1. About this policy
EmpTrakr provides company workspaces, employee portals, and a desktop Monitor for attendance, time tracking, workplace activity, and screenshots. This policy explains how information is handled when you use our website, applications, and connected storage services.
Your employer or company administrator decides how workplace monitoring is configured and who can review your work records. Contact your company administrator about monitoring settings and your company's use of employee data; contact EmpTrakr about our service and privacy practices.
2. Information we collect
Account and company information includes names, email addresses, company details, roles, authentication credentials, and information you provide through support requests.
When the desktop Monitor is running during tracked work sessions, it can collect attendance and shift times, breaks, idle time, application and website activity, productivity records, device and session information, and screenshots according to company settings. Screenshots can include any information visible on the captured display, including personal or confidential information.
The website and service also process technical information such as IP addresses, browser and device details, request logs, and errors needed to operate and protect the service.
3. How we use information
We use information to create and authenticate accounts, operate company workspaces, deliver attendance and activity reports, store and display screenshots, respond to support requests, troubleshoot failures, and maintain service security and reliability.
Company administrators and other authorized users can access records according to their workspace role. Employers are responsible for explaining their monitoring practices to employees and obtaining any permissions required for their use of EmpTrakr.
4. Google Drive access and Google user data
Connecting Google Drive is optional and is initiated by an authorized company administrator. Google asks the administrator to select an account and approve access. EmpTrakr requests the drive.file permission to create and manage files used by the app, rather than access to every file in the account.
We access the connected account's email address and Drive account identifier to identify the selected storage destination. We store those details, app folder and file identifiers, screenshot metadata, and encrypted OAuth access and refresh tokens. Refresh tokens allow screenshot uploads to continue without asking the administrator to sign in for every upload.
We use the connection to create company and employee screenshot folders, upload captured screenshots, retrieve app screenshot files for authorized viewing, and delete app screenshot files when deletion or retention rules apply. Screenshot files are stored in the selected Google Drive account; EmpTrakr also processes image data and stores delivery records and metadata needed to provide the service.
Google user data is used only to provide and support the connected storage features. We do not sell Google user data, use it for advertising or advertising profiles, or use it to train generalized artificial intelligence or machine-learning models. We do not browse unrelated Drive files as part of screenshot storage.
EmpTrakr's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
7. Storage, security, and retention
EmpTrakr uses role and company access checks to restrict workplace records and encrypts stored cloud-storage OAuth tokens. No storage or transmission method can guarantee absolute security.
The current service retention rules limit screenshot access to 90 days and covered attendance and activity records to 365 days. Expired records and screenshot objects are scheduled for cleanup. These periods do not describe every category of information, such as account details or support communications.
Deletion of screenshots in connected storage requires working provider access and can be delayed by connection or provider failures. Disconnecting storage does not automatically delete files already in that account. Copies downloaded, shared, or otherwise retained outside EmpTrakr are controlled by their holders and the storage provider.
8. Your choices and privacy requests
Company administrators can disconnect Google Drive or OneDrive from EmpTrakr's storage settings. Disconnecting clears the stored connection credentials and stops further use of that connection. You can also revoke EmpTrakr's Google authorization through your Google Account's third-party connections settings.
Employees should contact their company administrator to request access to, correction of, or deletion of workplace records or to raise concerns about monitoring. You can contact EmpTrakr for help with account information, stored connection data, or a privacy request. We may need to verify your identity and coordinate with your company before fulfilling a request.
9. Changes and contact
We may update this policy as the service or its data practices change. The date at the top identifies the latest update. Privacy questions and requests can be sent to emptrakr@gmail.com.