Privacy Policy for Stellites Opscenter

Last updated: November 6, 2025

Stellites Global Technologies LLP (“Stellites,” “we,” “us,” or “our”) provides Stellites Opscenter (the “App”), a time-tracking application used by Stellites employees. The App can capture screenshots and limited app usage data while time tracking is active. This Policy explains what we collect, why we collect it, how we use it, and the choices available to users.

Stellites makes the App available only to our employees. Employees are provisioned accounts by Stellites; self-service sign-ups are not available.

1) What data we collect

a) Screenshots (only when time tracking is active)

• Image of the screen captured every 10 seconds during active tracking; the capture interval may be set by a manager to 30 seconds.
• Timestamp of each capture.

b) Usage data

• Application names active during tracked time.

c) What we do not collect

• We do not collect user account identifiers, tenant IDs, device IDs, hardware fingerprints, OS/hardware inventories, or license status for analytics purposes.
• We do not collect precise or coarse location data.

d) Cookies/local storage

• We use cookies or similar local storage only for essential functions such as session management and authentication.

2) How we collect data

• On-device capture starts only when the employee starts time tracking in the App and stops when tracking stops.
• Capture cadence (10 seconds, adjustable to 30 seconds) is enforced by Stellites administrators.

3) Why we collect data (purposes)

• Provide core time-tracking features required for internal operations.
• Security, fraud prevention, and maintaining service integrity.
• Internal support and troubleshooting.
• Compliance and audit needs of Stellites as an employer.

We do not use collected data to build advertising profiles.

4) Our role (controller/processor)

For our employees, Stellites acts as the data controller for processing performed through the App.

5) Your choices & in-app controls

• Employees can start/stop time tracking, which starts/stops screenshot capture and app-name logging.
• The App provides clear indication when tracking is active.
• Requests to access or delete data can be submitted to the contacts listed in Section 11. Some requests may be limited by Stellites’ legal or audit obligations as an employer.

6) Data minimization & sensitive content

Screenshots may incidentally include sensitive information displayed on the screen. Employees should avoid displaying content they are not authorized to process while tracking is active. Stellites limits collection to what is necessary for time-tracking and audit purposes.

7) How we process and store data

• Cloud provider: Microsoft Azure (Azure File Storage).
• Data at rest: Encrypted by Azure.
• In transit: Protected by TLS.
• Storage location: Hosted in Azure; region is determined by our Azure tenancy and operational needs.

8) Retention

• Screenshots: retained for 60 days.
• App usage (application names): retained for 60 days.
• Diagnostics/crash logs: not retained (not collected beyond what is necessary for immediate troubleshooting).
• Support records: retained as needed for ongoing support; no fixed end date is set.
• Backups: Managed by Azure File Storage according to provider defaults. When data is deleted, it will be removed from active systems and will be purged from backups per Azure’s standard lifecycle.

9) Sharing & disclosure

We do not sell or share personal data for advertising. We share data only with:

• Service providers: Microsoft Azure (hosting and storage) operating under appropriate data-processing terms.
• Legal/safety: When required by law or necessary to protect rights, safety, or security.
• Internal access: Authorized Stellites administrators may access data for the purposes described above.

10) International transfers

Data is hosted in Azure. If any cross-border transfer is required for operational reasons, Stellites will implement appropriate safeguards consistent with applicable law.

11) Your rights & how to contact us

Employees may request access or deletion, subject to Stellites’ obligations as an employer.

• Privacy contact email: suresh@stellites.com
• Support email: suresh@stellites.com
• Contact page: https://stellites.com/contact
• Company website: https://stellites.com

Regulators: Employees may also contact their local data protection authority where applicable.

12) Children

The App is intended solely for Stellites employees and is not directed to children. We enforce a minimum participation age of 16.

13) Security

We implement administrative and technical safeguards, including access controls and encryption in transit and at rest. No method of transmission or storage is 100% secure; we continuously improve our controls.

14) Third-party services

• Microsoft Azure: hosting and storage.
  We do not currently use separate crash/analytics SDKs or external email delivery vendors for the App.

15) Do Not Track / Global Privacy Control

We do not run non-essential analytics or advertising. If browsers send Do Not Track or Global Privacy Control signals, there is no impact because we do not use the App for cross-site tracking.

16) Changes to this Policy

We may update this Policy to reflect technical, legal, or operational changes. Material changes will be communicated through in-app notice or email and will include a new effective date.

17) Availability & scope

Stellites Opscenter is provided for enterprise (Stellites internal) use only. A Data Processing Addendum is available on request.