1. Introduction
Saltz AI LLC (“Saltz AI”, “we”, “us”, or “our”) is committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you visit our website at saltz.ai (the “Site”), contact us, request information, join a waitlist, or otherwise interact with us.
This Policy is written to meet the requirements of the EU General Data Protection Regulation (the “GDPR”), the UK General Data Protection Regulation and Data Protection Act 2018 (the “UK GDPR”), the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the “CCPA/CPRA”), and other applicable data protection and privacy laws. Where a specific law gives you rights that go beyond this Policy, those rights apply.
Please read this Policy carefully. If you do not agree with it, please do not use the Site.
2. Who We Are and Scope of This Policy
Saltz AI LLC is a limited liability company formed in the State of Wyoming, United States, with a registered address at 30 N Gould St, Ste R, Sheridan, WY 82801, United States. For the personal data described in this Policy, Saltz AI LLC is the “controller”, meaning we determine the purposes and means of processing your personal data.
This Policy covers personal data we process about:
- Visitors to and users of the Site.
- Prospective clients and partners who contact us, submit a form, or request information.
- Individuals who join a waitlist for a product or service.
This Policy does not cover personal data we process on behalf of our clients in the course of delivering paid services. When we deliver consulting, audit, education, or automation services, the handling of any data we access or process for a client is governed by the separate written services agreement and data processing terms entered into with that client. In that context the client is the controller and Saltz AI acts as a processor.
EU and UK representative
We are established in the United States and do not have an establishment in the European Union or the United Kingdom. Our processing of personal data of individuals in the EU and UK through the Site is occasional, is limited to the data described in this Policy, does not involve large-scale processing of special categories of data, and is unlikely to result in a risk to your rights and freedoms. On that basis we have not appointed a representative under Article 27 of the GDPR or the UK GDPR. EU and UK individuals may contact us directly using the details in Section 16, and we will respond to all enquiries and requests. If our processing changes such that a representative becomes required, we will appoint one and publish their contact details here.
3. The Personal Data We Collect
We collect and process the following categories of personal data. We only collect what we need for the purposes set out in this Policy.
| Category | Examples |
|---|---|
| Identity Data | First and last name, job title or role. |
| Contact Data | Email address, company or organization name. |
| Enquiry and Qualification Data | Information you choose to provide when you contact us or submit a form, such as company size, budget range or tier, your role, the services you are interested in, and any free-text message you send us. |
| Waitlist Data | Email address you provide to join a product or service waitlist. |
| Technical and Usage Data | Internet protocol (IP) address, browser type and version, device type, operating system, referring URLs, pages viewed, time spent on pages, and other diagnostic and analytics data collected automatically when you use the Site. |
| Cookie Data | Information collected through cookies and similar technologies, as described in Section 7. |
| Communications Data | The content of and metadata about your communications with us, including emails and form submissions. |
We do not intentionally collect special categories of personal data (such as data revealing race, ethnicity, political opinions, religious beliefs, health, or biometric data) through the Site, and we ask that you do not submit such data to us through our forms or messages.
4. How We Collect Your Personal Data
We collect personal data through the following means:
- Direct interactions. You give us your Identity, Contact, Enquiry, Qualification, Waitlist, and Communications Data when you fill in a form on the Site, join a waitlist, or correspond with us by email.
- Automated technologies. As you navigate the Site, we automatically collect Technical, Usage, and Cookie Data using cookies, server logs, and similar technologies, and through our analytics providers.
- Third parties. We may receive Technical and Usage Data about you from analytics and hosting providers acting on our behalf, as described in Section 8.
5. How We Use Your Personal Data and Our Legal Bases
We use your personal data only where we have a valid legal basis to do so. The table below maps each purpose to the relevant legal basis under the GDPR and UK GDPR.
| Purpose | Legal basis |
|---|---|
| To respond to your enquiry, contact request, or message. | Performance of steps taken at your request prior to entering a contract; and our legitimate interest in responding to enquiries. |
| To send you a confirmation that we received your form submission, and to follow up about your enquiry. | Performance of pre-contract steps; and our legitimate interest in communicating with prospective clients. |
| To add you to and manage a product or service waitlist, and to notify you about availability. | Your consent, which you may withdraw at any time. |
| To operate, maintain, secure, and improve the Site. | Our legitimate interest in running and improving our website and protecting it against fraud and abuse. |
| To measure and understand how visitors use the Site through analytics. | Your consent where required for analytics cookies; otherwise our legitimate interest in understanding and improving the Site. |
| To comply with legal obligations, and to establish, exercise, or defend legal claims. | Compliance with a legal obligation; and our legitimate interest in protecting our rights. |
Where we rely on legitimate interests, we have considered and balanced these against your rights and freedoms. You may object to processing based on legitimate interests as described in Section 11.
We do not use your personal data to make decisions about you based solely on automated processing that produce legal or similarly significant effects.
6. Marketing and Follow-Up Communications
If you submit a form on the Site, we may use the email address and details you provide to follow up about your enquiry and the services you expressed interest in. We do not add you to a general marketing list unless you separately ask us to, or you join a waitlist.
You can ask us to stop sending you follow-up or waitlist communications at any time by emailing us at bruno@saltz.ai or by using any unsubscribe mechanism included in our messages.
7. Cookies and Similar Technologies
We use cookies and similar technologies to operate the Site, remember your preferences, and measure how the Site is used. These include strictly necessary technologies, which are always active, and analytics cookies set by Google Analytics, which we use only where you have given consent if consent is required in your jurisdiction. Our other analytics provider, Vercel Analytics, is cookieless and does not store cookies on your device.
