Last Updated: 30 December 2025

Softhealer Technologies Pvt. Ltd. (“Softhealer”, “we”, or “us”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and safeguard personal information in our product Monitor360 (available at monitor360.io), an employee productivity monitoring solution that captures screenshots of users’ work computers at defined times and frequencies. This Policy applies to all users of Monitor360 (including enterprise and small team customers and their employees) and is designed to comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). By using Monitor360, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We only collect data necessary to provide and support the Monitor360 service. This includes:

• Employee Work Screenshots: Images (screenshots) of employees’ computer screens captured at scheduled intervals during work hours. These screenshots may incidentally contain personal or sensitive information if displayed on screen. We do not engage in more intrusive monitoring such as keystroke logging, webcam surveillance, or audio recording
• Account and Contact Information: Information about our customer (the company using Monitor360) and its authorized contact person. This typically includes the company name, the contact person’s name, business email address, phone number, and physical address. We collect this information when you register for Monitor360 or communicate with us for support or billing.
• Communication and Support Data: If you contact us or submit a support request, we may collect the information you provide in that correspondence (such as your email and the content of your inquiry). This is used to respond to you and resolve any issues.

We do not intentionally collect any sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, genetic or biometric data, health information, or information about minors through Monitor360. Monitor360 is intended for use by organizations with adult employees and is not directed to children.

2. How We Use Information

We use the collected information strictly for the following purposes:

• Providing the Monitor360 Service: Screenshots and related data are used to enable your organization to monitor and analyze employee productivity as intended. We process and store these screenshots so that authorized managers or administrators in your company can view them via our platform. We also use your account information to authenticate you and manage your user account.
• Service Administration and Communications: We use your contact information (email, phone, address) to send you service-related communications. This includes notifications about subscription status, renewal reminders, policy updates, and customer support responses. For example, we will notify you approximately 7 days before your subscription expires with instructions on renewal or data retrieval options.
• Improvement and Development: We may analyze usage of our service in aggregate (without identifying individuals) to improve Monitor360’s features, performance, and user experience. This could include reviewing how often screenshots are captured or accessed to optimize our software, while not examining the content of screenshots beyond what is necessary for service functionality.
• Legal Compliance and Enforcement: We may use or disclose information as needed to enforce our Terms of Service, to ensure the security of our platform, or to comply with applicable laws and regulations. For instance, we may review logs or specific data to investigate a violation of our terms or a security issue, or to meet a lawful government request (as detailed in the Information Sharing and Disclosure section below).

We do not use personal data for any marketing or advertising purposes unrelated to Monitor360’s service. In particular, we do not sell analytics profiles or usage data to third parties, and we do not use collected data to profile employees beyond the productivity metrics provided to their employer.

3. Information Sharing and Disclosure

No Third-Party Data Selling or Monetization: Softhealer does not sell, rent, or trade your personal information to any third parties. All data collected by Monitor360 (including screenshots and contact details) is processed and stored by Softhealer on our secure systems. We also do not use third-party analytics or cloud processing services that would receive your data. In other words, your data stays within Softhealer’s control and is used only for the purposes described in this Policy.

Service Providers: As of now, we handle data processing in-house and do not rely on external processors for Monitor360 user data. If in the future we engage trusted service providers (for example, a secure cloud storage or payment processor), it will be solely for supporting the operations of Monitor360 on our behalf, and they will be bound by confidentiality and data protection obligations. (For instance, if subscription payments are handled via a third-party payment gateway, the gateway would receive billing information but not your Monitor360 captured content.)

Legal and Safety Disclosures: We may disclose personal information to third parties if we determine in good faith that such disclosure is necessary to:

(a) comply with any applicable law, regulation, legal process, or enforceable governmental request; (b) enforce our agreements or policies, including investigating potential violations; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect the rights, property, or safety of Softhealer, our customers, employees, or others. For example, if we receive a valid subpoena or court order requiring access to data, or if needed to report misuse of the service that threatens safety, we may be obligated to comply.

