Last updated: 4 November 2026
SALATTO ("SALATTO", "we", "us") is a service for managing home and small-farm hydroponic growing. This policy explains what personal data we collect, why, and your rights. It applies to the SALATTO web application and its APIs.
Dmitry Dmitriev, who operates SALATTO, is responsible for your personal data as its controller. For any privacy question or request, contact us through the feedback form.
We do not sell your personal data and do not use it for advertising. We do not send marketing email without your separate consent.
We use a small number of providers that process data on our behalf, only as needed to run the service:
These providers may process data in countries other than your own.
The Pro plan is sold by Paddle.com, our online reseller and the Merchant of Record for all our orders. When you buy Pro, Paddle collects your payment details, billing address and contact data and processes them as an independent controller under its own privacy notice. Requests about your payment data can be sent to Paddle directly; we pass on any we receive.
We keep your account and farm data while your account exists. Verification and password-reset codes are short-lived and are deleted once used or expired. If you ask us to delete your account, we remove your account and farm data, except where we must keep records to comply with law. A farm that has not been used for 3 months may be deleted after a notice to its owner, as described in our Terms of Use.
For 30 days after a farm is deleted we keep a copy of it, together with its members' accounts, so that a farm deleted by mistake or without its owner's knowledge can be restored. After that the copy is deleted automatically. Separately, encrypted backups of our database are kept for up to 12 months and are used only to recover from failures; deleted data disappears from them as they expire.
Messages you send through the feedback form - the text, the reply address you provide, the interface language and the app version - are kept for 180 days and then deleted automatically. We keep them to answer you and to see whether the same problem keeps coming back.
Passwords are stored only as salted hashes, never in plain text. Access to farm data is isolated per account. Data is transmitted over encrypted connections (HTTPS).
You may request access to, correction of, or deletion of your personal data, and you may withdraw consent at any time. To exercise these rights, contact us through the feedback form. Depending on your location (for example, Thailand's PDPA or the EU's GDPR), additional rights may apply, such as the right to object to processing or to receive your data in a portable form.
We answer such requests within 30 days. If you believe we handle your data unlawfully, you can also complain to a data protection authority, for example Thailand's Personal Data Protection Committee or the supervisory authority of your EU country.
The service is not directed to children under 16, and we do not knowingly collect their data.
We may update this policy. Material changes will be reflected by the "Last updated" date above.
Questions or requests: please use the feedback form. It opens without signing in and is protected against automated submissions.