Where required by law, a cookie banner appears when you first visit the Site so you can accept or reject non-essential cookies, and you can change your choice at any time. You can also control cookies through your browser settings. If you block or delete cookies, some parts of the Site may not work as intended.
We honor recognized opt-out preference signals such as Global Privacy Control (GPC) where required by applicable law.
For full details of the cookies we use, their purposes, how long they last, and how to manage them, please see our Cookie Policy.
8. Who We Share Your Personal Data With
We do not sell your personal data. We share personal data only with the service providers and recipients listed below, and only as needed for the purposes in this Policy. These providers process personal data on our behalf under contractual obligations to keep it secure and to use it only for the services they provide to us (“sub-processors”).
| Recipient | Role | Purpose |
|---|---|---|
| Vercel Inc. | Hosting and analytics provider | Hosts the Site and provides privacy-conscious usage analytics. |
| Google LLC (Google Analytics) | Analytics provider | Measures and reports on how visitors use the Site. |
| Supabase, Inc. | Database and storage provider | Securely stores form and waitlist submissions. |
| Resend (Plus Five Five, Inc.) | Transactional email provider | Sends confirmation emails to you and internal alert emails to our team. |
| Telegram FZ-LLC | Internal notification channel | Delivers internal alerts to our team when a form is submitted, so we can respond promptly. |
We may also disclose personal data:
- To professional advisers such as lawyers, accountants, and auditors, where necessary.
- To a buyer or successor in the event of a merger, acquisition, financing, reorganization, or sale of assets, subject to this Policy.
- Where required to comply with a legal obligation, court order, or lawful request by a public authority, or to establish, exercise, or defend legal claims, or to protect the rights, property, or safety of Saltz AI, our users, or others.
9. International Transfers
We are based in the United States, and the providers we use may store and process personal data in the United States and other countries. This means your personal data may be transferred to, and processed in, countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.
When we transfer personal data of individuals in the European Economic Area or the United Kingdom to a country that has not been recognized as providing an adequate level of protection, we put appropriate safeguards in place, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, together with any additional measures required to protect your data. You may request a copy of the relevant safeguards by contacting us using the details in Section 16.
10. Data Retention
We keep your personal data only for as long as necessary to fulfill the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements, and to establish, exercise, or defend legal claims.
- Enquiry and contact data: retained for as long as needed to handle your enquiry and for a reasonable period afterward to maintain a record of our communications, after which it is deleted or anonymized.
- Waitlist data: retained until the relevant product or service launches and you are notified, or until you ask to be removed, whichever is earlier.
- Technical, usage, and analytics data:retained for the period set by our analytics providers’ default retention settings, and otherwise for as long as needed for security and improvement purposes.
When personal data is no longer needed, we securely delete or anonymize it.
11. Your Privacy Rights
Depending on where you live and the applicable law, you may have some or all of the rights described below. We will respond to verifiable requests within the timeframes required by applicable law.
11.1 Rights under the GDPR and UK GDPR
If you are in the European Economic Area or the United Kingdom, you have the right to:
- Access the personal data we hold about you.
- Rectification of inaccurate or incomplete personal data.
- Erasureof your personal data in certain circumstances (the “right to be forgotten”).
- Restriction of processing in certain circumstances.
- Object to processing based on legitimate interests, and to object to direct marketing at any time.
- Data portability, meaning you can request a copy of certain data in a structured, commonly used, machine-readable format.
- Withdraw consent at any time where we rely on consent, without affecting the lawfulness of processing before withdrawal.
- Lodge a complaintwith a supervisory authority. In the EU, this is the data protection authority in your country of residence or work. In the UK, this is the Information Commissioner’s Office (ico.org.uk). We would, however, appreciate the chance to address your concerns first.
11.2 Rights under the CCPA/CPRA (California)
If you are a California resident, you have the right to:
- Know the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we share it.
- Delete personal information we have collected from you, subject to certain exceptions.
- Correct inaccurate personal information.
- Opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA.
- Limit the use of sensitive personal information. We do not collect sensitive personal information through the Site for the purpose of inferring characteristics.
- Non-discrimination for exercising any of your privacy rights.
You may exercise these rights using the contact details in Section 16. You may use an authorized agent to make a request on your behalf, subject to verification.
11.3 Other United States state privacy rights
If you are a resident of another US state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, Utah, Texas, or others), you may have rights similar to those described above, including rights to access, correct, delete, and opt out of certain processing. Contact us using the details in Section 16 to exercise these rights.
11.4 How to exercise your rights
To exercise any of these rights, email us at bruno@saltz.ai. We may need to verify your identity before acting on your request. Exercising your rights is free of charge in most cases, although we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded, excessive, or repetitive, as permitted by law.
12. Data Security
We have implemented appropriate technical and organizational measures designed to protect your personal data against unauthorized access, alteration, disclosure, loss, or destruction. These include access controls, encryption in transit, the use of reputable service providers, and limiting access to personal data to those who need it.
No method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities where required by law.
13. Children’s Privacy
The Site and our services are intended for businesses and professionals and are not directed to children. We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.
14. Third-Party Links
The Site may contain links to third-party websites, plug-ins, or services that are not operated or controlled by us. We are not responsible for the privacy practices or content of those third parties. We encourage you to read the privacy policy of every site you visit. Clicking a third-party link may allow that third party to collect data about you.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will revise the “Last updated” date at the top of this Policy and post the updated version on the Site. If the changes are significant, we will provide a more prominent notice where required by law. We encourage you to review this Policy periodically.
16. How to Contact Us
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to make a complaint, please contact us:
- Email: bruno@saltz.ai
- Postal address: Saltz AI LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States
If you are in the EEA or UK and you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.