Privacy Policy

LAST UPDATED: 2025-07-04

ClockBoost (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data processed through our time-tracking software, including the ClockBoost desktop app, web dashboard, browser extension, and any related services (the “Services”).

This policy complies with the EU General Data Protection Regulation (GDPR) and the UAE Personal Data Protection Law (PDPL).

1. Who This Policy Applies To This policy applies to:

Employees and contractors whose activity is tracked by ClockBoost
Company administrators who manage users and data within the platform
Website visitors (basic web analytics only)

2. What We Collect and Why

We want to reassure you that ClockBoost does not monitor personal activity or content. We are a technology provider — not your employer — and we only collect data as instructed by the company you work for (the “Company”), who is the Data Controller. ClockBoost simply acts as a Data Processor.

The Company may configure ClockBoost to collect limited work-related activity data to support operational and compliance needs. Data is never collected secretly: it is always limited in scope, clearly visible to you, and processed only with your consent during installation.

Depending on your company's settings, the following data may be collected:

If the Desktop App is enabled by your company manager:

Basic activity levels such as mouse movement counts and keyboard click counts (we never record actual movements, positions, or what you type)
Optional screenshots taken at random intervals (3, 10, or 15 minutes)
App usage info, like window titles and time spent on each application
Login/logout times and overall session durations

If the Browser Extension is enabled by your company manager:

Visited URLs and how long you stayed on each site — nothing more. We do not access search terms, page content, or any input fields

Account and user context data:

Your name, company, team, and email address — used only to associate activity with the right account

We process this data:

On behalf of your employer under a contractual obligation
Based on legitimate interest in compliance, productivity, and accountability
With your informed consent where required, collected during the installation of the desktop app. The software does not operate without user consent.

3. Employee Transparency and Rights

ClockBoost ensures that employees can see what is being tracked:

You can access your own time logs, activity data, and screenshots
You may request corrections to logged data
You cannot directly delete tracked data due to legal and contractual obligations
You can contact your company administrator to request changes or clarifications

If your request cannot be handled by your company, you may contact ClockBoost at support@clockboost.com.

4. Data Access and Security

Only authorized company managers and admins have access to user tracking data.
Company managers can enable or disable specific features such as screenshots and browser history tracking.
All data is encrypted in transit (via HTTPS) and at rest on secure servers.
Access is role-based and logged for accountability.

5. Data Retention

Data is stored based on your company’s retention settings.
Once your employer deletes data, ClockBoost schedules secure removal from backups within 30 days.
We do not retain personal data longer than necessary for the purposes defined.

6. International Data Transfers

If your data is transferred outside your jurisdiction, we ensure:

Adequate contractual safeguards (Standard Contractual Clauses)
Hosting providers with privacy certifications (e.g., ISO 27001, SOC 2)
Our primary subprocessors include Hetzner and Amazon Web Services (AWS)

7. Use of Cookies

Our marketing website may use cookies for basic analytics and marketing purposes, including Google Analytics. You can disable cookies in your browser at any time. We display a cookie consent banner when required by law.

8. Your Data Rights (GDPR & PDPL)

You have the right to:

Access your data
Request correction of inaccurate data
Object to certain types of processing
Request erasure (in certain cases)
Lodge a complaint with your local Data Protection Authority

To exercise these rights, contact your company administrator or email support@clockboost.com.

Automated Processing
ClockBoost uses automation to display user productivity metrics to company managers. However, no automated decision-making or profiling that produces legal or similarly significant effects on individuals is performed by ClockBoost. All final decisions remain under the control of the employer.
Who Is Responsible?

Data Controller: Your employer (the company that invited you to ClockBoost)
Data Processor: ClockBoost, provided by
ClockBoost Technologies Ltd.

Email: support@clockboost.com

Data Processing Agreement (DPA)
ClockBoost enters into a Data Processing Agreement with each client that defines the scope, responsibilities, and security measures for data processing activities. Clients are encouraged to review and sign the DPA as part of their onboarding process.
Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through the platform or by email. Continued use of the Services means you accept the changes.

Contact
If you have questions about this Privacy Policy, contact us at:
support@clockboost.com