WorkMonitor.

Legal and compliance

Every document, published in full

The DPA, the sub-processor list, the platform terms and the archive behind them. Each at its own address, each dated. Read them today and forward them to whoever signs off; nothing here waits on a sales call.

Privacy at WorkMonitorEffective August 3, 2026

Global Privacy Policy

WorkMonitor is a product of Digital Socket LLC, a Delaware limited liability company with its registered office at 131 Continental Dr, Suite 305, Newark, DE 19713, United States. Digital Socket LLC, together with its affiliates (collectively "WorkMonitor", "we", "us", or "our"), operates the workmonitor.ai website (the "Site") and provides workforce analytics, time tracking, and activity-monitoring services (the "Services") available through the Site, our desktop applications and our browser extension.

WorkMonitor has developed a global privacy program under which we offer the same high standard of protection to personal data regardless of where in the world it is processed. When we refer to WorkMonitor, we mean the WorkMonitor entity with which you have a relationship, where applicable.

This Privacy Policy explains how information about you is collected, used, and disclosed when you use our Site and Services.

This Privacy Policy forms part of our Platform Terms of Service. Unless otherwise defined here, capitalized terms have the same meaning as in those terms.

01

Scope of Application

This Privacy Policy applies to visitors of our Site, administrators and users of the Services, and the employees and contractors whose activity is monitored through the Services (each a "Monitored User").

Where a WorkMonitor customer deploys the Services to monitor its workforce, that customer acts as the data controller and determines the purposes and means of processing. In that context WorkMonitor acts as a data processor and processes personal data on the customer's documented instructions, as described in our Data Processing Addendum.

02

Information We Collect

Account information. When an administrator creates an account, we collect names, work email addresses, job titles, and authentication credentials.

Activity data. When the Services are deployed on a device, we may collect application and website usage, active and idle time, aggregate input activity levels (not content), and, where enabled by the customer, periodic screenshots. We do not record video or capture screen recordings.

Device and log data. We collect IP addresses, operating system and browser details, device identifiers, and the diagnostic logs necessary to operate and secure the Services.

We do not sell personal data, and we do not use monitored activity data to train third-party advertising models.

03

How We Use Information

We use personal data to provide, maintain, and improve the Services; to generate the productivity and attendance analytics our customers configure; to authenticate users and secure accounts; to provide support; and to comply with legal obligations.

Monitored activity data is processed solely to deliver the monitoring and analytics features that the customer has enabled. Customers are responsible for configuring the Services lawfully and for informing their workforce of monitoring.

05

How We Share Information

We share personal data with sub-processors that provide hosting, AI summarization, payment processing, support, and communications services. A current list is maintained on our Sub-processors page.

We may disclose information to comply with law, enforce our agreements, or protect the rights, property, or safety of WorkMonitor, our customers, or others. If WorkMonitor is involved in a merger or acquisition, personal data may be transferred subject to this Policy.

06

Data Retention

For data we process as a controller, we retain personal data for as long as necessary to provide the Services and for legitimate business or legal purposes. For data we process on behalf of a customer, retention is configured by that customer, and we delete or return the data on termination as described in our Data Processing Addendum.

07

Your Privacy Rights

Depending on your location, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing.

Where WorkMonitor acts as a processor, we will refer requests we receive from Monitored Users to the relevant customer and support that customer in responding. Where we act as a controller, you may exercise your rights by contacting privacy@workmonitor.ai.

08

International Data Transfers

We operate globally and may transfer personal data to countries other than the one in which it was collected. Where we transfer data out of the EEA, the UK, or Switzerland, we rely on Standard Contractual Clauses or another lawful transfer mechanism.

09

Security

We maintain administrative, technical, and physical safeguards designed to protect personal data, including encryption in transit, encryption at rest for credentials and secrets, access controls, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the effective date above and, where appropriate, provide additional notice.

11

Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at privacy@workmonitor.ai or write to Digital Socket LLC, Attn: Privacy, WorkMonitor, 131 Continental Dr, Suite 305, Newark, DE 19713, United States. Our Data Protection Officer can be reached at dpo@workmonitor.ai.

Questions about this document:legal@workmonitor.aiBack to the register