Who this policy covers
This is the privacy policy for CrewGlance at crewglance.com. It describes activity and account data the service processes. The provider is the operator of CrewGlance. This policy is not a promise that monitoring is lawful in every workplace.
A lawyer should review this policy before you rely on it.
The customer and CrewGlance
The customer is the employer or other organization that opens the workspace and chooses to monitor its workforce. For employee and activity data, the customer is typically the controller: the party that decides why people are monitored and which computers run the agent.
The operator of CrewGlance processes that data on the customer's instructions in order to provide the service. The operator does not decide which employees to watch. Employee-related data is processed for the customer, not for the operator's own marketing.
Activity data the product collects
From a computer where the customer installs the agent, CrewGlance collects the signed-in user name, the computer name, the agent version, the foreground application, the window title, a domain when one can be read from the title, idle time, and whether the session is locked, asleep, or logged off. It also stores periodic screenshots of the screen and the time each record covers.
If the agent reports a Tailscale name or address, that is stored so an admin in the same workspace can download a remote-desktop file. The customer can queue remote commands such as a screenshot request, a lock, a message, or an approved script. Those commands and their results are stored.
Account data includes the workspace name, the owner's email, a password hash, billing status from Stripe, and agent-key hashes. CrewGlance does not store the full card number.
How data is used
Activity data is used to show the customer's dashboard, to apply the customer's category rules, to calculate workday totals, and to send alerts the customer has turned on. Screenshots are shown to signed-in users of that workspace. Account data is used to sign people in, to keep workspaces apart, and to bill the customer.
The operator does not use employee activity to advertise, and does not sell it. The service is workplace monitoring software, not a medical or financial product.
Retention
Activity data, screenshots, and account records are kept while the workspace exists so the customer can review them. The product does not run an automatic deletion timer. A customer can ask the operator to delete a closed workspace. The operator deletes or returns that workspace data within a reasonable time, unless the law requires a longer hold. The customer is responsible for its own employment-record retention rules.
Sharing
CrewGlance does not sell personal information. Activity data is not shared with other customers.
The operator uses service providers to run the product: a database and private file storage for activity and screenshots, and Stripe for the customer's subscription (company name, email, and payment status, not employee screenshots). If the customer turns on alerts, the alert text is published to the Amazon SNS topic the customer names, and SNS delivers it to the phone numbers or email addresses the customer subscribed there.
The operator may also share information if the law requires it, or to protect the service and its customers from abuse.
Security
Workspaces are separated. Dashboard passwords and agent keys are stored as hashes. Screenshots are stored as private files and are served through the dashboard after sign-in, not as public links. No method of transmission or storage is perfectly secure.
Cookies
The dashboard uses a cookie named wm_auth to keep you signed in, a cookie named wm_legal to remember that this browser already confirmed the current terms, and an antiforgery cookie so forms posted by the site are genuine. These cookies are needed to run the service. CrewGlance does not use advertising cookies or third-party ad trackers.
Employees
If you are an employee or contractor whose computer runs the agent, your employer or organization controls that monitoring. Contact them about access, correction, or questions about why activity is collected. CrewGlance processes that data on the customer's instructions and does not decide the workplace purpose.
The customer must give any legally required notice, and get any legally required consent, before the agent is installed or activity data is collected.
Contact
Questions about this policy can be sent to the operator through the contact method published on crewglance.com, or by the workspace owner using the email on the account. Employees should start with their employer. The operator is in the Houston area, in Texas.