This policy explains what personal data DoTally collects, why, who it’s shared with, how long it’s kept, and what you can do about it. It covers the DoTally website (dotally.app), the web app (my.dotally.app) and the DoTally desktop app for Mac and Windows.

The short version

DoTally records which apps and windows are in focus and for how long. It never takes screenshots, never records keystrokes and never stores website addresses (URLs).
Activity stays on your computer until you choose to log it. Nothing uploads in the background.
Managers don’t see which named apps or windows you used unless you turn on App Sharing yourself. It’s off by default, and you can turn it off again at any time; when you do, the workspace’s Administrator and Managers get an email.
Some data is processed by OpenAI to power DoTally’s AI features. OpenAI doesn’t use it to train its models.
We don’t sell your data. Your DoTally account and activity data are never used for advertising. On our website, if you accept analytics cookies, Google may use that browsing data, together with your Google account, for its advertising features.
You can ask for a copy of your data at any time by emailing awesome@dotally.app. Your workspace’s Administrator can delete your account, and deleting an account is final.

1. Who we are

DoTally is operated by Disrupt EOOD (Дисрапт ЕООД), a single-member limited liability company registered in Bulgaria.

Registered address: 86 Slavyanska Str., Blagoevgrad 2700, Bulgaria
Company ID (EIK): 205368450 · VAT number: BG205368450
Contact for anything in this policy: awesome@dotally.app

In this policy, “DoTally”, “we” and “us” mean Disrupt EOOD. “You” means anyone who visits our website or uses DoTally.

2. Our role, and your employer’s

Disrupt EOOD is the data controller for website visitors, accounts, billing, and each person’s own activity data and dashboards. That means we decide how and why this data is processed, and we’re responsible for it under the EU General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act. Your own data stays with your account: you decide what gets logged, whether named app detail is shared, and whether your account exists.

If you use DoTally as part of a workspace (a team set up by your company or a client), the organization that owns the workspace is the controller for its use of DoTally’s team features: team views, Team Health & Insights, Leaderboard, Timeboard, Custom Reports, AI Chat and the team digest. For those features, we process data on the organization’s behalf under our Data Processing Agreement. That agreement builds in App Sharing and your right to delete your account as standing rules, so the organization can’t override them through us.

The organization has its own legal duties, including telling you how and why it uses DoTally at work. If you have questions about your employer’s use, ask them as well as us.

3. What we collect

When you visit our website

Technical data: IP address, browser type, device and pages viewed, collected by our website host (Framer) to serve the site and keep it secure.
Analytics (only if you accept cookies): pages you view, how you got here, device and browser type, approximate location (country/city) and how you interact with the site, collected by Google Analytics. Google Analytics doesn’t store your IP address. If you’re signed in to Google and have allowed ad personalization in your Google account, Google may link this data to your account (Google Signals) to give us aggregated demographic and interest reports.

When you create and use an account

Account details: name, email address, password (stored hashed, never in plain text), and, if you sign in with Google, your Google profile name, email and picture.
Profile settings: job title, industry, profile picture, typical workday schedule, keyword rules, and the focus preferences DoTally learns when you calibrate your scores.
Workspace details: workspace name, logo, company name, website and country; the away threshold the Administrator sets; your role (Administrator, Manager or Member); invitations you send or receive; and your App Sharing setting.

Activity from the desktop app

While you’re recording, the desktop app notes:

the name of the app in focus,
the title of the window in focus (for a browser, the tab’s title),
start and end times, and when you’re away from your computer.

This stays on your computer until you press Log. When you log, DoTally sends the app name, the window title (shortened to 100 characters) and the times to our servers. Unlogged activity is deleted from your computer after 90 days.

The desktop app never captures screenshots, screen recordings, keystrokes, clipboard contents, file contents or website addresses (URLs).

About window titles: a window title can include the name of a document, a page, an email subject or a chat channel, for example “Q3 budget.xlsx” or “Inbox (12)”. You can review pending activity and leave out anything you don’t want logged.

Manual time: if you add time by hand in My Work, its start and end times and the description you type.

What DoTally creates from your activity

Your scores (Productivity, Focus, Overall), how your apps are classified (Productive, Neutral or Unproductive), trends, health signals such as Burnout Risk, and your away-time reasons.

Team features

AI Chat (everyone on the team): the questions people ask and DoTally’s answers.
Custom Reports (Administrators and Managers): the reports and PDFs they generate, which can include your name and metrics.

Billing

Stripe handles payments. We receive and store your name, email, workspace ID and Stripe’s reference IDs. Your card details go straight to Stripe and never reach us.

Emails and support

Emails you send us, and records of the emails we send you (see section 8).

