ClareSight Privacy Policy

Effective Date: 12 August 2026

This Privacy Policy explains how Deadon, the operator of ClareSight ("Deadon", "ClareSight", "we", "us" or "our"), collects, uses, stores, shares and protects personal information through ClareSight.

ClareSight includes our website, web application, desktop applications, workforce-tracking functionality and related services (collectively, the "Service").

For privacy questions or requests:

Deadon — ClareSight Pakistan Email: zaidjamshaid@gmail.com

1. Scope

This Privacy Policy applies to personal information processed through ClareSight.

ClareSight is a business and workforce-management platform used by Organizations to manage employees, contractors and other authorized Users.

Because Organizations determine how many workforce-monitoring features are used, privacy responsibilities may be divided between ClareSight and the Organization using the Service.

2. ClareSight and Organization Responsibilities

Workforce Information

When an Organization uses ClareSight to monitor or manage its workforce, the Organization generally determines:

• who is monitored;
• why monitoring is performed;
• which monitoring features are enabled;
• who may access the information;
• how the information is used;
• applicable retention settings; and
• other workforce policies.

Where applicable privacy law uses the terms controller and processor, the Organization will ordinarily act as the controller of workforce information and Deadon will ordinarily process that information on the Organization's behalf.

The exact legal roles depend on applicable law and the specific processing activity.

Information ClareSight Controls

Deadon may independently determine how certain information is processed for purposes including:

• account administration;
• Service security;
• fraud prevention;
• billing;
• legal compliance;
• support;
• website operations; and
• ClareSight's own business records.

3. Information We Collect

The information collected depends on the ClareSight features enabled and how the Service is used.

4. Account Information

We may collect:

• name;
• email address;
• account identifiers;
• authentication information;
• Organization membership;
• roles and permissions;
• timezone;
• preferences;
• account status; and
• Terms and Privacy Policy acceptance records.

5. Organization and Work Information

We may process information including:

• Organization details;
• teams;
• projects;
• tasks;
• assignments;
• schedules;
• attendance;
• leave information;
• timesheets;
• approvals;
• comments and notes; and
• related workforce records.

6. Time Tracking

When a User actively starts tracking, ClareSight may collect:

• tracking start time;
• tracking stop time;
• tracked duration;
• Organization;
• project or task;
• manual or automatic time records;
• session identifiers; and
• related tracking metadata.

Standard workforce monitoring stops when the User's active tracking session stops.

7. Screenshots

Where enabled by the Organization, ClareSight may capture screenshots periodically while tracking is active.

Screenshots may include all active displays connected to the User's device.

Organizations may disable screenshot capture where supported.

Organizations may enable available screenshot-blurring controls.

Organizations may also determine whether workers are allowed to delete their own screenshots where supported.

Screenshots may incidentally capture information displayed on the screen that is unrelated to work.

This may include personal, confidential or sensitive information.

Organizations are responsible for determining whether screenshot monitoring is appropriate, lawful and proportionate.

Users should stop tracking or avoid unnecessarily displaying private information where appropriate.

8. Keyboard and Mouse Activity

ClareSight may measure keyboard and mouse activity to calculate activity levels.

ClareSight is designed to record activity measurements rather than the content of what a User types.

Standard ClareSight workforce monitoring is not intended to record actual keystrokes or typed text.

9. Application Activity

Where enabled, ClareSight may collect information about applications used during tracked work.

This may include:

• application names;
• periods of application use;
• active/inactive usage information; and
• related application-activity metadata.

ClareSight does not intentionally inspect or upload arbitrary files stored on the User's computer as part of standard activity monitoring.

10. Website Activity

Where website monitoring is enabled, ClareSight may collect:

• website domains; and
• URL paths

associated with tracked browsing activity.

ClareSight does not intentionally collect website content merely because a User visits a website.

Screenshots may nevertheless display website content visible at the moment a screenshot is captured.

11. Information Not Intentionally Collected Through Standard Workforce Tracking

Standard ClareSight workforce monitoring is not designed to intentionally collect:

• microphone audio;
• webcam video or photographs;
• clipboard contents;
• actual typed text;
• arbitrary local files;
• arbitrary documents stored on the device;
• GPS location; or
• workforce activity after active tracking has been stopped.

Under ClareSight's standard workflow, an administrator cannot silently remotely start an employee's tracking session.

If ClareSight introduces functionality that materially changes these practices, relevant privacy disclosures will be updated.

12. Device and Technical Information

We may process technical information reasonably necessary to operate, secure and support ClareSight, including:

• operating system;
• ClareSight application version;
• device or installation identifiers;
• IP address;
• network information;
• authentication/session information;
• synchronization information;
• error information;
• diagnostics; and
• security events.

Some technical information may be processed even when workforce tracking is not active if necessary for authentication, synchronization, security, updates or operation of the Service.

