Time Champ Workprobe ("the extension") is a workforce-analytics tool. It is deployed by an organisation on devices that the organisation manages, so that the organisation can understand how work time is spent across the web applications its team uses. Employees sign in with their company account. It is not a consumer product and is not intended for personal use.
To attribute and categorise work activity for the organisation's Time Champ account, the extension collects:
The extension does not collect health, financial or location data, and does not read the contents of password fields.
The data is transmitted over an encrypted connection (HTTPS) to the organisation's own Time Champ workforce-analytics account, where the organisation's administrators can see it. It is used only to provide that workforce-analytics service to the organisation that deployed the extension. It is not sold, and it is not shared with advertising networks, data brokers or any unrelated third party.
All data is transmitted over HTTPS using TLS. The extension does not transmit any data over an unencrypted connection.
No single signal shows what work a person actually did. A page address on its own, a page title, or an active-time figure does not identify the task or the output it belongs to. Two people on the same site can be doing different work, and one piece of work can run across several sites. To reconstruct a unit of work, the extension correlates several signals together: which application and page was used (web history), what was on the page (website content), and whether the person was actively working and in what order their steps happened (user activity). Matched against each other, these identify the task and the output it produced. Remove any one and the reconstruction fails, which is why each is read. The breadth is the minimum set whose combination identifies a work output, not collection for its own sake. The extension never collects passwords or the contents of password fields, and everything is used only for the organisation's own analytics.
Signing in uses the organisation's identity provider (for example Microsoft, Google, or an email and password account on the organisation's Time Champ system). On a successful sign-in the extension stores a session token on the device so the employee does not have to sign in repeatedly. The token identifies the session; it is not a password and no password is stored by the extension.
Activity data is retained in the organisation's Time Champ account according to that organisation's own settings and policies. On the device, the extension stores only the current sign-in session and a short local queue of activity waiting to be sent.
Because the extension is deployed by an organisation on managed devices, that organisation is the data controller for the activity it collects, and is responsible for giving its staff the notice and obtaining the consent that the applicable law requires. The use of information handled by the extension adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.
Questions about this policy can be sent to privacy@timechamp.io.