Privacy and retention on a company PC

VisibleHours is workplace software for company-owned Windows PCs. The draft privacy notice describes what the product collects today. It is not legal advice. Review it with counsel before a public launch. Isolation is by organization: another org cannot see your people or files.

Send the employee notice before the first install, and again before screenshots, recording sessions, or location-on-punch go on. After sign-in, Ask “employee notice” opens that template. Ask “notice tutorial” opens Help. Public Search “privacy” stays on /privacy. Site search will not turn capture on.

What is stored — and what is not

• Admin name, email, password hash, organization name.
• Employee roster: name, work email, invite code, device name.
• Activity: app name, window title, optional browser domain, idle vs active, timestamps.
• Optional screenshots only when Operations turns them on. Interval, blur, and retention (1–365 days, or 0 to keep) live on Settings. Capture off does not skip cleanup of files already stored.
• Optional recording sessions (on-demand or scheduled) with their own retention on Recordings — not on Settings.
• Optional mobile-web punches. A location is stored only on a punch if the person shares coordinates. The Windows tray does not log GPS.
• Billing metadata from Stripe when a live customer exists: customer id, status, seat count.

VisibleHours does not log keystrokes, clipboard, webcam, or microphone. There is no background phone tracker and no store app in this slice. While tracking is on, the tray icon stays visible. Pause and quit are one click.

What this is not

• Not legal advice and not a signed DPA from this page.
• Not a hidden watcher. If the icon is gone, the agent is not running.
• Not cross-org access. Admins see only their organization.
• Not outreach. VisibleHours does not email a privacy packet for you.