansa Group AB is the controller for the personal data described in this policy, except where we act as a processor for a business customer under our Data Processing Addendum.
Privacy contact: privacy@demotake.my.
The short version
- Recordings, takes and exports are stored on your Mac. We don't receive them unless you sync, upload or share them.
- The app's MCP server only accepts connections from your own Mac.
- DemoTake AI is optional. When on, it receives redacted, structured text by default—not your screen.
- API keys and credentials are stored in the macOS Keychain.
- The app doesn't send usage analytics or tracking data. Share links count views without cookies and without storing IP addresses (see Share links).
- The DemoTake Agent free trial sends only a salted hash of your Mac's hardware identifier, never the identifier itself, so the trial can't be restarted.
- This website counts page views and clicks with AppHelm, our own analytics service, only if you say yes. You can change your answer on Your privacy choices.
- We don't sell your personal information or use it for cross-context behavioural advertising.
Data in the Mac app
DemoTake records the windows or apps you select. Depending on your settings, a take can contain video, app audio, microphone audio, window and app metadata, Accessibility (UI element) information, text recognised on screen (OCR), pointer and keyboard events, agent actions, assertions and your edits. This data may include personal data that appears on your screen.
If you turn on the presenter camera, a take also contains your camera video, stored as a separate file like the microphone. Background blur and removal run on your Mac. When you record an Android device, DemoTake Agent reads its screen and UI through Android's debugging tools on your Mac; nothing is installed on the device.
To let you undo or correct blurs, DemoTake keeps an unblurred copy of each screenshot capture in your local library. These copies are never synced, uploaded or shared. Exports, thumbnails, share previews and agent previews use only the blurred version.
This data stays on your device. It is processed locally to produce your recordings, and we do not have access to it. You control it and can delete it at any time by deleting the take.
When you connect an external AI agent (for example Claude, Codex or Cursor) through MCP, that agent can request information from DemoTake such as UI state or snapshots. The agent and its provider process that information under your agreement with them, not under this policy.
DemoTake doesn't send usage analytics, crash reports or tracking data. For hosted AI we keep usage counts (tokens and credits used) to meter your plan, not the content of your requests.
Free trial
DemoTake Agent includes a free trial. So that it can't be restarted by reinstalling the app or clearing its local data, the app checks in with our server when the trial starts and about once a day during and after the trial. Each check-in sends a salted hash of your Mac's hardware identifier (never the raw identifier), the edition and the app version.
- We store only that salted hash, together with the trial start date, the edition and the app version.
- We use it only to run the free trial.
- It isn't linked to any DemoTake account, and we don't store IP addresses with it.
- It is deleted 12 months after the trial ends.
Our legal basis is our legitimate interest in offering a free trial that can't be misused.
DemoTake Web gives each account one free take. When you start it, we also store a salted hash of your email address (never the address itself), with the date, so the free take can't be claimed again by deleting and recreating an account. We keep this hash for 12 months, even if you delete your account, and use it only for this purpose, on the same legal basis. Free-take cloud browser sessions also store a salted hash of your IP address for 2 days, to limit how many free sessions start from one network each day.
AI features
In Assist and Director modes, DemoTake sends requests to AI models through OpenRouter. Before any request is built, Secret Guard detects and replaces likely secrets and personal identifiers such as passwords, one-time codes, API keys, access tokens, card and bank numbers, email addresses and phone numbers. With minimal context on (the default), only structured text is sent; images are sent only if you turn minimal context off. Raw recordings are never sent to a model. See DemoTake AI for details.
With BYOK, requests are made with your own OpenRouter key and are also subject to OpenRouter's and the model provider's terms. In Manual and BYO Agent modes, DemoTake AI is not used.
When you ask DemoTake AI to generate music, your music prompt (a text description, never your recordings) is sent through OpenRouter to Google's music model, together with a pseudonymous account identifier used for abuse prevention. The generated audio is stored in your DemoTake Cloud storage for 7 days so the app can download it; after that it lives only in your take.
Voiceover. When you generate a voiceover with DemoTake's AI voices, the voiceover script text is sent through OpenRouter to Google's speech model, with a pseudonymous account identifier for abuse prevention. We record how many seconds and characters were generated, not the text. The audio is kept in your DemoTake Cloud storage for 7 days so the app can download it, then only in your take. Voices on your Mac are generated on your Mac and send nothing.
Translation. When you translate a take with DemoTake AI, only the selected text is sent. Names, numbers, keyboard shortcuts, web addresses and anything Secret Guard treats as a secret are removed first and put back on your Mac. We record how many characters were translated, not the text. Text on screen is read on your Mac, images never leave it, and areas you blurred are never read. Translation on your Mac uses Apple's on-device translation and sends nothing to us.
Accounts & cloud features
Some features—such as Director subscriptions, sync, share links and hosted web recording—require an account. We process:
- Account data: email address, name (optional), sign-in events and security logs.
- Purchase data: plan, billing status and transaction records. Card details are handled by our payment provider.
- Content you choose to upload: takes, exports and related metadata, kept according to your retention settings.
