Privacy policy
Last updated: 2025-06-01
Saltfish AB (“Saltfish”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you interact with our website, platform, or services.
1. Who We Are
Saltfish AB
Org. No. 559493-4670
Roslagsgatan 45
113 54 Stockholm, Sweden
For any privacy-related inquiries, please contact: support@saltfish.ai
2. What Data We Collect
We collect and process the following categories of personal data:
a) Information You Provide to Us
Email address (via signup or login)
Google account information (if you sign up via Google)
Content you create on our platform (e.g., video scripts, avatars, voice clips, video recordings)
b) Information Collected Automatically
IP address, device type, browser type
Usage data (e.g., clicks, scrolls, page visits)
Session replays (via PostHog, for our own platform only)
3. How We Use Your Data
We process personal data to:
Provide and maintain the Saltfish platform
Enable user login and authentication
Store and serve generated content (video, audio)
Monitor usage and improve our product (via analytics)
Prevent fraud and misuse
4. Legal Basis for Processing (GDPR)
We rely on the following legal grounds:
Performance of contract (e.g., when delivering our service)
Legitimate interest (e.g., product analytics and improvement)
Consent (e.g., for optional cookies and tracking, where applicable)
5. When We Act as a Data Processor
In some cases, Saltfish is embedded in a customer’s product, and we process data on their behalf. In such cases, the customer is the Data Controller, and Saltfish acts as their Data Processor under a separate Data Processing Agreement (DPA).
We only process such data based on the customer’s explicit instructions, and never for our own purposes.
6. Subprocessors
We use trusted service providers to help deliver our services. These include:
Service Provider: Purpose, Location
Google Cloud Platform: Hosting, storage, authentication, model serving (EU)
ElevenLabs: Audio generation for video avatars( EU & US)
PostHog: Product analytics and session replays (Saltfish website & platform only) (EU)
Where applicable, data transfers outside the EU are safeguarded via Standard Contractual Clauses (SCCs) and/or participation in the EU-U.S. Data Privacy Framework.
7. Cookies and Tracking
We use cookies and similar technologies to understand how users interact with our platform and improve the experience.
Essential cookies: required to operate the site
Analytics cookies: used to analyze user behavior (e.g., via PostHog)
We provide a cookie banner for consent where required under GDPR. For more information, see our Cookie Policy.
8. Data Retention
We retain personal data only as long as necessary to:
Provide our services
Fulfill legal obligations
Enforce our agreements
Upon termination of an account or contract, we delete associated data within 10 business days, unless legally required to retain it longer.
9. Your Rights (EU/EEA Residents)
You have the right to:
Access your data
Correct or delete your data
Object to or restrict processing
Request data portability
Withdraw consent (where processing is based on consent)
To exercise these rights, contact us at: support@saltfish.ai
10. Security Measures
We use appropriate technical and organizational measures to secure your personal data, including:
Encryption at rest and in transit
Access controls and staff confidentiality agreements
Prompt incident reporting procedures
11. Changes to This Policy
We may update this Privacy Policy periodically. If changes are significant, we’ll notify you via our website or other appropriate means.
12. Contact Us
If you have questions or concerns about this Privacy Policy or your data, reach out to: support@saltfish.ai