Draft pending legal review
Who we are
DemoTake is made by Sansavision, a division of Sansa Group AB, Gothenburg, Sweden (“Sansavision”, “we”, “us”). Sansa Group AB is the controller for the personal data described in this policy, except where we act as a processor for a business customer under our Data Processing Addendum.
Privacy contact: privacy@demotake.my (not yet live).
The short version
- Recordings, takes and exports are stored on your Mac. We don't receive them unless you upload or share.
- The app's MCP server only accepts connections from your own Mac.
- DemoTake AI is optional. When on, it receives redacted, structured text by default—not your screen.
- API keys and credentials are stored in the macOS Keychain.
- Anonymous usage analytics are off unless you turn them on.
- We don't sell your personal information or use it for cross-context behavioural advertising.
Data in the Mac app
DemoTake records the windows or apps you select. Depending on your settings, a take can contain video, app audio, microphone audio, window and app metadata, Accessibility (UI element) information, text recognised on screen (OCR), pointer and keyboard events, agent actions, assertions and your edits. This data may include personal data that appears on your screen.
This data stays on your device. It is processed locally to produce your recordings, and we do not have access to it. You control it and can delete it at any time by deleting the take.
When you connect an external AI agent (for example Claude, Codex or Cursor) through MCP, that agent can request information from DemoTake such as UI state or snapshots. The agent and its provider process that information under your agreement with them, not under this policy.
If you opt in to anonymous analytics, the app sends aggregated usage events (for example, which features are used and crash diagnostics) that do not include recording content.
AI features
In Assist and Director modes, DemoTake sends requests to AI models through OpenRouter. Before any request is built, Secret Guard detects and replaces likely secrets and personal identifiers such as passwords, one-time codes, API keys, access tokens, card and bank numbers, email addresses and phone numbers. With minimal context on (the default), only structured text is sent; images are sent only if you turn minimal context off. Raw recordings are never sent to a model. See DemoTake AI for details.
With BYOK, requests are made with your own OpenRouter key and are also subject to OpenRouter's and the model provider's terms. In Manual and BYO Agent modes, DemoTake AI is not used.
Accounts & cloud features
Some features—such as Director subscriptions, sync, share links and hosted web recording—require an account. Several of these are not yet available. When they are, we will process:
- Account data: email address, name (optional), sign-in events and security logs.
- Purchase data: plan, billing status and transaction records. Card details are handled by our payment provider.
- Content you choose to upload: takes, exports and related metadata, kept according to your retention settings.
- Usage data: AI and hosted-usage counters shown to you in the app.
Sign-in uses one-time email links or codes; we don't store passwords.
This website
Our hosting provider processes technical data such as IP address, browser type and requested pages to deliver and secure the site. We don't use advertising or tracking cookies on this website. Fonts are loaded from Google Fonts, which receives your IP address when your browser fetches them.
Legal bases (GDPR)
- Contract: to provide the app, accounts, purchases and features you request.
- Consent: for optional analytics and for sending content to AI when you enable it. You can withdraw consent at any time in the app.
- Legitimate interests: to secure our services, prevent abuse and improve reliability.
- Legal obligation: for accounting, tax and responding to lawful requests.
Who we share with
We use service providers (processors) to run DemoTake, listed on our subprocessors page. They may only process personal data on our instructions. We may also disclose data where required by law or to protect rights and safety, or as part of a business transfer subject to this policy.
International transfers
Some providers process data outside the EU/EEA, including in the United States. Where they do, we rely on adequacy decisions (such as the EU–U.S. Data Privacy Framework, where the provider is certified) or Standard Contractual Clauses, together with supplementary measures where appropriate.
Retention
- Local takes: until you delete them. We never hold a copy.
- Uploaded content: according to the retention setting you choose, and deleted when you delete it or close your account.
- Account data: for as long as your account is open, then deleted within 30 days unless we must keep it longer by law.
- Accounting records: as required by Swedish bookkeeping law.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to data portability, and to withdraw consent. See Your privacy choices for how to exercise them. You also have the right to complain to a supervisory authority; in Sweden this is Integritetsskyddsmyndigheten (IMY).
California residents
If the CCPA/CPRA applies to us, California residents have the right to know, access, correct and delete personal information, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined, and we do not use sensitive personal information to infer characteristics. Where required, our website honours Global Privacy Control (GPC) signals. We won't discriminate against you for exercising your rights.
Children
DemoTake is not directed at children under 16, and we don't knowingly collect their personal data.
Changes & contact
We'll post changes here and update the date above; for material changes we'll give notice in the app or by email. Questions: privacy@demotake.my (not yet live).