Business Transfers: If Softhealer Technologies ever undergoes a business transaction such as a merger, acquisition by another company, or sale of all or a portion of its assets, personal data held in Monitor360 may be among the assets transferred to the acquirer. In such an event, we will ensure the continued protection of your personal information by the successor entity under terms consistent with this Policy, and we will notify you (for example, via email or a prominent notice on our website) of any change in data ownership or new privacy policy, if applicable.

Aside from the limited circumstances above, only you and your authorized users (e.g. the administrators or managers of the subscribing company) have regular access to the collected screenshots and associated data through the Monitor360 platform. Softhealer personnel will access customer data only on a need-to-know basis – for example, when required for troubleshooting a support issue or performing system maintenance – and always under strict confidentiality.

Importantly, we may share aggregated and anonymized information (information that cannot be linked back to you or any individual) about overall usage patterns or productivity trends, e.g., average screenshot frequency usage across clients, for industry analysis or marketing. However, such aggregated data will contain no personal details or identifiable screenshots.

4. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by your subscription or by law. Our data retention policy is as follows:

• Active Subscription: For an active Monitor360 subscription, we will retain all collected data (screenshots, activity logs, and associated personal information) for the duration of the subscription. This allows you to review historical data as needed. Some service plans may impose limits on how long screenshots remain accessible (for example, certain plans might show only the last X months of data), but in general your data is preserved throughout your paid subscription period.
• Pre-Expiration Notice: Seven (7) days before your subscription is set to expire, we will send a notice to the registered email address of the account owner (and/or other provided contact channels). This notice will remind you of the upcoming expiration and provide instructions on how to renew your subscription or how to retrieve your data if you choose not to renew. This gives you an opportunity to take action to avoid any unintended data loss.
• Data Deletion upon Subscription Expiration: If your subscription expires and is not renewed or extended, we will permanently delete all collected user activity data from our systems after 14 days of expiration. This includes all screenshots and any other usage data associated with your account. The deletion process will commence promptly once the subscription has lapsed, and we ensure that the data is irrecoverable. Exception: We will retain basic contact information about the customer (specifically, company name, contact person’s name, email address, phone number, and address) even after subscription expiration. We keep this limited information for our administrative records, to facilitate any later reactivation, billing reconciliations, or to follow up on the service experience. No screenshots or activity logs are retained beyond the subscription period in the absence of renewal.
• Post-Deletion Confirmation: Upon deleting the user activity data, we can (upon request) confirm to you that such data has been erased. If you decide to renew your subscription after data deletion has occurred, we will treat the account as a new account (without historical data available).

Please note that if required by law or regulation, we might retain certain data for a longer period despite the above policy. For example, if a law requires us to preserve records of transactions or if there is an ongoing legal investigation, we may retain relevant information as necessary (but we will isolate it from routine access and only use it for the compliant purpose). Additionally, we retain email correspondence or support tickets for a reasonable period as needed for our internal record-keeping and to improve our services, unless you request their deletion.

5. Data Security

We take the security of your information seriously and implement appropriate technical and organizational measures to protect it. These measures are designed to safeguard data against unauthorized access, alteration, disclosure, or destruction. Key security practices include:

• Encryption: All data transmitted between your devices and our servers is encrypted using industry-standard protocols (e.g. HTTPS/TLS). We also encrypt sensitive data at rest in our databases and storage systems to prevent unauthorized reading of data if storage media were compromised.
• Access Controls: Personal data (including screenshots) is accessible only to authorized personnel who require access to perform their job duties (such as technical support or system administration). Our staff are bound by strict confidentiality agreements. Each customer’s data is logically separated to ensure that no other customer can access it. Within your organization, you control which of your users (managers/administrators) can view the screenshots and data associated with your Monitor360 account.
• Secure Infrastructure: We host Monitor360 on secure servers with robust firewall protection and monitoring. We maintain up-to-date security software and conduct regular vulnerability assessments on our systems. Data centers or hosting providers used (if any) are compliant with international security standards and undergo independent security audits. We also employ backup and recovery procedures to protect against data loss.
• Employee Training and Policies: Softhealer maintains internal policies and training for employees regarding data protection and security best practices. Only a limited subset of trained employees can access the systems storing personal data, and any access is logged and monitored.

