WorkTrace

Employee Monitoring Notice

This notice is provided under the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. It explains the monitoring running on this company-provided device.

Data Fiduciary: ReventLabs
Legal basis: Processing for the purposes of employment — a “legitimate use” under Section 7(i) of the DPDP Act, 2023 (your separate consent is not required, but this notice, proportionality, security, your rights, and retention limits all apply).

What is collected — and why

Online / idle time	Seconds since your last keyboard or mouse input, to measure working hours.
Activity level	The % of time with keyboard/mouse activity present — presence only, not what you type.
Foreground application	The name of the app currently in front, to understand tool usage.
Periodic screenshots	Images of your work screen taken at intervals during working hours.
Activity events	App switches and screen lock/unlock times.
Device details	Hostname and macOS version of the company device.

Monitoring is limited to what is reasonably necessary for employment and, where configured, to working hours only.

What is never collected

Individual keystrokes or anything you type
Passwords, financial details, or other sensitive personal data
Clipboard contents, files, microphone, or camera
Anything while the screen is locked
Location / GPS
Anything on excluded apps your employer has listed

Retention

Screenshots are retained for 30 days and activity data for 90 days, after which they are erased. Data is also erased when it is no longer needed for the purpose above.

Your rights as a Data Principal

Under the DPDP Act you may:

Access a summary of the personal data processed about you
Request correction or erasure of your personal data
Raise a grievance and have it addressed
Nominate another person to exercise your rights

To exercise these rights, contact the Grievance Officer below. If unresolved, you may complain to the Data Protection Board of India.

Grievance Officer

Set-Me, Grievance Officer
grievance@reventlabs.com

Grievances are acknowledged promptly and resolved within the timelines required by the DPDP Rules, 2025.

This is a monitoring notice, not a substitute for your organisation’s full privacy policy or employment agreement.