- Usage data: AI and hosted-usage counters shown to you in the app.
- Shared content: videos, interactive demos (step pictures taken from the edited, blurred video, tooltip text and voiceover clips), subtitles, scene titles and button (call-to-action) settings, kept until you delete the link or it expires.
- Scheduled runs (Team): schedules, run history, scene pictures from the edited, blurred take, and recordings that your runner uploads. Slack and webhook addresses are stored encrypted. Pictures in notifications can be opened through signed links for 7 days.
Sign-in uses one-time email links or codes; we don't store passwords.
When DemoTake for Mac asks to sign in and you approve it on this website, we record when the request was made, the city, region and country worked out from its IP address, and its app version, so we can show them on the approval screen and in the “new device” email we send you. This record is deleted within a day of the code expiring.
Share links and embeds
When someone views a share link or an embedded video or demo, we count views to show the link's owner how it's doing. We don't set cookies, don't use local storage identifiers and don't store IP addresses or browser details. We keep only daily totals: views, how far people watched or clicked through, button clicks, the referring site's domain, country, device type (desktop, phone or tablet) and language.
To count unique viewers, we compute a hash of the IP address, browser and link with a random value that changes every day, and delete it the next day. If a viewer's browser sends Do Not Track or Global Privacy Control, we count the view and nothing else. Owners can turn statistics off for any link. Daily totals are kept for 90 days, then combined into monthly totals until the link is deleted.
For these statistics we act as a processor for the link's owner. Our legal basis for our own processing (security and abuse prevention) is legitimate interest.
This website
Our hosting provider processes technical data such as IP address, browser type and requested pages to deliver and secure the site. We don't use advertising or tracking cookies on this website. Fonts are served from our own site, not a third party.
Website analytics (only if you say yes)
The first time you visit, we ask whether we may measure how this website is used. If you say yes, your browser sends events to AppHelm (apphelm.dev), an analytics service made and run by Sansavision on Cloudflare, so the data stays with us. If you say no, or don't answer, nothing is loaded or sent.
- What we collect: pages viewed, clicks (the kind of element and a rough position, never its text), clicks on the Mac download (which file, and the page it was on), form submissions and field changes (never what you type), how far you scroll, page-load speed, script errors on this website, campaign tags (
utm_source,utm_medium,utm_campaign), and the site you came from (its domain only). - What we store in your browser: your answer (
demotake.analytics-consent, local storage, 12 months) and, after a yes, a random visitor id (apphelm.distinctId, local storage) and a visit id (apphelm.sessionHash, session storage). No cookies. - What we never collect: anything on the sign-in, device approval, account, withdrawal-form or DemoTake Web pages, share links and embeds, what you type, screen recordings, or anything from the Mac app.
- Your browser's signals: if it sends Global Privacy Control or Do Not Track, we don't ask and don't collect.
- Changing your mind: turn it off on Your privacy choices. We stop at once and delete the visitor and visit ids from your browser.
Legal bases (GDPR)
- Contract: to provide the app, accounts, purchases and features you request.
- Consent: for sending content to AI when you enable it (withdraw it at any time in the app), and for website analytics (withdraw it at any time on Your privacy choices).
- Legitimate interests: to secure our services, prevent abuse (including of the free trial), count share-link views without cookies for the link's owner, and improve reliability.
- Legal obligation: for accounting, tax and responding to lawful requests.
Who we share with
We use service providers (processors) to run DemoTake, listed on our subprocessors page. They may only process personal data on our instructions. We may also disclose data where required by law or to protect rights and safety, or as part of a business transfer subject to this policy.
International transfers
Some providers process data outside the EU/EEA, including in the United States. Where they do, we rely on adequacy decisions (such as the EU–U.S. Data Privacy Framework, where the provider is certified) or Standard Contractual Clauses, together with supplementary measures where appropriate.
Retention
- Local takes: until you delete them. We never hold a copy.
- Uploaded content: according to the retention setting you choose, and deleted when you delete it or close your account.
- Share-link statistics: daily totals for 90 days, then monthly totals until the link is deleted. The daily viewer hash is deleted the next day.
- Free-trial device record (a salted hash, not linked to an account): deleted 12 months after the trial ends.
- Website analytics events: 13 months, then deleted.
- Account data: for as long as your account is open, then deleted within 30 days unless we must keep it longer by law.
- Accounting records: as required by Swedish bookkeeping law.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to data portability, and to withdraw consent. See Your privacy choices for how to exercise them. You also have the right to complain to a supervisory authority; in Sweden this is Integritetsskyddsmyndigheten (IMY).
California residents
If the CCPA/CPRA applies to us, California residents have the right to know, access, correct and delete personal information, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined, and we do not use sensitive personal information to infer characteristics. Where required, our website honours Global Privacy Control (GPC) signals. We won't discriminate against you for exercising your rights.
Children
DemoTake is not directed at children under 16, and we don't knowingly collect their personal data.
Changes & contact
We'll post changes here and update the date above; for material changes we'll give notice in the app or by email. Questions: privacy@demotake.my.