Privacy Policy

Last updated: April 16, 2026

This Privacy Policy describes how Computer Activity Monitor ("CAM", "we", "us", or "our") collects, uses, and protects information when you use our service. We are committed to transparency about our data practices.

ℹ️ Two types of users: This policy covers both Account Holders (employers and businesses who sign up for CAM) and Monitored Users (employees whose computers have the CAM agent installed). We explain what data we collect from each.

1. Information We Collect

From Account Holders (Employers)

When you create an account we collect:

Company name and email address
Administrator name and email address
Password (stored as a secure hash — we never store your actual password)
Billing contact information for invoicing (payments by check are handled by your bank; PayPal payments are processed by PayPal — we do not store payment card details)

From Monitored Computers (via the CAM Agent)

The monitoring agent installed on employee computers collects and transmits the following data:

Data Point	What It Is	What It Is NOT
Mouse moves	A count of how many times the mouse moved during the reporting period	Not the actual coordinates or path of movement
Mouse clicks	A count of mouse button presses	Not what was clicked or where
Keyboard presses	A count of key presses during the reporting period	Not the actual keys pressed — we do not log keystrokes or capture any typed content
Active window	The name of the application that was in the foreground	Not the content of the application, URLs visited, or documents opened
Active/idle time	How many seconds the computer was active vs idle during the reporting period	Not a continuous stream — reported in 10-minute summaries
Computer name	The hostname of the computer
Username	The operating system username of the logged-in user
Timestamp	When the report was generated

We do not collect: passwords, keystrokes or typed content, screenshots, webcam images, email or message content, files or documents, browsing history or URLs, or any personal communications.

2. How We Use This Information

Account Holder Information

To create and manage your account
To process payments and manage subscriptions
To send service-related emails (account verification, password reset, billing)
To provide customer support
To notify you of changes to our service or these policies

Activity Data from Monitored Computers

To display activity reports in your dashboard
To generate summaries and analytics for your organization
To detect potentially suspicious activity patterns

We do not sell, rent, or share activity data with third parties for advertising or marketing purposes. Activity data is only accessible to authorized users within your organization.

3. Data Storage and Security

All data is stored on secured servers. We implement industry-standard security measures including:

Encrypted connections (HTTPS/TLS) for all data in transit
Hashed passwords using bcrypt
API key authentication for agent data submission
Access controls limiting data to authorized users within each organization

While we take security seriously, no system is perfectly secure. We cannot guarantee absolute security of your data.

4. Data Retention

Detailed activity data is retained for 90 days, then consolidated into daily summaries
Daily summary data is retained for 1 year, then permanently deleted
Upon account cancellation, data is retained for 30 days to allow for export
After 30 days from cancellation, all data is permanently deleted
You may request deletion of your data at any time by contacting us

5. Self-Hosted Accounts

If you use our self-hosted option, activity data is sent directly to your own server and is never stored on our systems. We only retain your account registration information (company name, email, API key). You are solely responsible for the security and handling of data on your own infrastructure.

6. Third-Party Services

We use the following third-party services:

PayPal — payment processing for customers who choose to pay by PayPal. Your payment information is handled directly by PayPal and subject to their privacy policy. Payments by check do not involve any third-party processor.
Email service provider — for sending transactional emails such as account verification and password resets.

We do not use third-party analytics, advertising networks, or tracking tools on our dashboard.

7. Cookies

We use session cookies solely to keep you logged in to your dashboard. We do not use tracking cookies, advertising cookies, or any third-party cookies. You can disable cookies in your browser settings, but this will prevent you from staying logged in.

8. Employee Rights and Monitored Users

If you are an employee whose computer is being monitored using CAM:

Your employer (the account holder) controls the data collected about your computer activity
We collect only aggregate activity counts, not keystrokes or personal content
For questions about what data is being collected or to request access, please contact your employer directly
We are not able to respond directly to requests from monitored users — your employer is the data controller

9. Children's Privacy

Our service is intended for business use only and is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child's information has been collected, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify account holders of significant changes by email or by posting a notice on the dashboard. The date at the top of this page indicates when the policy was last updated.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through our support page.

This Privacy Policy is part of and incorporated into our Terms of Service.