13. Billing Information

For paying Organizations, we may process:

• billing contact information;
• subscription plan;
• seat information;
• billing-period information;
• invoices;
• payment status;
• transaction identifiers; and
• limited payment information supplied by our payment processor.

Payment-card information may be processed directly by an authorized payment provider rather than stored directly by ClareSight.

14. Communications and Support

If you contact us, we may process:

• your name;
• email address;
• support request;
• correspondence;
• information you intentionally provide; and
• files or attachments you choose to send.

15. Audit and Security Records

ClareSight may maintain records for accountability, administration and security.

These may include:

• authentication events;
• account changes;
• permission changes;
• administrative actions;
• policy updates;
• approvals;
• security events; and
• other audit information.

16. Cookies and Analytics

ClareSight may use technologies necessary for:

• authentication;
• security;
• preferences;
• Service operation; and
• session management.

We may also use basic website or product analytics to understand how ClareSight is used.

Where applicable law requires consent before non-essential analytics technologies operate, we may provide appropriate consent controls.

We do not use workforce-monitoring information to target individual workers with third-party advertising.

17. How We Use Personal Information

We may use personal information to:

• provide and operate ClareSight;
• authenticate Users;
• provide workforce-tracking functionality;
• capture configured screenshots;
• calculate activity levels;
• provide application and website activity information;
• administer projects and tasks;
• manage attendance and leave;
• provide reports and dashboards;
• synchronize desktop and web applications;
• administer subscriptions;
• process billing;
• provide support;
• send operational and security communications;
• send legally permitted marketing communications;
• maintain audit records;
• prevent fraud and abuse;
• protect Users and Customers;
• troubleshoot and improve ClareSight;
• enforce our agreements;
• comply with legal obligations; and
• establish or defend legal rights.

18. Legal Bases Where Applicable

Privacy laws differ between jurisdictions.

Where applicable law requires a legal basis for processing, processing may rely on:

• performance of a contract;
• legitimate interests;
• compliance with legal obligations;
• consent where appropriate;
• protection of legal rights; or
• another legal basis permitted by applicable law.

For workforce-monitoring information processed on behalf of an Organization, the Organization is responsible for determining the appropriate legal basis for its monitoring activities.

19. Who Can Access Workforce Information

Access to workforce information depends on Organization roles, permissions and data scope.

Authorized persons may include:

• Organization owners;
• administrators;
• managers;
• authorized project or team managers;
• the User whose own information is being viewed; and
• other specifically authorized Organization Users.

Organizations are responsible for configuring appropriate access.

20. Worker Access

Workers may access their own information where the applicable ClareSight functionality permits it.

Organizations may determine whether workers can delete their own screenshots.

Managers or other authorized Users may have screenshot-management permissions according to Organization roles and settings.

21. External Client Users

Organizations may provide limited access to external clients where supported.

Client access is permission-based.

Standard client access is not intended to provide unrestricted access to employee:

• screenshots;
• application activity; or
• website activity.

Clients may instead receive specifically granted project, time or reporting information.

22. How We Share Information

We may share personal information as described below.

With Your Organization

If you use ClareSight through an Organization, relevant information may be available to that Organization and Users it authorizes.

Service Providers and Subprocessors

We may use third-party providers for functions including:

• hosting;
• cloud infrastructure;
• object storage;
• databases;
• email delivery;
• payment processing;
• analytics;
• application distribution;
• security;
• diagnostics; and
• technical operations.

These providers may process information as reasonably necessary to perform services for ClareSight.

Relevant providers may be maintained through a separate Subprocessor List.

Legal and Safety Requirements

We may disclose information where reasonably necessary to:

• comply with law;
• respond to valid legal process;
• investigate fraud or abuse;
• protect ClareSight;
• protect Customers or Users;
• enforce agreements; or
• establish, exercise or defend legal claims.

Business Transactions

If ClareSight or the relevant Deadon business is involved in a merger, financing, acquisition, restructuring or sale, information may be transferred as part of that transaction subject to applicable legal and confidentiality requirements.

23. We Do Not Sell Workforce Information

Deadon does not sell identifiable workforce-monitoring information for advertising or data-broker purposes.

We do not use identifiable workforce-monitoring information to create third-party advertising profiles.

24. Aggregated and De-identified Information

We may aggregate or de-identify information so that it no longer reasonably identifies an individual or Customer.

We may use such information for:

• service improvement;
• analytics;
• research;
• performance measurement;
• security;
• capacity planning;
• benchmarking; and
• development of new features.

25. Artificial Intelligence

As of the Effective Date, ClareSight does not use AI to autonomously make employment decisions such as:

• hiring;
• termination;
• promotion;
• compensation; or
• disciplinary decisions.

ClareSight may introduce AI-assisted analysis or productivity insights in the future.

If future AI functionality materially changes how personal information is processed, we will update applicable privacy disclosures as required.

