Privacy
Policy

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, company name, and billing information. This is necessary to provide the Service, process payments, and communicate with you about your account.

1.2 Usage Data

Track Beacon collects aggregated activity data from the desktop tracker, including:

• •Application and window usage patterns, including window titles (which applications and windows are active and for how long)
• •Time allocation across tasks and projects
• •Idle time and break periods based on aggregated keyboard and mouse activity counts (key press counts and mouse movement/click counts — not the content typed or clicked)
• •Periodic screenshots of the screen, if enabled by your organization — frequency, resolution, and blur/redaction settings are configurable, and screenshots can be disabled entirely at the organization level
• •Productivity metrics derived from configurable category rules

We do not collect: keystrokes (only aggregated counts), email content, document content, browsing history, or any personally identifiable messages.

1.3 Device Information

We collect device information such as operating system version, hardware identifiers, and application version to ensure compatibility, deliver updates, and troubleshoot issues.

2. Browser Extension Data Practices

2.1 Track Beacon Bridge Extension

Track Beacon Bridge is a browser extension that connects supported project management websites (GitHub, Jira, Linear, Asana, Trello, Notion, ClickUp, Monday.com, GitLab, Bitbucket) to the Track Beacon desktop time tracker.

2.2 What the Extension Collects

• •Task names: Reads the task name or issue title from the currently viewed page when you click "Start Tracking." This data is sent only to your local desktop app (http://127.0.0.1:9876), never to external servers.
• •Site rules configuration: Fetches static JSON configuration (task name extraction rules) from our backend API. This is non-personal configuration data, not user information.
• •Storage: Caches site rules locally in chrome.storage for offline use. No personal data is stored remotely.

2.3 What the Extension Does NOT Collect

• ✓No browsing history or web pages visited
• ✓No keystrokes, mouse clicks, or page content beyond the task name
• ✓No personally identifiable information
• ✓No analytics or telemetry about extension usage
• ✓No data is transmitted to third parties

3. How We Use Your Information

We use the collected information for the following purposes:

• •Providing the Service: Generate productivity reports, analytics dashboards, and workforce insights as requested by authorized administrators.
• •Improving the Service: Analyze aggregate usage patterns to enhance features, optimize performance, and develop new capabilities.
• •Communication: Send service updates, security notifications, billing information, and support responses.
• •Compliance: Maintain audit trails, access logs, and data retention as required by applicable regulations.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data in the following circumstances:

• •With your consent: We share data when explicitly authorized by your organization.
• •Service providers: We engage trusted third-party vendors for infrastructure (cloud hosting), payment processing, and customer support. All vendors are bound by data processing agreements.
• •Legal requirements: We may disclose information if required by law, court order, or governmental regulation.
• •Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred with appropriate notice.

5. Data Security

We implement industry-standard security measures to protect your data:

• •Encryption in transit: All data transmitted between the desktop tracker, web dashboard, and our servers is encrypted in transit (TLS).
• •Password protection: Passwords are hashed with bcrypt before storage. Media files are stored in a private bucket and served only through short-lived signed URLs.
• •Access controls: Role-based access control (RBAC) ensures only authorized personnel can access sensitive data.
• •Audit logging: Administrator configuration changes are logged with actor, timestamp, and IP address.

Track Beacon implements security controls aligned with SOC 2, including role-based access control and admin action audit trails.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account termination, you may request deletion of your data, which we will complete within 90 days of the request, except where longer retention is required by law or for legitimate business purposes. Aggregated, anonymized data may be retained for analytics purposes.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• •Access: Request a copy of the personal data we hold about you.
• •Rectification: Request correction of inaccurate or incomplete data.
• •Erasure: Request deletion of your personal data, subject to legal obligations.
• •Portability: Request a machine-readable copy of your data for transfer.
• •Objection: Object to processing of your data for specific purposes.

To exercise these rights, contact us at [email protected]. We will respond within 30 days as required by applicable regulations.

8. Digital Personal Data Protection Act, 2023 (India)

Track Beacon is operated by TechReignera Services, based in India. For personal data of individuals in India, we process data under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). Your organization (your employer) is the Data Fiduciary; Track Beacon acts as the vendor providing the means of processing.

• •Notice: Your organization is responsible for giving you notice of what's tracked and why before or at the start of monitoring.
• •Erasure notice: Where we delete personal data on request or at the end of a retention period, we provide at least 48 hours' notice before erasure, except where immediate deletion is required by law.
• •Breach reporting: In the event of a personal data breach, we notify affected individuals and the Data Protection Board of India without delay, with a detailed report filed within 72 hours of becoming aware of the breach.
• •Grievance redressal: A named Grievance Officer is available to address data-subject grievances — see Section 7 above for current contact details.

9. GDPR Compliance

For users in the European Economic Area (EEA) and United Kingdom, we apply data practices aligned with the General Data Protection Regulation (GDPR). Our lawful bases for processing include:

• •Contractual necessity: Processing required to provide the Service under our Terms of Service.
• •Legitimate interests: Workforce productivity monitoring, security, and service improvement.
• •Consent: Where required, we obtain explicit consent for data processing activities.

For privacy-related inquiries, contact our privacy team at [email protected].

10. HIPAA Compliance

Track Beacon offers configurations that support HIPAA compliance for covered entities and business associates. When configured for HIPAA, additional safeguards are applied, including enhanced access controls, stricter audit logging, and a Business Associate Agreement (BAA). Contact our sales team to enable HIPAA-compliant deployment.

11. Children's Privacy

Track Beacon is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or through the Service. Continued use of Track Beacon after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: