Privacy

Privacy statement

• Last updated: 25 September 2026
• Applies to: achievai.app and dashboard.achievai.app

1. Who we are, and our two roles

achievAI is operated by Sieva Networks, Inc. (United States). “We” and “achievAI” mean that company. There are two different situations in this statement, and your rights differ between them.

When your employer uses achievAI

Everything the recorder measures about your work computer belongs to your employer. They decide whether to use achievAI, which optional measurements are switched on, how long daily totals are kept and who can see them. We process that information only to run the service for them, under our contract with them — we are a service provider, not the owner of the data. Requests about it go to your employer, and the dashboard's My data page sends them there for you.

When you deal with us directly

If you sign up, contact us or visit this website, we decide how that information is used. We are responsible for it, and you can contact us about it directly.

2. What the recorder collects

The recorder runs on a work computer and takes one small reading every five seconds. It is visible on the machine, and everyone measured signs in and sees their own figures. Before a person can install it, the dashboard shows them a notice built from their own employer's settings, and records that they have read it.

What	Exactly what is recorded
Screen activity	One number per screen for how much the picture changed. The comparison happens on the computer; no image is kept or sent.
Keyboard and mouse	Counts only: key presses, how many of them were letters and digits, how many words (a space after a character), and clicks. Never which keys, never what is typed.
Typing analysis (optional, per company)	How evenly keys were pressed, how many different keys were used, and whether Windows reports the input as produced by software rather than a person — used to spot automated or faked activity. Still counts only.
Apps	The name of the application in front, and which app is on each screen.
Websites (optional, per company)	In a browser on Windows, the site's name only — for example mail.zoho.com. Never the page, the full address or its contents.
Window titles (optional, off unless switched on)	The title bar text of the window in front. Off by default; a company must turn it on deliberately.
Calls	Whether a call application has audio running in and out (that is, a call is happening) and how loud each side is, as a number of milliseconds of speech. Never any audio and never any words.
Office or home (optional, per person)	Whether the computer connected from the employer's office network or elsewhere. Only the label “office” or “home” is stored — never the internet address itself.
Computer details	Whether the screen is locked, how long since the last input, computer name, time zone, recorder version, and a daily fingerprint of the recorder's own files so tampering can be spotted.

Where a measurement is marked optional, the server enforces the company's choice: if it is off, the recorder is told to stop collecting it and the server discards it on arrival.

3. What is never collected

• Screenshots, screen recordings or any image of the screen.
• What you type. Keys are counted, never logged; there is no keylogger.
• Audio from calls, or anything said on them.
• Page addresses, page contents, search terms, clipboard contents or files.
• Anything at all while the screen is locked, or while recording is paused.
• Camera images, microphone recordings, or location beyond the office/home label above.

These are properties of how the recorder is built, not settings an administrator can switch on later.

4. What we collect as a business

Data	Where it comes from	Why
Name, work email, company	Sign-up and account creation	To create and run the account
Password (stored only as a one-way hash), sign-in times, failed attempts	You	Security and account lockout
Support messages and any screenshots you attach	You	To answer you
Server logs: internet address, request, time	Your browser or recorder	Security and fault-finding
Website statistics: pages viewed, referrer, country	Your browser	To see whether the site works

5. Cookies and analytics

This marketing website sets no cookies. Its visitor statistics come from Cloudflare Web Analytics, which does not use cookies and does not follow you across sites.

The dashboard sets one cookie, to keep you signed in. It is essential to the service, is not used for advertising, and disappears when you sign out.

6. Why we use it

• To provide the service — measuring work-computer activity for the employer that asked for it, and showing each person their own figures.
• To keep accounts secure — sign-in, lockout after repeated failures, spotting a recorder that has been altered.
• To support customers — answering tickets and install problems.
• To run and improve the service itself — fault-finding from logs and aggregate site statistics.

We do not sell personal information, do not share it for cross-context behavioural advertising, and do not use it to train artificial-intelligence models. If you are in a place whose law requires a legal basis to be named (for example the UK or EU), we rely on the contract with our customer for service data, and on our legitimate interest in running and securing the service for the rest — and our customers may ask us for a data processing agreement.

7. Who we share it with

Only the suppliers needed to run the service, each under contract and only for that purpose:

Supplier	What they do	Where
Contabo Inc.	Hosts the dashboard server and database	St. Louis, Missouri, United States
Cloudflare, Inc.	Serves this marketing website and its cookieless statistics	United States, global network
Microsoft (Azure Artifact Signing)	Signs the Windows installer so it can be verified	United States

We also disclose information if the law requires it, and we would tell the affected customer unless we are forbidden to. If the business is ever sold or merged, information moves with it and this statement continues to apply until it is replaced.

Service data is stored in the United States. Customers outside the United States should treat that as an international transfer and ask us for the relevant contract terms.

8. How long we keep it

What	Kept for
Five-second activity detail	90 days, then deleted automatically
Daily totals and attendance	As the employer sets, from 1 month to 10 years. Four years unless they change it
Project and billable time	Kept as a billing record for as long as the employer needs it
Account details	While the account is active, and 12 months after it closes
Support messages and attachments	24 months
Server logs	30 days
Device enrolment codes	7 days

When a customer's contract ends we delete their data within 30 days, unless they ask for an export first.

9. Your rights

If you are measured by achievAI at work

Sign in and open My data. You can download everything held about you — your daily figures as a file, and the underlying five-second samples as a spreadsheet — and you can send your employer a request to access, correct or delete it. Your employer decides those requests, because the data is theirs; we help them carry them out.

You can always see your own figures. Your employer cannot use achievAI to watch you secretly: there is no hidden mode, and the recorder is visible on the machine.

If you are a customer, a visitor or a contact

You can ask us to tell you what we hold, give you a copy, correct it, or delete it, and to limit the use of sensitive information (we do not use any beyond running the service). Write to privacy@achievai.app. We confirm who you are through your signed-in account or your email address, and answer within 45 days. You may use an authorised agent with written permission. We will never treat you differently for asking.

Depending on where you live you may also have the right to object to certain processing, to ask for your data in a portable form, or to complain to your data protection authority.

10. Security

• Everything travels over encrypted connections (HTTPS).
• Each customer's data sits in its own separate database schema, not mixed in shared tables.
• Passwords are stored as one-way scrypt hashes; we never see them.
• The recorder's credential is stored using the operating system's own protection — Windows DPAPI or the macOS Keychain — never as plain text.
• The server accepts administrative access by key only, never by password.
• The Windows installer is code-signed, and each recorder checks its own files daily so tampering shows up on the dashboard.

No system is perfectly secure. If a breach affects your information we will tell the affected customers without undue delay, and in any event within 72 hours of establishing it.

11. Automated decisions

achievAI makes no automated decision about anyone. It produces figures; people decide. The dashboard states on the team page that its figures are not validated for pay, bonus, leave or employment decisions, and should be used alongside a manager's judgement rather than instead of it. What an employer chooses to do with the figures is their responsibility, and their own monitoring policy should say so.

12. Children

achievAI is a workplace product. It is not directed to children, and we do not knowingly collect information from anyone under 16. If we learn that we have, we delete it.

13. Changes and contact

If we change this statement we update the date at the top, and we tell customers in advance of anything material. Employees are asked to acknowledge a new notice whenever their employer changes what is collected.

Privacy questions, or to exercise a right: privacy@achievai.app. If your employer uses achievAI and your question is about your own figures, your employer's contact is shown on the notice inside the dashboard.