Privacy

Your employer does. Each workspace chooses which of the records below are switched on, and you are shown what is recorded before you connect a computer. The camera, page addresses and background apps are each explained to you in the app, on your own computer, before they start. Nothing is recorded while you are checked out or on a break.

The extension exists for one purpose: to tell the Workstate AI app on the same computer which website is in front while you are checked in, so that your activity record can say “github.com” where it would otherwise only say “Google Chrome”.

• It reads the address of the active tab in the focused browser window, and nothing else about it.
• It sends the site name (for example github.com). If your employer has switched on page addresses, it also sends the path of the page (for example /acme/hrms/pull/42).
• Everything after a “?” or a “#” in the address is removed inside your browser before anything is sent. That is where search words, sign-in tokens and tracking codes are, so they are never recorded. A Google search is recorded as google.com/search.
• It sends this only to the Workstate AI app installed on the same computer, over a local connection. The extension itself makes no network requests and contacts no server.
• It sends nothing while you are checked out, on a break, or while your employer has websites switched off.

The extension never reads or records:

• What you type into a search engine or any other page.
• The content of pages, form input, passwords, cookies, browsing history or downloads.
• Tabs you are not looking at.
• Incognito or InPrivate windows, unless you choose to allow the extension in them.

Chrome describes the permission the extension needs as “Read your browsing history”. The extension uses it only to read the address of the tab in front, as described above.

• Your working time: check-in, breaks and check-out.
• Idle time: no mouse or keyboard input for 5 minutes starts idle time, and you are told on screen.
• Which application is in front.
• Which website is open, as the site name only (for example github.com). On Windows this needs the Workstate AI browser extension in Chrome or Edge.
• Which page of that site, only if your admin turns it on — for example github.com/acme/hrms/pull/42. Never what you search for: everything after a “?” in an address is dropped before it leaves your browser. Deleted after 15 days.
• Which other applications are open behind the one you are using, only if your admin turns it on: their names, every five minutes. No window titles, and no time is counted against them.
• Whether the mouse was in use and whether the keyboard was, as two separate figures. Never which keys you press, what you type or where you click.
• Screenshots, only if your admin turns them on: one in every 10 minutes while tracking, at a moment that is not fixed. Your admin can see these; you cannot. They are deleted after 15 days.
• Whether you are at your desk, from this computer's camera — only if your admin turns it on, and only after you are asked on this computer and agree. No picture is ever saved or sent.

It never records:

• Anything while you are checked out.
• The keys you press, your clipboard or your microphone.
• Pictures or video from your camera.
• What you search for, the part of a web address after a “?”, or page contents.
• Tabs you are not looking at, and incognito windows unless you allow the extension in them.

These two records are off unless your employer switches them on, and each is explained in the app before it starts.

• The page you have open. The address of the page in front in Chrome or Edge, such as github.com/acme/hrms/pull/42. Deleted after 15 days.
• What else is open. Every five minutes, the names of the other open applications, such as Slack and Spotify. Names only.

The app sends what it records to your employer’s HRMS workspace over an encrypted connection. Within that workspace it can be seen by your employer’s HR administrators, and by you for your own record — except screenshots, which only administrators can see.

We do not sell this information, do not use it for advertising, and do not use it to decide creditworthiness or for lending. It is not shared with anyone outside your employer’s workspace, other than the hosting providers that store it on our behalf.

The extension’s use of information received from Chrome adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

• Page addresses (the path of a page) are deleted 15 days after they are recorded.
• Screenshots are deleted after the period your employer sets, 15 days by default.
• Other activity, including site names and background apps, is deleted after the period your employer sets, 90 days by default.
• Signing out of Workstate AI deletes everything the app is holding on that computer.

• You can remove the browser extension at any time from your browser’s extensions page. Websites are then no longer recorded from that browser.
• You can remove a computer from your HRMS account at any time, which stops all recording from it.
• You can see your own activity in HRMS, and export it.
• Your employer can switch page addresses and background apps off for one person. If there is a reason they should not be recorded for you, ask your HR administrator.

For anything about what your workspace records, or to ask for something to be corrected or removed, contact your employer’s HR administrator: they control the workspace and the records in it.