ScreenJournal

Legal

Our terms, policies, security and data-protection documents, grouped by who they apply to. Every document shows its version and effective date. Every change is listed below with its effective date; where practicable, material changes are posted before they take effect.

For organisations

The agreements and disclosures that govern deploying ScreenJournal in your workplace.

Regional compliance

How we and our customers meet the requirements of our launch markets.

For monitored employees

If your employer monitors your work device with ScreenJournal, these explain what happens to your data and how to exercise your rights.

Everyone

Covering visitors to this site and everyone who uses the service.

Which document applies to me?

  • Organisation admin or buyer: the Terms of Use, the Security page, the Subprocessor list and the Retention and Deletion Protocol; the Data Processing Agreement and Acceptable Use Policy publish with the acceptance step.
  • Monitored employee: the Privacy Policy and the employee pages above; your employer is your first contact for rights requests.
  • Website visitor: the Privacy Policy, Cookie Policy and Website Terms of Use.

Changes

  • 5 October 2026Business Terms of Service v3.0: accepted at organisation creation and on this version change; trial, seats, beta features, output and pay, monitoring-law duties, employees not parties, connected AI tools, staff access, availability and no backups, export and deletion; sole-user organisations are covered (the Personal Terms are retired). Takes effect on publication, as giving advance notice was not practicable; it replaces the interim v2.1, which never took effect and is archived, and the July v2.0.
  • 5 October 2026Data Processing Agreement v3.0: first publication of the rebuilt agreement; Annex 1 rebuilt from the record of processing; transfers restated for hosting in Germany with onward transfers; connected AI tools as Customer-directed recipients; breach notice within 72 hours of confirmation; return formats and exclusions. Accepted at organisation creation.
  • 5 October 2026Acceptable Use Policy v3.0: first publication of the rebuilt policy; covert monitoring defined by the notice the Customer owes; account sharing, alert-prompt content, connected tools, evidence and audio redistribution, working age and third-party recording added. Accepted at organisation creation.
  • 5 October 2026Workplace Monitoring Notice v1.0: first publication; its summary is shown at every desktop sign-in and the acknowledgment is recorded with the notice's version and the time.
  • 5 October 2026Call-Recording Addendum v3.0: first publication of the rebuilt addendum in obligations form; no announcement is played; definitions, listen capture of webinars, transcripts and speaker labels, download, retention, India and UK notes. Accepted when audio is turned on.
  • 5 October 2026Integration Terms v1.0: first publication; read-only connections, Customer-directed disclosure, revocation lag, rate limits, beta status.
  • 5 October 2026Privacy Policy v3.1: acceptance records (which version of a legal document was accepted or acknowledged, by whom and when) added to the data we collect and the retention table.
  • 5 October 2026Retention & Deletion Protocol v2.1: acceptance records added to the data excluded from deletion on termination.
  • 5 October 2026India page v2.1: the desktop sign-in acknowledgment is now recorded with the notice's version and the time.
  • 5 October 2026Philippines page v2.1: the desktop sign-in acknowledgment is now recorded with the notice's version and the time.
  • 5 October 2026Cookie Policy and Privacy Policy: Microsoft Clarity session replays in the web app are recorded with Strict masking (text and images masked in the browser before upload).
  • 5 October 2026Terms of Use v2.1 (interim): vendor sentence replaced by the Subprocessors page; Record + Save disclosed; audio scope corrected; beta features, pay figures and connected AI tools addressed; change-notice clause aligned with the Legal page change list (the 30-day advance-notice promise is replaced); takes effect 4 November 2026.
  • 5 October 2026Three new pages: Automated Processing Statement; Notice for people recorded on calls and webinars; Your rights as a monitored employee.
  • 5 October 2026India and Philippines pages v2.0: current stack, DPDP Rules commencement dates, NPC Advisory 2024-04, registration limbs corrected.
  • 5 October 2026Cookie Policy v2.0: consent cookie and sign-in cookies added; desktop app storage; Global Privacy Control; settings location.
  • 5 October 2026Website Terms of Use v1.0: first publication; support-chat assistant disclaimer; demo data; governing law.
  • 5 October 2026Privacy Policy v3.0: full rewrite — data categories, automated processing and human review, current vendors and hosting in Germany, retention stated as operated, staff access, EEA/UK and US-state sections.
  • 5 October 2026Vulnerability Disclosure Policy v1.0: first publication; scope, safe harbour, how to report.
  • 5 October 2026Data Protection Contacts v3.0: role-based contacts routed to support@ until the officer mailboxes exist; Isle of Man Information Commissioner and EEA/UK routes; acknowledgement rules.
  • 5 October 2026Retention & Deletion Protocol v2.0: schedule rebuilt per data category; evidence clips and self-declared entries added; no automated expiry stated plainly.
  • 5 October 2026Security v3.0: rewritten for the current hosting; "what is not yet built" published.
  • 5 October 2026Subprocessors v3.0: list rebuilt for the current hosting (Hetzner, Cloudflare, AWS S3, Google Cloud, Vercel) and operational vendors; DeepInfra marked fallback-only.
  • 30 September 2026Refund & Cancellation Policy v1.1: non-refundable posture aligned to Paddle's refund policy; the 30-day guarantee removed.
  • 23 August 2026Recorded retrospectively: Google Cloud Storage became the store for all new screen video and audio, and all AI processing moved to Google Vertex AI (Gemini models).
  • 10 July 2026Recorded retrospectively: employee redaction requests were added; where an organisation enables them, a member can have a time range of their own monitoring data removed.
  • 18 June 2026Recorded retrospectively: the integration for connected AI tools (MCP) was added, letting an organisation authorise an AI tool of its choice to read its ScreenJournal data.
  • 18 May 2026Recorded retrospectively: the Record + Save capture mode was added, letting an organisation choose to keep screen video and audio instead of deleting them after analysis.
  • 13 March 2026Recorded retrospectively: the live service moved to one Hetzner server in Falkenstein, Germany; the server's deployment records date the move to 12 to 13 March 2026.

Where to send notices

Privacy requests and data-subject rightssupport@screenjournal.ai
Security vulnerabilitiessupport@screenjournal.ai
Legal noticesCyberinfra Limited, 50 Athol Street, Douglas, Isle of Man IM1 1JB