Privacy
What AirStaff records — and what it never records
Monitoring software fails when staff feel spied on. AirStaff is built so the honest answer to “what can my boss see?” is one your team can live with.
The short answer
While a staff member is clocked in, and only after they have accepted a monitoring notice, AirStaff records: ten-minute time slots, keyboard and mouse event counts, an activity percentage, periodic screenshots (detailed but low-resolution by default, or blurred at the moment of capture if the employer chooses), and the active application name and browser domain. It never records keystroke contents, webcam, microphone, files, message contents, or anything at all while the person is clocked out. Screenshots are deleted automatically after 60 days by default.
- Counts only
- Keyboard and mouse events are counted. What was typed is never captured or stored
- Low-res or blurred
- Screenshots are detailed but low-resolution by default — shrunk and compressed, never full size. An employer can blur them at capture instead, so the readable frame never touches disk — and staff always see which mode is on
- Domains, not URLs
- Full URLs are only recorded if the employer turns URL tracking on, and staff can see that setting
- Clocked out = nothing
- No tracking of any kind outside a clocked-in session
Recorded and never recorded
| Recorded while clocked in | Never recorded, ever |
|---|---|
| Ten-minute time slots and tracked hours | Keystroke contents — what was typed |
| Keyboard and mouse event counts, activity percentage | Webcam or microphone |
| Periodic screenshots — blurred, or detailed but low-res, never full resolution | Files, documents or their contents |
| Active application name | Message or email contents |
| Browser domain (full URL only if the employer enables it) | Screen video or continuous recording |
| Agent version and device check-ins | Anything at all while clocked out |
Consent is a gate, not a checkbox
Tracking is blocked at the server until the staff member accepts a monitoring notice. The gate is enforced on every single ingest request — an agent that has not been told the person consented cannot record, and cannot be configured to. Notice periods are applied by jurisdiction: in New South Wales, Australia, for example, workplace surveillance requires 14 days’ written notice, and AirStaff will not begin tracking until that period has elapsed.
- No consent accepted, no tracking. There is no employer setting that bypasses it.
- Sending an updated notice pauses tracking until the staff member re-accepts.
- Staff see which notice version they accepted, and when.
Workplace surveillance law varies by country and by state. AirStaff enforces notice and consent, but the employer remains responsible for making sure its use of monitoring is lawful for each staff member’s location — see the terms of service.
How long anything is kept
- Screenshots
- Employer-set cap between 7 and 180 days; 60 days is included and is the default. Deleted automatically each night. Anything beyond 60 days is a paid add-on.
- Raw ten-minute slots
- Rolled up into daily summaries after 90 days, then the raw slots are deleted.
- Whole organisation
- Delete the account and everything is purged within 30 days.
- Sent email bodies are scrubbed after delivery.
- Credentials and tokens
- Passwords are hashed with scrypt. Session, invite, consent and device tokens are stored only as SHA-256 digests.
What a staff member can do
Everyone tracked by AirStaff has a “My data” view showing their own hours, their own screenshots, their consent status, and a plain-English list of what is captured. From there they can download everything AirStaff holds about them and request corrections or deletion.
Australian users have rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles; users in the EU and UK have the equivalent GDPR and UK GDPR rights where those laws apply. Because the employer decides why monitoring happens, requests about the purpose of monitoring go to the employer; AirStaff provides the tooling and answers questions about how data is stored. The full detail is in the privacy policy.
Where the data lives
AirStaff runs on Amazon Web Services in the Sydney region: screenshots in S3, records in RDS Postgres, email through SES. Payments go through Stripe and AirStaff never stores card numbers. Marketplace fulfilment receives only code-redemption status. Data is encrypted in transit, tenancy isolation is enforced on every query, and privileged actions are audit logged.
Questions people actually ask
Can my employer see what I type with AirStaff installed?
No. AirStaff counts keyboard and mouse events to produce an activity percentage, but it never captures or stores what was typed. There is no keylogger and no employer setting that turns one on.
Are the screenshots AirStaff takes readable by my manager?
By default they are readable but low-resolution — shrunk to 1024px and compressed, never full size. An employer can choose blurred captures instead — blurred at the moment of capture, so the readable frame is never written to disk at all — or turn screenshots off entirely, and staff can see which mode is in use in their own "My data" view and in the monitoring notice they accept.
Does AirStaff track me outside of working hours?
No. Nothing is recorded unless you are clocked in. Clock out and the agent stops recording time, activity, screenshots and app usage. Idle time inside a session is detected and not counted, and a long idle clocks you out automatically.
Can my employer turn on monitoring without telling me?
No. Tracking is blocked at the server until you have accepted a monitoring notice, and jurisdiction notice periods — 14 days in New South Wales, for example — must elapse first. If the employer issues an updated notice, tracking pauses again until you re-accept.
How long does AirStaff keep screenshots of my screen?
Screenshots are capped at 60 days by default and deleted automatically every night. An employer can set a shorter cap, down to 7 days. Keeping them longer than 60 days, up to a maximum of 180, is a paid add-on rather than the default.
Can I see the same data about me that my employer sees?
Yes. The "My data" view shows your tracked hours, your screenshots, your activity and your consent status — the same records your employer sees — and lets you download everything AirStaff holds about you in one click.
Does AirStaff record my webcam, microphone or personal files?
No. The agent has no access to webcam, microphone, files or message contents, and it does not record screen video. What it collects is limited to time slots, activity counts, blurred screenshots, application names and browser domains.
Is employee monitoring legal where my company operates?
It depends on the jurisdiction, and it is the employer’s responsibility. AirStaff enforces consent and jurisdiction-based notice periods — such as the 14 days required in New South Wales, Australia — but employers must confirm their use of monitoring is lawful for each staff member’s location, including any additional consultation or consent requirements.
Monitoring your team will actually agree to.
One payment, no renewals, and a 60-day money-back guarantee on every direct purchase.