Despite our rigorous efforts, please understand that no method of data transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security of data. For example, the Internet by its nature has inherent security risks, and there is always some chance of a breach, intrusion, or other unauthorized access. We continuously update our security protocols to mitigate such risks. In the unlikely event of a data breach affecting your personal information, we will notify you and the appropriate authorities as required by law.

It is also important for you to play a role in keeping your data safe. We encourage you to use strong, unique passwords for your Monitor360 account and to keep those credentials confidential. If you become aware of any unauthorized use of your account or any security incident related to Monitor360, please contact us immediately so we can assist.

6. User Rights

We respect your rights to your personal data and strive to help you exercise them. Privacy laws in different jurisdictions (such as GDPR and CCPA) provide individuals with various rights regarding their personal information. Monitor360 will comply with all applicable rights requests in accordance with the law. The availability of certain rights may depend on where you are located and the nature of our relationship (for example, whether we are acting as a service provider to your employer). Below, we outline key privacy rights and how you can exercise them.

Rights Under GDPR (for EU/EEA Individuals)

If you are located in the European Union, European Economic Area, or other jurisdictions with similar laws, you have certain rights under the GDPR regarding your personal data. These include, among others:

• Right of Access: You have the right to request a copy of the personal data we hold about you, as well as information on how we process it (commonly known as a data subject access request).
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to Erasure: You can request that we delete your personal data, for example if it is no longer necessary for the purposes it was collected (also known as “the right to be forgotten”). Please note this right is subject to certain exceptions; for instance, we may retain data that we are required to keep by law or that is necessary to establish or defend legal claims.
• Right to Restrict Processing: You have the right to ask us to limit the processing of your personal data under certain circumstances – for example, while we address a complaint about data accuracy or our lawful basis for processing.
• Right to Object: You have the right to object to our processing of your personal data in certain situations, such as processing based on our legitimate interests. You also have an unconditional right to object to your personal data being used for direct marketing (though note that Monitor360 does not use your data for third-party marketing).
• Right to Data Portability: You have the right to receive your personal data that you provided to us in a structured, commonly used, machine-readable format, and to have that data transmitted to another controller where technically feasible. In essence, you can ask for a copy of your data in a format that can be forwarded to someone else.
• Right to Lodge a Complaint: If you believe we have infringed your privacy rights or violated data protection laws, you have the right to lodge a complaint with a Supervisory Authority in your EU country. We would, however, appreciate the chance to address your concerns directly before you do so - please see Contact Information below to get in touch with us with any issues.

To exercise any of these GDPR rights, you (or an authorized agent acting on your behalf) can contact us using the information in the Contact section. We will respond to valid requests within the timeframe required by law (typically one month under GDPR) and will inform you if we need additional information to verify your identity or otherwise process your request. Please note that some rights may be limited where we are legally permitted to retain or continue processing your data (for example, we may refuse a deletion request if we need to keep certain data to comply with a legal obligation). We will explain any such decisions in our response to your request.

Rights Under CCPA (for California Residents)

If you are a resident of California, you are entitled to certain rights with respect to your personal information under the California Consumer Privacy Act (as amended by the California Privacy Rights Act). These rights include:

• Right to Know: The right to know about the personal information we collect about you and how we use and share it. This means you can request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share the information.
• Right to Delete: The right to request deletion of personal information that we have collected from you, subject to certain exceptions. Once we receive and confirm a verifiable deletion request, we will delete (and direct our service providers, if any, to delete) your personal information from our records, unless an exception applies (for example, if the information is needed to complete a transaction, detect fraud, exercise free speech, or comply with a legal obligation)
• Right to Opt-Out of Sale/Sharing: The right to opt out of the sale or sharing of your personal information to third parties. However, note that we do not sell or share your personal information for monetary or other valuable consideration in the first place, as stated in this Policy. If in the future we were to engage in any practice deemed a “sale” or “sharing” under CCPA (for example, sharing data for targeted advertising), we would provide a mechanism for you to opt out (such as a “Do Not Sell or Share My Personal Information” link on our website) and honor Global Privacy Control (GPC) signals from your browser.
• Right to Correct: The right to request correction of inaccurate personal information that we hold about you. If you notice or suspect that any of your information is incorrect or outdated, you can request that we rectify it, and we will do so to the extent required by law.
• Right to Limit Use of Sensitive Information: The right to limit the use and disclosure of certain sensitive personal information. Note: Monitor360 does not intentionally collect sensitive personal information as defined by California law (such as Social Security numbers, financial account credentials, precise geolocation, racial or ethnic origin, etc.), except potentially as part of screenshots if such information is displayed on a screen. In the event Monitor360 ever does handle any sensitive personal information, California residents can direct us to limit its use to what is necessary to perform the services (for example, if an employee’s sensitive data appeared in a screenshot, we would not use or disclose it for any purpose other than providing the screenshot to the authorized employer user).
• Right to Non-Discrimination: The right to not receive discriminatory treatment for exercising any CCPA rights. This means we will not deny you service, charge you a different price, or provide a different level or quality of service just because you exercised your privacy rights under CCPA. Monitor360 does not penalize customers or users who exercise their rights. (However, please note that if you ask us to delete data that is necessary to provide the service, we may not be able to continue providing that service to you – for instance, deletion of all your account data would naturally mean we cannot continue your Monitor360 service. In such cases, we will inform you of the implications of a deletion request and you can decide whether to proceed.)

Exercising CCPA Rights: If you are a California resident and wish to exercise any of the above rights, you (or your authorized agent) may submit a request to us through the contact methods listed in the next section. For requests to know, delete, or correct, we will need to verify your identity to a reasonable degree of certainty, which may involve asking you to provide additional information or confirm details we already have on file. We will respond to your request within the timeframe required by CCPA (generally within 45 days, with the possibility of a 45-day extension in certain cases). If we need more time or cannot fulfill part of your request, we will explain the reason in our response.

California residents also have the right, under the “Shine the Light” law (California Civil Code § 1798.83), to request information about any personal information disclosed to third parties for the third parties’ direct marketing purposes. However, as stated, Softhealer does not disclose personal information to third parties for direct marketing.

If you have an account with us, you can also access, update, or correct your basic personal information at any time by logging into your account settings. For any rights requests or questions about your privacy, you can always contact us directly.

7. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us. We are here to help and will respond promptly.

• By Email: You can reach our privacy team at info@monitor360.io This is our designated email for privacy inquiries, data access/deletion requests, or any related concerns.
• By Mail: You may also write to us at the following address:
  Softhealer Technologies Pvt. Ltd.
  530, West Gate 2, Ayodhya Chowk
  150 Feet Ring Road
  Rajkot, Gujarat 360006
  India
  
• By Phone: +91-9328825451 (Sales) or +91-9023246069 (HR). While these phone numbers are primarily for sales and general inquiries, we will route any privacy-related calls to the appropriate personnel.

When contacting us about your personal data, please include your name, contact information, and as much detail as possible about your request. If you are an employee whose employer uses Monitor360 and you have questions about data collected via Monitor360, we recommend you also contact your employer (the data controller) directly, as they may need to be involved in fulfilling certain requests.

8. Changes to this Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. Softhealer Technologies Pvt. Ltd. reserves the right to modify this Policy at any time. When we do make changes, we will update the “Last Updated” date at the top of this Privacy Policy and post the revised policy on our website. We encourage you to review this page periodically for any changes, so you remain informed about how we protect your personal information If we make any material changes to the Policy (for example, if we change how we use personal data in a way that impacts your rights), we will provide a prominent notice or notify you via email or through the Monitor360 service.

Your continued use of Monitor360 after any changes to this Privacy Policy will constitute your acceptance of the updated terms. If you do not agree with any updates to the Policy, you should discontinue use of the service and may request that we delete your data as per your rights described above.

If you have any further questions about this Privacy Policy or how Monitor360 handles your data, please do not hesitate to contact us. Your trust is extremely important to us, and we want to ensure that you feel secure and informed when using Monitor360. Thank you for choosing Softhealer Technologies and Monitor360.