Privacy

Privacy policy

This page describes, in plain language, what AslTime collects, what it deliberately never collects, and who can see what.

01 · What we collect

What we collect

  • Account information: name, email, and organization membership.
  • Tracked time intervals, labeled with project and task.
  • Optional screenshots — only while the timer is running, and only at the interval your organization configures.
  • Organization and project metadata (names, roles, settings).
  • Billing information, handled by Stripe — AslTime does not store card numbers.

02 · What we never collect

What AslTime will never collect

  • Keystroke logging — never built
  • Mouse tracking — never built
  • Webcam or mic capture — never built
  • Clipboard capture — never built
  • Full URL & window-title recording — never built
  • Stealth mode — never built
  • Off-timer screenshots — never built

These aren't settings you toggle. They were never built.

03 · Where data lives

Where your data lives

AslTime runs entirely on Cloudflare's network — Workers, D1, and R2 — with no separate external database. Data is encrypted in transit.

04 · Retention

Retention

Each organization configures a screenshot and activity retention period; expired data is automatically deleted. Audit log depth depends on the organization's billing plan.

05 · Who can see what

Who can see what

Access is role-based within each organization. Every screenshot view is itself written to an audit log. The person being tracked can see everything recorded about them — the same data their managers see.

06 · Subprocessors

Subprocessors

AslTime uses Cloudflare (hosting, storage, network) and Stripe (billing) to operate the service. Neither is used for advertising or analytics on your tracked data.

07 · Cookies

Cookies

This marketing site (asltime.com) sets no cookies. The app subdomain (app.asltime.com) uses session authentication only — no advertising or third-party tracking cookies.

08 · Your rights

Your rights

You can request access to, export of, or deletion of your data by emailing privacy@asltime.com.

09 · Controller & processor

Controller and processor

The customer organization is the controller for the time and activity data of the people it tracks. AslTime processes that data on the organization's behalf, under its instructions.

10 · Changes & contact

Changes and contact

We'll update this page as the product changes and note the date below. Questions: privacy@asltime.com.

Last updated: 2026-07-18