Privacy Policy

1. Introduction

This Privacy Policy explains how [Status Quo 247 — legal entity name and jurisdiction to be filled] ("Status Quo 247", "we", "us") collects and uses personal data when you visit our marketing website at statusquo247.com (also served from statusquo247.in), and how personal data is handled inside our workforce productivity and monitoring product, Status Quo 247.

We publish Status Quo 247 for employers. Because that changes who is legally responsible for the data, this policy is split into two parts:

• Part A — Marketing site. We are the data controller for people who visit statusquo247.com, fill in a form, or otherwise interact with our site.
• Part B — Status Quo 247 product. For data captured through the Status Quo 247 application about a customer's employees, the employer is the data controller and Status Quo 247 acts as the data processor.

2. Who we are

Status Quo 247 is a workplace productivity, activity monitoring, and payroll platform, marketed as "Status Quo 247 by Status Quo 247". Our registered office is at [Company address — to be filled].

For any privacy question, you can reach us at privacy@statusquo247.com. Our Data Protection Officer can be reached at dpo@statusquo247.com.

Part A — Marketing site (statusquo247.com)

3. What we collect from site visitors

We keep this deliberately small. The categories are:

• Contact form submissions. When you fill in a form on the site (for demos, sales, support or a general enquiry) we collect your name, work email address, company name, team size, and any message you write.
• Analytics. If you consent to analytics cookies, we use Google Analytics 4 to see aggregate traffic patterns (pages viewed, referring source, approximate location from IP, device type). We do not use GA4 for advertising and do not enable Google Signals.
• IP address for rate limiting and abuse prevention. Our edge and API layers log the IP address of requests to statusquo247.com for a short period, so we can block abusive traffic and troubleshoot outages.
• Cookies. See our Cookie Policy for the full list.

4. Why we use marketing-site data (legal bases under GDPR)

• Contract / pre-contract steps (Art. 6(1)(b)). To answer your enquiry, arrange a demo, or start a trial.
• Consent (Art. 6(1)(a)). For non-essential cookies and analytics. You can withdraw consent at any time from the "Cookie settings" link in the site footer.
• Legitimate interests (Art. 6(1)(f)). To keep the site secure, prevent abuse, and understand what content is useful. We balance this against your privacy — for example, we do not build profiles of visitors.
• Legal obligation (Art. 6(1)(c)). To meet tax, accounting or lawful-request obligations.

5. How long we keep marketing-site data

• Contact form submissions: up to 24 months from your last interaction with us, then deleted or anonymised.
• Site request logs (IP for rate limiting): 30 days.
• Analytics data in GA4: 14 months (Google's shortest supported retention window).

6. Who receives marketing-site data

We share personal data only with the processors we need to run the site, under written contracts:

• Hosting and CDN provider — [cloud provider — to be filled]
• Email delivery for form replies — [email provider — to be filled]
• Analytics — Google (GA4), only if you consented
• Customer relationship management — [CRM provider — to be filled]

We do not sell personal data.

Part B — Status Quo 247 product data

7. Roles: employer is controller, we are processor

When your employer deploys Status Quo 247, the employer decides what to monitor, how often, and for how long. In GDPR terms, the employer is the data controller and Status Quo 247 is the data processor. In CCPA terms, we act as a service provider. The details of that processor relationship are set out in our Data Processing Agreement.

If you are an employee of an Status Quo 247 customer and you want a copy of your data, to correct it, or to have it deleted, please contact your employer first — they control it. If they direct us to act, we will.

8. What Status Quo 247 can capture

Depending on how your employer configures the product, Status Quo 247 may collect:

• Desktop activity signals — active window title, keystroke counts (not keystroke content), and mouse activity levels
• Hardware configuration snapshot when the desktop app first runs and whenever hardware changes (CPU model, RAM total, OS version, disk sizes, MAC addresses, BIOS/EFI serial). Used by admins to add the device to the company asset register in one click; not tied to your input or screen contents.
• Periodic screenshots on a configurable interval
• Application usage time
• Website URLs visited during working hours
• GPS location from the mobile app, when the app is running
• Attendance events — clock-in and clock-out timestamps
• Payroll data provided by the employer — salary, deductions, and statutory identifiers (for Indian customers, this can include PAN and Aadhaar)

Status Quo 247 does not record the contents of keystrokes, does not read documents or emails, and does not exfiltrate files. Consent screens on first launch tell the employee exactly what is enabled for them.

9. Retention of product data

Retention is set by the employer in Status Quo 247 admin. Default retention windows (screenshots 90 days, recordings 30 days) can be shortened or extended within limits described in the DPA. On termination of the customer's account, product data is deleted or returned per the DPA.

Part C — Rights, transfers and other common terms

10. Your rights

Depending on where you live, you have some or all of the following rights over your personal data:

• GDPR (EEA, UK): access, rectification, erasure, restriction of processing, portability, objection, and the right not to be subject to solely automated decisions with legal effect.
• CCPA / CPRA (California): know, delete, correct, opt out of "sale" or "sharing" (we do neither), limit use of sensitive personal information, and non-discrimination for exercising rights.
• India DPDP Act, 2023: access, correction, erasure, grievance redressal, and nomination of another person to exercise rights in the event of death or incapacity.

To exercise a right relating to the marketing site, email privacy@statusquo247.com. To exercise a right relating to product data, contact your employer first (see section 7).

Under the DPDP Act, our Data Protection Officer also serves as our grievance officer: dpo@statusquo247.com.

11. International transfers

We operate globally. Where personal data is transferred out of the EEA, UK or Switzerland to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (Module 2 or Module 3, as appropriate) and, where required, supplementary technical measures such as encryption in transit and role-based access controls.

12. Security

We use TLS between clients and our servers, role-based access with least-privilege defaults, and audit logging on access to sensitive assets (screenshots, recordings, payroll fields). For the current, non-aspirational description of our security posture, see our Security overview; controls we commit to contractually are listed in Annex II of the DPA.

13. Children

Status Quo 247 is a workplace product intended for adults in an employment relationship. The marketing site is not directed to children. We do not knowingly collect data from anyone under 16.

14. Changes to this policy

When we make material changes to this policy we will update the "Last updated" date at the top and, where the change is significant, notify customers by email or in-product notice. Continued use of the site or product after a change means you accept the updated policy.

15. Contacting us

Email privacy@statusquo247.com for privacy queries, dpo@statusquo247.com for DPO / grievance-officer matters, or write to us at [Company address — to be filled].

If you are in the EEA or UK and you are not satisfied with our response, you have the right to complain to your local data protection authority.