Identifiable workforce information will not be used by default to train generalized ClareSight AI models.

AI-generated or analytical indicators should be treated as informational signals and may contain inaccuracies.

Employment decisions remain the responsibility of the Organization.

26. International Processing

ClareSight is intended for Organizations worldwide.

Personal information may therefore be processed or stored outside the country in which a User or Organization is located.

Where applicable law restricts international transfers, appropriate legally recognized safeguards will be used where required.

ClareSight does not promise that all information will remain within a User's home country unless expressly agreed in writing.

27. Data Retention

Retention periods may depend on:

• the type of information;
• the Organization's subscription plan;
• Organization settings;
• operational requirements;
• contractual obligations;
• security requirements; and
• applicable law.

Organizations may be permitted to select retention periods shorter than their plan maximum.

Information such as screenshots and activity records may be automatically deleted according to the Organization's applicable retention settings.

28. Termination and Deletion

Following termination of an Organization's subscription, available Customer Data may generally remain accessible for export for up to 30 days, subject to:

• existing retention settings;
• legal requirements;
• security requirements; and
• technical limitations.

After the applicable period, Customer Data may be deleted from active systems.

Residual copies may temporarily remain in backups until those backups are overwritten or deleted through normal backup lifecycle processes.

Certain information may be retained longer where reasonably necessary for:

• billing;
• accounting;
• fraud prevention;
• security;
• audit requirements;
• dispute resolution;
• legal claims; or
• legal obligations.

29. Privacy Rights

Depending on your jurisdiction and applicable law, you may have rights including the right to:

• request information about processing;
• access personal information;
• correct inaccurate information;
• request deletion;
• restrict certain processing;
• object to certain processing;
• request portability;
• withdraw consent where applicable; and
• complain to an appropriate privacy or data-protection authority.

These rights vary by jurisdiction and may be subject to legal exceptions.

30. Requests About Employer-Controlled Workforce Information

Where ClareSight processes workforce information on behalf of your employer or another Organization, that Organization may be responsible for responding to your privacy request.

You should normally submit requests concerning employer-controlled monitoring information to the relevant Organization.

Where appropriate, ClareSight may assist the Organization in responding.

31. Requests About ClareSight-Controlled Information

You may contact Deadon directly regarding information for which Deadon independently determines the purposes of processing, including certain:

• account information;
• communications;
• billing records;
• security information; and
• direct interactions with ClareSight.

Contact:

zaidjamshaid@gmail.com

We may need to verify your identity before processing a request.

32. Security

We use reasonable technical and organizational safeguards designed to protect personal information against:

• unauthorized access;
• loss;
• misuse;
• alteration;
• unauthorized disclosure; and
• destruction.

Measures may include:

• authentication;
• access controls;
• role-based permissions;
• secure communications;
• infrastructure safeguards;
• logging;
• monitoring;
• backup and recovery measures; and
• security procedures.

No system can guarantee absolute security.

Organizations are also responsible for protecting their accounts, endpoints, credentials and User permissions.

33. Personal Devices

ClareSight may be used on employer-owned and personally owned devices where permitted by the relevant Organization.

Where ClareSight is used on a personal device, the Organization remains responsible for ensuring that monitoring is appropriate and lawful.

Users should stop tracking before unrelated private activity where appropriate.

34. Sensitive Information

Screenshots may incidentally capture sensitive or private information visible on a User's screen.

Organizations should:

• collect no more information than reasonably necessary;
• consider whether screenshot capture is appropriate;
• use available privacy controls;
• limit access;
• select appropriate retention settings; and
• clearly inform affected workers about monitoring.

Organizations must not intentionally configure ClareSight to collect unnecessary sensitive information where doing so would be unlawful or disproportionate.

35. Children and Minors

ClareSight is a business and workforce-management service and is not designed as a children's consumer service.

Because legal working ages and employment arrangements differ worldwide, ClareSight does not impose one universal age threshold through this Privacy Policy.

Organizations are responsible for ensuring that any use involving a minor complies with applicable employment, privacy and parental or guardian requirements.

36. Changes to This Privacy Policy

We may update this Privacy Policy because of:

• changes to ClareSight;
• new functionality;
• legal requirements;
• security requirements; or
• operational changes.

The updated Privacy Policy will display a revised effective date.

For material changes affecting how personal information is processed, we may:

• notify Users;
• notify Organizations;
• require renewed acceptance; or
• take other steps required by law.

Minor or administrative changes may not require renewed acceptance.

37. Data Processing Addendum

Where applicable privacy law requires contractual processing terms between an Organization and ClareSight, a ClareSight Data Processing Addendum may form part of the agreement.

Separately negotiated enterprise privacy terms may also apply.

38. Contact

For privacy questions, complaints or requests:

Deadon — ClareSight Pakistan Email: zaidjamshaid@gmail.com