1. Overview
Tracknesty ("we", "our", or "us") is an employee activity monitoring platform. This Privacy Policy explains how we collect, use, store, and protect information when you use our software, services, and website located at tracknesty.com (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
2.1 Account & Organisation Data
When you register for Tracknesty, we collect: your name, email address, organisation name, billing information, and account preferences. This information is required to provide the Service.
2.2 Employee Monitoring Data
The Tracknesty desktop agent collects the following data from monitored employees: • Screenshots (at configurable fixed or random intervals) • Active application names and window titles • Website domains visited and time spent per domain • Keyboard and mouse activity indicators (for idle detection — keystrokes and content are never recorded) • Clock-in and clock-out timestamps • Agent health and connectivity status This data is collected only when the agent is installed on a company-managed device and the employee has been enrolled by their administrator.
2.3 Usage & Technical Data
We automatically collect: browser type and version, device type, operating system, pages visited within the dashboard, session duration, and IP address. This is used to maintain service quality and diagnose issues.
3. How We Use Your Information
We use collected information to: • Provide, operate, and maintain the Tracknesty platform • Process and fulfil your subscription • Display monitoring data to authorised administrators and managers • Detect and prevent fraudulent or unauthorised access • Send transactional emails (account verification, invoices, critical alerts) • Improve the Service through aggregated, anonymised analytics We do not sell your data to third parties. We do not use monitoring data for advertising.
4. Data Storage & Security
Tracknesty is a cloud SaaS platform. All tenant data is logically isolated in dedicated database partitions. • Screenshots and large binary file assets are encrypted at rest using AES-256 and stored via Cloudflare R2 distributed object storage. • All communication between the desktop agent, web dashboard, and API servers is protected with TLS 1.3 encryption in transit. • Real-time screen streaming utilizes WebRTC encrypted peer connections and secure relay channels. • We maintain strict role-based access controls and perform regular security audits.
5. Data Retention
You control your data retention. Administrators can configure retention schedules or purge screenshots and activity logs at any time through the workspace settings. When your subscription ends, data is retained for 30 days before permanent deletion. You may request full deletion of your account and all associated data by contacting us at support@tracknesty.com.
6. Employee Rights & Transparency
The desktop agent runs visibly in the system tray — it is not hidden spyware. Employees are always made aware that monitoring is active. Employees have the right to: • Know what data is collected about them • Request a copy of their monitoring data through HR or IT • Raise correction requests for incorrect attendance records • Have their data deleted upon termination of employment
7. Third-Party Services
We partner with trusted third-party sub-processors to deliver the Service: • Payment processing: Lemon Squeezy (Merchant of Record, PCI-DSS Level 1 compliant). We do not store credit card numbers. • Cloud Storage & CDN: Cloudflare (R2 Object Storage, DDoS mitigation, and global edge network). • Email delivery: Transactional email delivery providers for system notifications and alerts. All sub-processors are bound by strict data protection agreements and prohibited from using customer data for secondary purposes.
8. GDPR & International Data Transfers
If you are in the EEA or UK, you have full data subject rights under GDPR/UK GDPR: • Right of access, rectification, erasure, restriction, portability, and objection. Tracknesty executes Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs) with customers and infrastructure vendors. To exercise privacy rights, email support@tracknesty.com.
10. Changes to This Policy
We may update this policy periodically. We will update the "Last Updated" date and notify active subscribers via email. Continued use constitutes acceptance.
11. Contact Us
Email: support@tracknesty.com Response time: within 3 business days