Draft · VisibleHours on visiblehours.com
Terms of use
This is a working product terms page for VisibleHours on visiblehours.com. It describes what you agree to when you use the service today — org isolation, company Windows PCs, the notice path, optional capture, SAML, Catch Hook, and $7 seats. It is not legal advice, not a signed contract from this page, and not a GDPR, SOC 2, or HIPAA badge. Review it with counsel before a public paid launch. The draft will change.
Who this is for
Organizations use VisibleHours on company-owned Windows PCs. A manager creates one organization at signup and becomes that org's admin. Employees belong only to that org. Admins cannot see another organization's people, files, or punches. Isolation is by organization.
Company devices and notice
You agree to install the unsigned Windows tray on organization-owned (or explicitly consented) computers — not personal phones and not home PCs by default. Send the employee notice before anyone runs Setup.exe, and again before screenshots, recording sessions, or location-on-punch go on. Keep the tray icon visible. Do not wrap, hide, or spoof the agent. There is no hidden screenshot path, no capture-without-tray, no hidden screen recording, and no record-without-tray path.
The service
VisibleHours provides an organization dashboard and a Windows tray agent that records application use and idle time while the tray is running. Signup creates one isolated organization. Employees do not receive a web login in this slice — they use the unsigned tray or the public check-in page.
- Screenshots stay off until Operations turns them on. A shot is an interval still — not always-on secret capture. Blur is on by default when shots are enabled. The tray stays visible.
- Recording sessions stay off until Operations turns a tier on. A session is on-demand or a weekday window and stores a short clip or upload — not an always-on DVR. The tray stays visible and shows a note while a session is open.
- Mobile is a browser punch at /checkin, only when an admin turns the policy on. Optional GPS is coordinates the employee shares on that punch. Not live tracking. Not a store app — there is no iOS or Android app and no Microsoft Store, App Store, or Play Store listing in this slice.
- Managers sign in with email and password, or with SAML 2.0 for a manager who already exists. That is not OpenID Connect, not passwordless, and not just-in-time provisioning.
- Zapier is a Catch Hook URL you paste — not a published Zapier app and not a marketplace listing. Slack, Jira, and Asana still use OAuth when client IDs are set.
What the product stores lives on the privacy notice. There is no /security or /trust page.
Acceptable use
- Install only on company-owned (or explicitly consented) computers.
- Keep the tray icon visible. Do not wrap, hide, or spoof the agent.
- Give employees written notice before enabling screenshots, recordings, or location-on-punch. Use the employee notice at /notice as a starting point.
- Do not use the product to collect keystrokes, passwords, or personal-device data.
Fees
The published seat plan is seven US dollars per seat per month ($7 / seat). Seats are shown in Settings. There is no live Stripe checkout on this site until Operations enables it. Test-mode keys and a local mock are acceptable until live keys are issued. This page does not charge a card.
Accounts and orgs
You are responsible for invite codes and admin passwords. VisibleHours does not email invites or send a password-reset message. Isolation is by organization. Exports are organization CSVs — not a personal dossier — and there is no one-click wipe.
Warranty and liability
The software is provided as-is. Unsigned Windows installers will show SmartScreen warnings until Operations adds a code-signing certificate. Availability, backups, and production hosting are the deployer's responsibility.
What this is not
- Not legal advice and not a counsel-ready compliance pack from this page.
- Not a GDPR, SOC 2, or HIPAA certification. VisibleHours does not show those badges.
- Not a signed DPA generated here. Ask counsel if your organization needs one.
- Not a /security or /trust center. Ask “security”, “open security”, or “org isolation” stays on the privacy notice.
- Not live Stripe, live GPS, keystroke logging, or a done-for-you workflow.
- Not analytics tags. This site does not add Google Analytics or a tag manager.
- Not outreach. VisibleHours does not email terms, a privacy packet, or invites for you.
After sign-in, Ask “terms”, “terms of use”, “terms of service”, or “open terms” opens this page. Ask “privacy” or “privacy notice” opens the privacy notice. Ask “privacy tutorial” opens Help. Public Search the same phrases stays on these drafts. Ask “legal advice” or “are you GDPR certified” is refused — this site will not invent a badge.
Contact
Questions about this draft go to VisibleHours at visiblehours.com until a dedicated legal contact is published.