Privacy policy

Workk is supplied by [LEGAL ENTITY NAME], registered at [REGISTERED ADDRESS] (“we”, “us”).

For monitoring data captured from enrolled devices, the employer is the data controller and we are the processor. The employer decides who is monitored, at what interval, and for what purpose. We process it on their instructions to provide the service.

For account and billing data — the person who signs up, their email, invoices — we are the controller.

Only when an administrator has enrolled the device with a token issued from their dashboard:

• Screenshots, at the interval configured by the employer, plus captures on application switch.
• Application and window titles, and website domains visited.
• Active and idle time derived from input activity.
• Live screen frames, only while a manager has a live session open.
• Device identifiers, operating system, and agent version.
• Webcam images, only where the employer has enabled that add-on.

We do not collect keystrokes. There is no keylogger in the agent. We do not record audio, and we do not read the contents of email or messaging applications beyond what is visible in a screenshot of the screen.

• Account details: name, work email, company, and password (stored hashed, never in plain text).
• Anything you type into the contact form on this site, used only to reply to you.
• Billing records, where a paid plan is active. Card details are handled by our payment provider and never reach our servers.
• Standard server logs, including IP address, for security and diagnostics.

• To provide the service — capture, storage, and reporting the employer has configured.
• Legitimate interests of the employer — managing work on employer-owned equipment. The employer is responsible for establishing and documenting that basis, and for disclosing monitoring to staff.
• Contract — billing and account administration.
• Legal obligation — tax records and lawful requests.

We do not sell personal data, and we do not use monitoring data to train models or for advertising.

Retention runs automatically every night. Nothing is kept indefinitely by default.

• Screenshots: 15 days on Basic, 30 on Professional, 60 on Business.
• Activity logs: 90 days on Basic and Professional, 180 on Business.
• Account and billing records: for the life of the account, then as required for tax and accounting.

If an organisation downgrades, the shorter window applies from that day and older captures are removed at the next nightly run.

• Inside the employer — administrators, and managers or team leads for their own teams.
• Our staff — only where necessary to operate or support the service, and only with the customer’s knowledge.
• Infrastructure providers — hosting and email delivery, acting as sub-processors under contract.
• Payment provider — for plan payments.

We do not disclose monitoring data to third parties except where legally compelled.

Data is encrypted in transit. Screenshots are stored with AES-256 encryption at rest. Access to production systems is restricted and authenticated. Device enrolment requires a signed token, so an agent cannot attach itself to an organisation it was not issued for.

No system is perfect. If we become aware of a breach affecting personal data, we notify affected customers without undue delay and, where required, the relevant supervisory authority.

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, and to receive a copy in portable form.

If you are a monitored employee, your employer controls the data — please raise your request with them first. We will assist them in fulfilling it, and the dashboard provides bulk export and deletion for exactly this purpose. If you cannot get a response from your employer, contact us at privacy@workk.work and we will do what we can within our role as processor.

You also have the right to complain to your local data protection authority.

Our infrastructure is located in [HOSTING REGION]. Where data moves across borders, we rely on [TRANSFER MECHANISM — e.g. standard contractual clauses].

Material changes will be notified to account administrators by email before they take effect. Questions or requests: privacy@workk.work, or +91 81302 46989.