Legal
Our terms, policies, security and data-protection documents, grouped by who they apply to. Every document shows its version and effective date. Every change is listed below with its effective date; where practicable, material changes are posted before they take effect.
For organisations
The agreements and disclosures that govern deploying ScreenJournal in your workplace.
- Terms of Usev2.1 · 4 November 2026
- Business Terms of Service (updated)Publishing with the acceptance step
- Data Processing AgreementPublishing with the acceptance step
- Acceptable Use PolicyPublishing with the acceptance step
- Call-Recording AddendumPublishing with the acceptance step
- Integration (API and MCP) TermsPublishing with the acceptance step
- Securityv3.0 · 5 October 2026
- Subprocessorsv3.0 · 5 October 2026
- Data Retention & Deletion Protocolv2.0 · 5 October 2026
- Refund & Cancellation Policyv1.1 · 30 September 2026
- Vulnerability Disclosure Policyv1.0 · 5 October 2026
- Automated Processing Statementv1.0 · 5 October 2026
Regional compliance
How we and our customers meet the requirements of our launch markets.
- India — Digital Personal Data Protection Act 2023v2.0 · 5 October 2026
- Philippines — Data Privacy Act and RA 4200v2.0 · 5 October 2026
For monitored employees
If your employer monitors your work device with ScreenJournal, these explain what happens to your data and how to exercise your rights.
- Your Rights as a Monitored Employeev1.0 · 5 October 2026
- Workplace Monitoring NoticePublishing with the acceptance step
- Data Protection Contactsv3.0 · 5 October 2026
- Notice for People Recorded on Calls and Webinarsv1.0 · 5 October 2026
Everyone
Covering visitors to this site and everyone who uses the service.
- Privacy Policyv3.0 · 5 October 2026
- Cookie Policyv2.0 · 5 October 2026
- Website Terms of Usev1.0 · 5 October 2026
Which document applies to me?
- Organisation admin or buyer: the Terms of Use, the Security page, the Subprocessor list and the Retention and Deletion Protocol; the Data Processing Agreement and Acceptable Use Policy publish with the acceptance step.
- Monitored employee: the Privacy Policy and the employee pages above; your employer is your first contact for rights requests.
- Website visitor: the Privacy Policy, Cookie Policy and Website Terms of Use.
Changes
- 5 October 2026Cookie Policy and Privacy Policy: Microsoft Clarity session replays in the web app are recorded with Strict masking (text and images masked in the browser before upload).
- 5 October 2026Terms of Use v2.1 (interim): vendor sentence replaced by the Subprocessors page; Record + Save disclosed; audio scope corrected; beta features, pay figures and connected AI tools addressed; change-notice clause aligned with the Legal page change list (the 30-day advance-notice promise is replaced); takes effect 4 November 2026.
- 5 October 2026Three new pages: Automated Processing Statement; Notice for people recorded on calls and webinars; Your rights as a monitored employee.
- 5 October 2026India and Philippines pages v2.0: current stack, DPDP Rules commencement dates, NPC Advisory 2024-04, registration limbs corrected.
- 5 October 2026Cookie Policy v2.0: consent cookie and sign-in cookies added; desktop app storage; Global Privacy Control; settings location.
- 5 October 2026Website Terms of Use v1.0: first publication; support-chat assistant disclaimer; demo data; governing law.
- 5 October 2026Privacy Policy v3.0: full rewrite — data categories, automated processing and human review, current vendors and hosting in Germany, retention stated as operated, staff access, EEA/UK and US-state sections.
- 5 October 2026Vulnerability Disclosure Policy v1.0: first publication; scope, safe harbour, how to report.
- 5 October 2026Data Protection Contacts v3.0: role-based contacts routed to support@ until the officer mailboxes exist; Isle of Man Information Commissioner and EEA/UK routes; acknowledgement rules.
- 5 October 2026Retention & Deletion Protocol v2.0: schedule rebuilt per data category; evidence clips and self-declared entries added; no automated expiry stated plainly.
- 5 October 2026Security v3.0: rewritten for the current hosting; "what is not yet built" published.
- 5 October 2026Subprocessors v3.0: list rebuilt for the current hosting (Hetzner, Cloudflare, AWS S3, Google Cloud, Vercel) and operational vendors; DeepInfra marked fallback-only.
- 30 September 2026Refund & Cancellation Policy v1.1: non-refundable posture aligned to Paddle's refund policy; the 30-day guarantee removed.
- 23 August 2026Recorded retrospectively: Google Cloud Storage became the store for all new screen video and audio, and all AI processing moved to Google Vertex AI (Gemini models).
- 10 July 2026Recorded retrospectively: employee redaction requests were added; where an organisation enables them, a member can have a time range of their own monitoring data removed.
- 18 June 2026Recorded retrospectively: the integration for connected AI tools (MCP) was added, letting an organisation authorise an AI tool of its choice to read its ScreenJournal data.
- 18 May 2026Recorded retrospectively: the Record + Save capture mode was added, letting an organisation choose to keep screen video and audio instead of deleting them after analysis.
- 13 March 2026Recorded retrospectively: the live service moved to one Hetzner server in Falkenstein, Germany; the server's deployment records date the move to 12 to 13 March 2026.
Where to send notices
| Privacy requests and data-subject rights | support@screenjournal.ai |
| Security vulnerabilities | support@screenjournal.ai |
| Legal notices | Cyberinfra Limited, 50 Athol Street, Douglas, Isle of Man IM1 1JB |