Privacy Policy

This Privacy Policy explains what personal information Delegent (“Delegent,” “we,” “us,” or “our”), operated by HighThrive LLC, collects, why we collect it, how you can access and update it, and how we use and protect it in connection with our website, web application, and desktop applications for Windows and Mac (together, the “Services”).

Delegent provides time tracking and productivity monitoring tools for teams. This policy applies to everyone who uses the Services, including individual account holders and members of a team or organization added by an account administrator.

1. Information We Collect

We do not collect sensitive personal data such as race, political opinions, religious beliefs, genetic or biometric data, health information, or sexual orientation.

1.1 Information You Give Us

Most of our Services require an account. When you sign up, we may ask for information such as your name, email address, company name, billing address, phone number, tax/VAT ID, and payment card details. You may also give us additional information when you contact support, respond to a survey, or submit a form on our website.

1.2 Information We Collect Automatically

• Device information: hardware model, operating system and version, unique device identifiers, and relevant runtime versions.
• Log information: IP address, browser type and language, referral URL, crash and system-activity data, and the date and time of your requests.
• Location information: general location inferred from IP address and your device's time zone. We do not collect precise GPS location.
• Unique application identifiers: sent when the desktop or web app is installed, uninstalled, or periodically checks in — for example, for automatic updates.
• Local storage: cookies and similar technologies stored on your device (see Section 4).

1.3 Activity & Productivity Monitoring Data

Delegent exists to help teams track work time and activity. While a tracking session is active, the desktop and web apps may collect:

• Session times. Start and stop times of tracked sessions.
• Screenshots. Periodic captures of your screen — on Professional plans, of every connected monitor — up to 30 capture moments per hour. Capture times are randomized within each interval.
• Active application. The name and window title of the application in focus at the moment of each capture.
• Browser URL. When the focused application is a supported browser, the address of the active tab.
• Activity levels. Counts of keyboard and mouse input, recorded as intensity levels — how active you were, not what you typed.
• Derived signals. From those counts, Delegent flags patterns such as repetitive keyboard input and long mouse-only stretches.
• Session and account data. Selected project and task names, any notes you enter, your name and email address, your role, and your organization.

What we do not collect. Delegent does not record the content of your keystrokes, audio, video from your camera, or files on your disk. It does not capture your screen outside an active tracking session, and collects nothing while tracking is stopped. On macOS and Windows, the desktop app requests the operating-system permissions it needs — such as screen-recording access — before it can capture screenshots or activity data; you will see the native OS prompt for this.

Controls. Account administrators and managers on your team's account can view the monitoring data submitted under that account, and can disable or limit many of these data points for their organization. Administrators can blur an individual screenshot, which hides its image while keeping its tracked time, or delete it outright, which removes every monitor captured at that moment along with the time it contributed. Stopping tracking in the desktop application stops all capture immediately.

2. How We Use Information

We use the information we collect to:

• Provide, maintain, and secure the Services
• Generate time-tracking reports, activity summaries, and overtime calculations for your team
• Process billing and manage per-seat subscriptions
• Improve existing features and develop new ones
• Communicate with you about the Services
• Detect, investigate, and prevent fraud, abuse, or security incidents

Our Legal Bases for Processing (EEA/UK Users)

Where the GDPR applies, we process personal data on the following legal bases: performance of a contract with you or your employer's organization, our legitimate interests in operating and improving the Services, compliance with legal obligations, and, where required, your consent.

3. How We Share Information

We do not sell, rent, or trade your personal information. We share it only as follows:

• Within your organization. Time-tracking and activity data collected under a team account is visible to that account's administrators and managers, consistent with the settings they configure. Access is scoped to your organization: owners and administrators can see all members, managers see only the members assigned to them, and employees see their own timeline. Nobody outside your organization has access to your organization's activity data.
• Service providers. We use other companies to process payments and to provide hosting, storage, infrastructure, analytics, and email delivery on our behalf, under instructions and confidentiality obligations consistent with this policy. We share only the minimum information needed, and providers may not use it for their own purposes.
• Legal reasons. We may disclose information to comply with the law, enforce our Terms of Service, investigate potential violations, or protect the rights, property, or safety of Delegent, our users, or the public.
• Business transfers. If Delegent is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy or a policy at least as protective.

4. Cookies and Similar Technologies

We use cookies and similar local-storage technologies to keep you signed in, remember your preferences, measure site usage, and support security. You can control cookies through your browser settings; blocking some cookies may affect how parts of the Services work. We do not use cookies to serve third-party advertising.

5. Data Retention

We keep personal information only as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention of your organization's activity data is controlled by your organization — ask your administrator what your organization's policy is. When you cancel your account, we delete the information associated with it from our live systems; a copy may persist in encrypted backups for a limited period before being purged. Deleting your organization's account removes its activity data.

6. Data Security

Screenshots are stored in object storage and activity records in a managed database, both hosted by our infrastructure providers. We maintain administrative, technical, and physical safeguards designed to protect your information from unauthorized access, alteration, disclosure, or destruction, including encryption of sensitive data in transit and at rest, and need-to-know access controls for our staff. For support and troubleshooting, authorized Delegent staff may access account configuration and technical data; this does not include viewing screenshots or other monitored content.

No method of transmission or storage is completely secure. If we become aware of a security breach that risks exposing your personal information, we will notify affected users and relevant authorities as required by applicable law.

7. International Data Transfers

We may store and process information in countries other than your own. Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses or an applicable adequacy decision.

8. Your Privacy Rights

EEA, UK, and other jurisdictions with similar laws

Subject to local law, you may have the right to access, correct, delete, or export your personal data, restrict or object to certain processing, and withdraw consent where processing relies on it. To exercise these rights, contact us using the details in Section 14. If you are part of a team account, requests about monitoring data may need to go through your account administrator, who controls that data — send them there first. If that is not possible, contact us and we will route the request appropriately.

California residents (CCPA/CPRA)

You have the right to know what personal information we collect, request deletion or correction, and opt out of any “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under California law.

All users

You can update most account information yourself in your account settings, or contact support for help.

9. Workplace Monitoring Notice

If your organization uses Delegent to track your work activity, your employer — not Delegent — is responsible for telling you that monitoring is taking place and for complying with any applicable notice or consent requirements in your location. Several jurisdictions, including some U.S. states and EU member states, legally require employers to notify or obtain consent from employees before electronic monitoring. We provide the tools; account administrators control what is tracked and are responsible for using them lawfully.

10. Children's Privacy

The Services are not directed to, and are not intended for use by, anyone under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Email Communications

Some emails are part of the Service itself, such as password-change confirmations, security alerts, or service notices, and you cannot opt out of these while you continue using the Services. Others, like product updates or promotions, are optional; you may unsubscribe using the link in the email or your account's email preferences.

12. Third-Party Links

The Services may link to third-party websites or services. We are not responsible for the privacy practices of those third parties, and we encourage you to review their policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will not reduce your rights under this policy without your explicit consent. We will post any changes here and, if they are material, notify you by email.

14. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact Delegent Support at support@delegentapp.com.