Tru Hours Privacy & Monitoring Policy

This policy applies to Tru Hours users, customer organizations, workspace owners, admins, managers, employees, contractors, and visitors who interact with the Tru Hours website, web app, desktop app, APIs, or related services.

If your employer, client, or organization provides access to Tru Hours, that organization is responsible for deciding why and how workspace monitoring data is collected. Tru Hours acts as a service provider or processor for that organization unless a different written agreement says otherwise.

Customers must not use Tru Hours to secretly monitor people, track personal activity, or install the app on devices they are not authorized to manage. The desktop app should be presented to users as a workplace productivity and time tracking tool, not hidden or disguised as unrelated software.

Depending on workspace settings, role permissions, and enabled features, Tru Hours may collect the following categories of data:

• Account information, including name, email address, role, workspace membership, and authentication records.
• Workspace information, including organization name, projects, tasks, sprints, task status, approvals, settings, roles, and permissions.
• Time tracking records, including start time, stop time, duration, project, task, notes, manual edits, approval status, and payroll eligibility.
• Desktop device information, including device identifier, operating system, app version, sync status, and revoked or approved device state.
• Activity and productivity signals, including active application name, active window title, activity timestamps, idle events, productive or unproductive classification, and related workspace rules.
• Screenshots captured according to workspace policy, including screenshot file, capture time, monitor index, associated user, project, task, session, and metadata.
• Payroll and billing-related records, including hourly rates, approved productive time, calculated payroll records, exports, plan status, subscriptions, top-ups, and payment-related metadata.
• Audit, security, and support data, including sign-in events, admin actions, impersonation records, API logs, error reports, support requests, and notification delivery status.

Tru Hours may capture screenshots and activity signals only when enabled by workspace policy and only during authorized work sessions or configured monitoring periods. Screenshots may include visible content on the user's screen at the time of capture, so customers must configure and use this feature carefully.

Screenshot and activity data may be linked to a user, device, workspace, project, task, session, timestamp, active app, active window, productivity classification, and approval workflow. This data is used for work verification, productivity review, dispute resolution, compliance, payroll support, and operational reporting.

Users should avoid displaying private or sensitive personal information during monitored work sessions. If sensitive content is incidentally captured, authorized admins should delete it, restrict access, or handle it according to their legal and workplace duties.

• Provide time tracking, project tracking, task tracking, productivity reporting, screenshot review, approvals, payroll calculations, billing, and workspace administration.
• Show managers and authorized users accurate work-session history, activity summaries, screenshot evidence, idle time, app usage, and productivity trends.
• Allow employees to review their own tracked sessions, activity records, screenshots, approvals, and payroll-related time where enabled by workspace permissions.
• Secure the service, prevent abuse, detect unauthorized access, enforce roles and permissions, maintain audit logs, and support compliance investigations.
• Operate, troubleshoot, improve, and support Tru Hours, including sync reliability, storage, notifications, account management, and customer service.

Customers, admins, and users must not use Tru Hours for the following purposes:

• Secretly monitoring a person without legally valid notice, authorization, or consent.
• Using Tru Hours for stalking, spying, harassment, domestic surveillance, personal surveillance, or any non-business tracking.
• Installing Tru Hours on a device or account that the organization is not authorized to monitor.
• Attempting to capture passwords, private communications, banking details, health records, personal files, or non-work activity as a primary purpose.
• Selling, publishing, or exposing employee screenshots, productivity records, payroll records, or activity data outside authorized business workflows.

Customer organizations are responsible for identifying the correct legal basis for monitoring in their jurisdiction. This may include employee consent, contractual necessity, legitimate business interest, legal obligation, written workplace policy, collective agreement, or another lawful basis.

Before monitoring begins, organizations should clearly explain what data is collected, when monitoring occurs, why it is used, who can access it, how long it is retained, and how users can ask questions or exercise privacy rights.

Tru Hours does not sell employee monitoring data, screenshots, payroll records, activity history, or productivity scores.

We may share data only in limited cases:

• With authorized users inside the customer workspace according to roles and permissions.
• With service providers that help us host, store, secure, email, bill, support, analyze, or operate Tru Hours.
• With legal, regulatory, or law enforcement authorities when required by law or valid legal process.
• With a successor organization if Tru Hours is involved in a merger, acquisition, financing, restructuring, or sale of assets, subject to continued protection of the data.
• With the customer organization that controls the workspace and is responsible for its users.

We use technical and organizational safeguards designed to protect personal and business data. These may include encryption in transit, access controls, authentication, role-based permissions, device revocation, audit logging, limited administrative access, secure storage, backups, and monitoring for abuse or unauthorized access.

No service can guarantee perfect security. Customers must also protect their accounts, invite only authorized users, assign least-privilege roles, rotate credentials when needed, and promptly remove users who no longer require access.

Workspace data is retained according to customer settings, subscription status, product requirements, backup cycles, legal obligations, and support needs. Screenshots and activity logs should be kept only as long as needed for legitimate business purposes.

Customers may delete certain records, revoke devices, remove users, configure retention periods, or request deletion of workspace data subject to legal, security, billing, backup, and audit requirements.

Depending on applicable law and workspace configuration, users may have rights to request access, correction, export, deletion, restriction, objection, or information about how their personal data is handled.

If your Tru Hours account is managed by an organization, send privacy requests to that organization first. We may need to forward requests to the workspace owner or verify authorization before taking action.

Tru Hours is not intended for children and must not be used to monitor minors unless the customer organization has a lawful basis and all legally required guardian, school, employment, or regulatory permissions.

Tru Hours and its service providers may process data in countries other than the country where a user lives or works. Where required, customers and Tru Hours will rely on appropriate safeguards for international transfers.

Tru Hours is listed as a business time tracking and workforce productivity application. The app may collect personal information, including account information, device information, time records, activity data, app usage data, idle events, screenshots, project and task records, approvals, payroll-related records, audit logs, and support data.

This information is used to operate the service, provide business productivity reporting, verify work sessions, calculate approved productive time, support payroll workflows, secure accounts, and administer customer workspaces.

We may update this policy from time to time. If changes are material, we will take reasonable steps to notify customers through the website, app, email, or workspace notice. The updated date at the top shows when this policy was last revised.

For privacy questions, monitoring concerns, data requests, or security reports, contact the Tru Hours support or privacy team through the contact details provided by your workspace owner or through the public contact page.