Privacy Policy

1. Who we are

HawkLens is operated by HawkBytes (hawkbytes.cloud). For privacy questions, contact info@hawkbytes.cloud.

When an organization (our “Client”) deploys HawkLens for its workforce, that Client is typically the data controller for employee productivity data. HawkBytes acts as a data processor / service provider on the Client’s instructions, except for account, billing, and marketing data we control as a business.

2. Information we collect

Depending on how HawkLens is used, we may process the following categories of information:

• Account & organization data: name, work email, company name, role, billing contacts, plan, and authentication credentials.
• Device & client data: device type, OS version, app version, install identifiers, and basic diagnostics needed to keep the client running.
• Work activity data: app and browsing activity classes, idle / meeting / break status, time logs, tasks, projects, and client associations.
• Screenshots: periodic screen captures configured by the Client, which may be blurred for privacy and IP protection. HawkLens does not record keystrokes, microphone audio, webcam video, or other invasive inputs.
• Field / location data (when enabled): location and site-visit signals for field teams, only as configured by the Client.
• Support & site data: messages you send to support or our AI assistant, and limited website usage data needed to operate and secure the site.

3. How we use information

We use information to:

• Provide live tracking, Focus Timeline, reports, attendance, billing exports, and related product features.
• Classify activity as productive or distraction using ML trained on each Client’s own productive-task patterns over time.
• Secure accounts, prevent abuse, troubleshoot issues, and improve reliability.
• Communicate about service changes, security notices, and (where permitted) product updates.
• Comply with law and enforce our terms.

4. How we share information

We do not sell personal information. We share data only as needed to operate HawkLens:

• With the Client organization that owns the workspace (admins, managers, and permitted roles).
• With infrastructure providers that process data on our behalf — including Amazon Web Services (AWS) for hosting and object storage — under contractual confidentiality and security obligations.
• With professional advisors or authorities when required by law, or to protect rights, safety, and security.
• In connection with a merger, acquisition, or asset transfer, with notice where required.

5. Cloud storage & Amazon S3

Where HawkLens uses cloud storage, object storage such as Amazon S3 may hold encrypted screenshots, exports, and related artifacts. AWS security follows a shared responsibility model: AWS secures the cloud infrastructure; HawkBytes and/or the Client configure security in the cloud (access control, encryption choices, monitoring, and retention).

In line with AWS S3 practices we rely on:

• Encryption in transit (HTTPS/TLS) and encryption at rest for stored objects.
• Least-privilege access using IAM roles, bucket policies, and blocked public access by default.
• Lifecycle rules so objects can automatically expire or transition after retention windows.
• Optional stronger retention controls (for example Object Lock / legal hold) for Clients with regulatory WORM or immutability needs.
• Enterprise and on-prem options so a Client can keep company data in its own location or private network when contracted.

AWS does not use customer content to provide services to other customers or for its own purposes without agreement. HawkBytes configures S3 and related services for HawkLens workloads; Clients remain responsible for lawful workplace monitoring notices and internal access policies.

6. Data retention policies for Clients

Retention is designed to balance operational value, employee privacy, storage efficiency, and Client policy. Default product retention (aligned with FocusRO-style workplace monitoring practice) is:

• Screenshots with 0% blur (full clarity): retained for 30 days, then automatically deleted.
• Screenshots with blur enabled (typically 20%–100%): retained for up to 90 days, then automatically deleted.
• Activity, idle, meeting, break, and time logs: retained for the active subscription term plus up to 90 days after cancellation unless a longer Client retention schedule is agreed in writing.
• Reports & exports generated by admins: retained until deleted by the Client or until the workspace retention window ends.
• Account, billing, and security logs: retained as needed for contracts, fraud prevention, and legal obligations (typically up to 7 years for financial records where required).
• Support tickets & chat transcripts: retained up to 24 months unless a shorter deletion is requested and feasible.

Clients may request custom retention, earlier deletion, or export before deletion, subject to technical limits and legal holds. On-prem / private deployments may apply Client-controlled retention and lifecycle policies on their own storage. Unblurred screenshots intentionally use a shorter window to reduce privacy and IP exposure.

7. Security measures

We apply technical and organizational measures appropriate to the risk, including:

• Encryption of data in transit over HTTPS and encryption at rest (including ECC-oriented crypto practices for sensitive payloads where used in the product).
• Screenshot blur options to protect intellectual property and reduce exposure of private content on screen.
• Role-based access for admins, managers, and employees.
• No keystroke logging and no microphone recording as part of standard HawkLens monitoring.
• Hardening of cloud buckets and monitoring of access paths used by the service.

No method of transmission or storage is 100% secure. Clients should use strong passwords, limit admin access, enable blur where appropriate, and follow their own security policies.

8. Workplace monitoring & Client responsibilities

HawkLens is a business productivity tool. Clients are responsible for providing any legally required notices to employees and contractors, obtaining consents where required, configuring blur and capture intervals appropriately, and using HawkLens in a non-intrusive, lawful manner.

We encourage Clients to prefer blurred screenshots, limit retention to business need, and avoid collecting sensitive personal data that is not required for productivity or time tracking.

9. Your rights & choices

Depending on your location and role, you may have rights to access, correct, delete, export, or restrict processing of personal data, or to object to certain processing. Employees should usually contact their employer (the Client) first for workplace HawkLens data. Account holders and site visitors can contact us at the email below.

You may also unsubscribe from non-essential marketing emails using the link in those messages.

10. Children

HawkLens is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children for the product.

11. International transfers

We may process data in regions where HawkBytes, AWS, or subprocessors operate. Where required, we use appropriate transfer safeguards (such as standard contractual clauses or equivalent mechanisms) and configure regional storage options when offered under a Client agreement.

12. Updates to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be communicated through the product or by email where appropriate. Continued use of HawkLens after an update means the updated policy applies to that use.

13. Contact

Questions about this Privacy Policy or HawkLens privacy practices: info@hawkbytes.cloud.

Company website: https://hawkbytes.cloud/