Privacy Policy

1. Who is responsible

Molto is operated by SAASFLOW OÜ, registration number 16834664, at Jõe tn 3-308, Kesklinna linnaosa, Tallinn, Harju maakond, 10151, Estonia. You can reach us about privacy at contact@molto.ai.

We act as a data controller for information used to operate our business, manage accounts and secure the service. When a customer records, uploads or shares personal information using Molto, that customer generally determines the purpose of processing and we process the content on their behalf. A data processing agreement, where applicable, governs that relationship. Contact us to arrange one. If a video was published by someone else, that publisher is the first contact for questions about the content and their use of viewer information.

2. Information we handle

Account and workspace information includes your name, email address, authentication information, workspace membership, role, preferences and subscription records. If you use an external sign-in service, we receive the information it provides to identify and authenticate you.

Video content can include screen recordings, uploaded media, microphone or system audio, camera images, scripts, transcripts, captions, translations, voiceovers, avatars, comments and editing instructions. Recordings can contain names, faces, voices or information visible on screen. Record only what you are entitled to capture and avoid including unnecessary sensitive information.

Technical and usage information can include IP addresses, browser and device information, request logs, errors, timestamps and actions within the product. Video viewing information can include the video and language viewed, playback events, viewing duration and completion. This information supports the service and the publisher’s viewing statistics.

Communications include information you send when requesting help or contacting us. If you purchase a paid service, transaction and billing records are also processed. Payment providers handle payment details through their own systems.

3. Why we use information

We use information to create and authenticate accounts, manage workspaces, record and store media, edit and generate videos, provide requested AI features, deliver playback, manage subscriptions and answer support requests. Where you are our customer, processing necessary to supply these services is based on our contract with you.

We also process information for legitimate interests such as preventing abuse, diagnosing failures, protecting accounts, understanding service performance and maintaining business records. We balance those interests against people’s rights. Where required, we rely on consent for optional activities and on legal obligations for matters such as accounting or responding to lawful requests. You may withdraw consent for consent-based processing without affecting earlier lawful processing.

4. Recordings and AI features

Recording tools use the permissions you grant through your browser or operating system. Depending on your choices, they capture your screen, camera or audio. You can stop capture and manage those permissions in your device or browser settings.

When you request AI features, the relevant media, script, instructions or other inputs may be processed by providers that help with transcription, narration, translation, voice synthesis, avatars or content generation. The information needed varies by feature. Do not submit another person’s voice, image or confidential material unless you have the necessary authority and permissions.

AI-generated content may be inaccurate and should be reviewed before use. If you need details about a provider or its processing terms for a particular feature, contact us before submitting sensitive or regulated content.

5. Sharing and service providers

Workspace members can access content according to their permissions. Sharing a video by link or embed makes it available according to the sharing settings you choose; recipients may copy or redistribute accessible content. An embedded player also sends technical and viewing information when it loads or plays.

We use service providers for hosting, storage, content delivery, video processing, authentication, AI features, email, technical monitoring and, when applicable, payments. The categories of information they process depend on their role and the features you use. Contact contact@molto.ai for information about the providers and processing terms relevant to your use.

Information may also be disclosed where required by law, to protect rights and safety, to investigate abuse or in connection with a business transfer subject to applicable legal protections.

6. Cookies and browser storage

The public marketing website is built without advertising or third-party analytics scripts. Our hosting and security infrastructure processes technical connection information. The Molto application and embedded players may use cookies or browser storage for authentication, settings, security and service functionality.

You can manage cookies and site permissions in your browser. Blocking necessary storage may prevent sign-in or other features from working. Where optional tracking requires consent, it must be offered subject to that consent. Following a link to another website makes that website’s privacy practices relevant.

7. International processing and security

Our providers may process information in countries outside your country of residence, including outside the European Economic Area. Where European data protection law applies, international transfers must have a lawful basis, such as an applicable adequacy decision, contractual safeguards including the European Commission’s Standard Contractual Clauses, or another permitted mechanism. Contact us for the destinations and safeguards relevant to your information or a particular feature.

We use technical and organizational measures appropriate to the service and the information involved. No online service can guarantee absolute security. Keep account credentials confidential and tell us promptly if you suspect unauthorized access.

8. How long information is kept

Retention depends on the purpose of the information, your account and content settings, our customer agreements and legal requirements. We retain information while needed to provide the service, support customers, protect against misuse, resolve disputes or meet legal obligations. Some business records must be retained after an account closes.

You can request deletion of your account or information by contacting us. Customer-controlled content is handled according to the customer’s instructions and applicable agreements. Deletion from active systems may not immediately remove backup copies or content independently saved by other people. Ask us for the retention details relevant to a particular category of information.

9. Your rights

Depending on applicable law, you may request access to, correction of, deletion of or a portable copy of your personal information; restrict or object to processing; and withdraw consent. These rights have conditions and exceptions. Send requests to contact@molto.ai. We may need to verify your identity or authority before responding.

Where we process content for a customer, we may direct your request to that customer or help them respond. You can also complain to your local data protection authority. Our Estonian supervisory authority is the Andmekaitse Inspektsioon (aki.ee).

10. Children and policy updates

Molto is intended for adults and professional use, not for children to create accounts. Contact us if you believe a child has provided personal information through an account without appropriate authorization.

We may update this policy as our service or legal requirements change. The date above identifies this version. We will provide further notice when required by law or when a change materially affects how we handle your information.