Privacy and retention on a company PC

VisibleHours is workplace software for company-owned Windows PCs. The draft privacy notice describes what the product collects today. The terms draft is the matching product terms page. Neither is legal advice. Review both with counsel before a public launch. Isolation is by organization: another org cannot see your people or files.

Send the employee notice before the first install, and again before screenshots, recording sessions, or location-on-punch go on. After sign-in, Ask “employee notice” opens that template. Ask “notice tutorial” opens Help. Public Search “privacy” stays on /privacy. Site search will not turn capture on.

What is stored — and what is not

• Admin name, email, password hash, organization name.
• Employee roster: name, work email, invite code, device name.
• Activity: app name, window title, optional browser domain, idle vs active, timestamps.
• Optional screenshots only when Operations turns them on. Interval, blur, and retention (1–365 days, or 0 to keep) live on Settings. Capture off does not skip cleanup of files already stored.
• Optional recording sessions (on-demand or scheduled) with their own retention on Recordings — not on Settings.
• Optional mobile-web punches at /checkin. A location is stored only on a punch if the person shares coordinates — not live tracking and not a store app. The Windows tray does not log GPS.
• Optional SAML 2.0 configuration for managers who already exist — not OIDC and not just-in-time provisioning.
• Optional Zapier Catch Hook URL the org pastes — not a published Zapier app and not a marketplace listing.
• Billing metadata from Stripe when a live customer exists: customer id, status, seat count.

VisibleHours does not log keystrokes, clipboard, webcam, or microphone. There is no background phone tracker and no store app in this slice. While tracking is on, the tray icon stays visible. Pause and quit are one click.

What this is not

• Not legal advice and not a signed DPA from this page.
• Not a GDPR, SOC 2, or HIPAA badge.
• Not a /security or /trust page. The public honesty draft is /privacy.
• Not a hidden watcher. If the icon is gone, the agent is not running.
• Not cross-org access. Admins see only their organization.
• Not outreach. VisibleHours does not email a privacy packet for you.