pcActivity Privacy Policy

Last updated: 26 October 2026

1. Who is responsible

• CoderTo, LLC (131 Continental Dr, Suite 305, Newark, DE 19713, USA) is the controller of the data about our customers: dashboard accounts, billing, support emails and this website.
• For the data the pcActivity agent collects about employees, the employer (our customer) is the controller, and CoderTo, LLC is its processor. We use that data only to provide pcActivity to that employer, as it instructs. A data processing agreement (DPA) is available from [email protected].
• Employees who want to see, correct or delete their data should ask their employer. We help the employer answer.

2. What the Windows agent collects

• The Windows user name and computer name, and the version of the agent.
• The app in front, its window title (for example a document or browser tab title), and the time spent in each.
• Active time and idle time, and when work sessions start and end.
• Time requests employees send from the tray app, such as for a meeting or an outside task.
• PC details: maker and model, Windows version, processor, memory, graphics, storage and its health, network adapters (with their IP and MAC addresses), battery health, and security status (antivirus, firewall, BitLocker, Secure Boot, TPM).

3. What it does not collect

• No screenshots or screen recordings.
• No keystrokes.
• No website addresses (URLs). It records only the title of the browser window.
• No camera or microphone.
• No scanning of files. A file's content is seen only if an admin opens it during a support session, or if an AI Support step the admin approved reads it.

4. Remote support and AI (only when the company turns them on)

• Remote desktop: an authorized admin can see and control the PC's screen live. The stream is encrypted and is not recorded. Clipboard text moves only when the admin uses Copy or Paste.
• AI Support (Business plan and the free trial): the admin's request, the commands the AI runs on the PC, and their output are sent to Google's Gemini service to plan the next step. Steps that change things wait for the admin's approval.
• Session log: each support session is logged with the admin, the employee, the reason given, its status, its duration and the AI conversation. The company's admins can see this log.
• AI working time (Business plan, off by default): app names and window titles are sent to TypeSafe and Google Gemini. They judge whether the activity fits the employee's job title.
• Employee notification bar: the company can turn on a bar that tells the employee a session is running, with a Stop button.

5. Dashboard users, billing and this website

• Account data: name, email, a password stored only as a secure hash, role, sign-in sessions, and an authenticator code if one is set up.
• Billing: Stripe handles cards and payments. We keep only the Stripe customer and subscription IDs, your plan and number of PCs, and your invoice history. We never see full card numbers.
• Emails: we send account emails, such as welcome, password reset and security notices. Our payment processor sends billing emails from CoderTo, LLC.
• This website: no analytics, no advertising and no tracking cookies.

6. Service providers (sub-processors)

When data leaves the EU or your country, we rely on safeguards such as the European Commission's standard contractual clauses.

7. How long we keep data

• Activity history (apps, window titles, times, scores and session logs): 3 months on Pro and 12 months on Business. Older history is deleted automatically.
• Account and company settings: as long as the subscription is active.
• After cancellation: all company data is deleted within 90 days, and older backups are overwritten as they rotate.
• Invoices: kept as long as tax law requires.

8. Security

• All connections are encrypted (HTTPS and TLS).
• Each company's data is separated at the database level.
• Passwords are hashed.
• Remote access needs a role that allows it and can require an authenticator code.
• Every remote and AI session is logged.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or move your data, or to object to its use. Dashboard users and customers can email [email protected]. Employees should contact their employer first, since the employer controls their data. You may also complain to your local data protection authority.

10. Changes and contact

We update this policy when what we do changes. The date at the top shows the latest version. Questions: [email protected] or CoderTo, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA.