Pulse

This notice explains what personal information Datahase Pulse ("the product") holds, who is responsible for it, why it is held and what you can ask for. The product is published by Datahase at datahase.com.

1. Who decides what

Datahase is responsible for the information it needs to run your account: your name, email address, password and the record of which terms you agreed to.

Each customer organization is responsible for what it puts into the product about its own people and its own clients. For that information Datahase acts on the organization's instructions and does not use it for its own purposes. Questions about it are best sent to the organization first.

2. What the product records

Your account: your name, email address, preferred language and a one-way hash of your password. We never store the password itself.
What you agreed to: which version of these documents you accepted, when, and a keyed hash of the internet address the acceptance came from — never the address itself.
Work records: time entries you or your organization record — when work started and ended, the project, task and notes — together with timesheets, time off, projects, contacts, estimates, invoices, payments and expenses your organization enters.
Sign-in security: your active sessions and keyed hashes of request addresses used to slow down repeated attempts.
Pictures of the screen, applications and addresses: only where your organization allows screen capture for you, and only while your timer runs. Pictures of your screen; the names of the applications you used, with their window titles only where your organization turns titles on; and the addresses of the pages you visited, as the site alone unless your organization records whole addresses.
Screen recordings: only where your organization has turned screen recording on and allowed it for you, and only while your timer runs in the Datahase Pulse desktop timer. It films the one display that holds the window in front of you, at two frames a second, in pieces of at most ten minutes, each attached to the ten minutes of recorded time it was made in. It records no sound. A recording is uploaded only over a network that is not metered and not while your battery is below 20%.

While a recording is being made, the desktop timer's menu-bar or tray item reads "Recording", and no setting can hide it. Your operating system's own recording indicator stays on as well. Your organization can watch your recordings. A recording is removed together with the recorded time it belongs to, or when its period ends (section 6), whichever comes first.

3. What the product does not record

The product never uses your webcam or microphone, and nothing you type is ever captured.

4. Why we hold it

To provide the product you or your organization signed up for (performing a contract).
To keep accounts secure and prevent abuse (legitimate interest).
To show that you agreed to our terms (legal obligation and legitimate interest).

We do not sell personal information and we do not use it for advertising.

5. Who else handles it

We use hosting, database, file storage and email delivery providers to run the product. They act on our instructions only. We share information with authorities only where the law requires it.

6. What happens to the records we keep

Pictures of your screen, the applications you used and the addresses you visited are kept for the period your organization chooses: 7, 30, 60, 90, 180 or 365 days, and 90 days unless it chooses otherwise. Screen recordings are kept for 7 or 30 days, 30 unless it chooses otherwise, and never longer than pictures. There is no option to keep them for ever. When the period ends, the record and the stored file are both deleted automatically. A change to the period applies to what is captured after the change. Deleting recorded time deletes its pictures, applications, addresses and recordings at once.

Other records stay for as long as the account or organization that holds them exists. An organization can remove its own records from the product by hand. When you ask us to close your account, we remove your account details and the records tied only to you, except where the law requires us to keep them.

7. Your rights

You can ask to see, correct, export or delete personal information about you, and you can object to how it is used. Write to privacy@datahase.com, or to the organization concerned for information it put into the product. You may also complain to your data protection authority.

8. Changes

A change to this notice is published as a new version with its own version number and the date it comes into force.