Privacy & Data
Where is my DoTally data stored, and is it secure?
What stays on your computer, what goes to DoTally's servers, which providers process it, and how it's protected.
Your DoTally activity stays on your own computer until you log it. Only what you log is sent to DoTally’s servers, and your name and email are stored encrypted there.
Before you log: on your computer
The DoTally desktop app saves your activity on your computer. It records which app is in front, its window title, and when you were active or away. Web addresses, email addresses, access tokens and your username are replaced with placeholders in window titles. DoTally never captures keystrokes, screenshots or screen recordings.
Nothing leaves your computer until you log it. Activity you never log is deleted from your computer after 90 days.
After you log: on DoTally’s servers
Hosting. Logged activity is stored in the EU, in Frankfurt, Germany, where the DoTally web app and service also run.
Window titles are cleaned again on the server before they’re stored.
Your name and email are encrypted, and passwords are stored only as a secure hash.
Which other companies process it
Our AI provider receives app names and window titles to classify your activity and to power AI Breakdown and AI Chat.
Classification examples DoTally learns from are shared across customers. A correction you make can influence how the same app or window title is classified for others.
Our payment provider handles payments. DoTally never stores your card details.
A bot check runs on the log-in, sign-up and forgot-password pages to tell people from bots. It receives your IP address and browser signals, never your account data.
How long it’s kept
Your workspace’s Administrator chooses how long detailed history is kept, under Keep detailed history for: 1, 3, 6, 12, 24 or 36 months, with 24 months as the default. After that, window titles and manual-time notes are removed, but your hours and scores stay.
Your workspace’s Administrator can delete your account from Team → Members. Deleting an account is final: it’s deleted straight away, with no window to undo it.
For the full list of providers and the legal detail, see the Privacy Policy.
Available on: every plan and role.
Related
Still stuck? Email awesome@dotally.app.