4. What we use it for, and our legal basis

Under GDPR, every use of personal data needs a legal basis. These are ours:

What we do

Legal basis

Create and run your account, sync your logged activity, calculate scores and show your dashboards

Contract: it’s the service you signed up for

Give everyone on the team the AI Chat their plan includes, and workspace Administrators and Managers its team views and reports

Contract with the workspace, and the workspace’s legitimate interest in understanding how team time is spent, limited by App Sharing

Show named app and window detail to your Administrators and Managers

Your consent, given by turning on App Sharing. You can withdraw it at any time by turning it off (the workspace’s Administrator and Managers get an email when you do)

Classify apps and generate AI insights and AI Chat answers

Contract: these features are part of the service

Improve DoTally’s classification for all customers, using classification examples (see section 5)

Legitimate interest in making classification more accurate. You can object (see section 11)

Process payments and send invoices

Contract, and legal obligation under Bulgarian tax and accounting law

Send emails needed to run your account

Contract

Send other emails about DoTally, and record whether our emails are opened or clicked

Legitimate interest in keeping you informed and knowing our emails work. You can unsubscribe from these emails (section 8) and object (section 11)

Keep DoTally secure, prevent abuse and fix problems

Legitimate interest in running a safe, working service

Respond to legal requests and enforce our terms

Legal obligation and legitimate interest

Understand how people use our website, including aggregated demographics and interests, so we can improve it (Google Analytics with Google Signals)

Your consent, given through the cookie banner. You can withdraw it at any time in Cookie settings.

Where we rely on legitimate interest, we’ve weighed it against your rights. You can object at any time (see section 11).

5. DoTally Sense and AI

DoTally Sense is DoTally’s AI layer. It runs on our own classification system, built on technology from OpenAI. Here is exactly what goes to OpenAI:

App classification: your job title, industry, app name and window title. We remove URLs, email addresses, keys and access tokens from the title first. Document and page names can still be included.
AI Chat: the question, the first names of the people asked about, and the activity data DoTally looks up to answer, which can include app names and window titles. AI Chat follows App Sharing: it can’t use data the person asking isn’t allowed to see.
Insights and weekly digests: summary figures. Your own weekly digest summary also includes the names of your most-used apps. In the team digest, people are labelled “Member A”, “Member B” and so on, not by name.

Corrections make classification better for everyone. When an app is classified or reclassified, DoTally keeps a classification example, shared across all DoTally customers. It’s made from your role, industry, app name and window title, with URLs, emails and keys removed, and stored with the app name, the label, your role and a short site or tab name such as “youtube”, but not the window title itself. DoTally uses these examples to classify apps, so a correction you make can influence how the same app or window title is classified for people in other workspaces. Examples are stored without your name, email or workspace ID. They’re removed when your account is deleted. If you’d rather your examples weren’t used this way, email awesome@dotally.app.

How OpenAI handles it. OpenAI processes this data only on our behalf, under a data processing agreement we’ve signed with OpenAI Ireland Ltd. In short:

No training. OpenAI does not use data sent through its API to train or improve its models.
Kept for up to 30 days. OpenAI may keep requests and responses in its abuse-detection logs for up to 30 days, then deletes them, unless it has to keep them longer by law or to prevent harm. It doesn’t otherwise store our requests.
Human review only if flagged. If OpenAI’s systems flag content as breaking its usage policies, OpenAI, and providers it uses for content moderation, may review samples of it.
OpenAI’s own providers. OpenAI uses cloud and support providers of its own (sub-processors) to run its service. They’re listed at platform.openai.com/subprocessors.

No automated decisions about you. Scores, classifications and health signals describe patterns in time data. DoTally doesn’t make decisions about anyone’s employment, pay or performance, and these outputs aren’t meant to be the only basis for such decisions. If your organization uses them that way, you have the right to ask for human review of any such decision.

6. Who can see your data inside a workspace

Role

What they can see

You

Everything about your own activity

Administrators and Managers, App Sharing off (default)

Your whole logged day: the timeline (on Team Professional, with your productive and unproductive time), start and finish times, breaks and the reasons you gave, time totals (logged, active, away, and on Team Professional productive, neutral and unproductive), manual time entries with their times, length and description, health signals and attendance patterns, and on Team Professional your scores, but not which apps you used (no app names or icons) and not your window or tab titles

Administrators and Managers, App Sharing on

The above, plus named apps, window titles and tab titles with durations

Other Members

Limited team views: the Timeboard, and on Team Professional the Leaderboard with scores

Only you can turn App Sharing on or off. Administrators and Managers can send you a reminder, at most one every 24 hours, but they can’t change the setting for you. If you turn it off, they get an email, and the Activity Stream on their Team Overview shows since when it’s been off. DoTally keeps no other record of the change.

We use a small number of providers to run DoTally. They handle data only on our instructions and under a contract that protects it.

Provider

What for

Data involved

Where

Supabase

Main database and file storage (including PDF reports), and live page updates in the web and desktop app

All account, workspace and activity data. For live updates: your account ID and IP address; nothing is stored

Frankfurt, Germany (live updates run on Supabase’s global network)

Vercel

Hosts our API and the web app, and the desktop app downloads; measures web-app visits and page speed without cookies

Data passing through the API, server logs. For measurement: page address (with personal details removed), referrer, browser, operating system, device type and country, and page-speed data; no account ID

Frankfurt, Germany

Sentry (Functional Software, Inc.)

Error reports from the API and the web app

Technical details of the error and your IP address; names, email addresses, app names and window titles are removed first

EU (Germany)

OpenAI (OpenAI Ireland Ltd.)

AI classification, insights, weekly digest summaries and AI Chat (see section 5)

As described in section 5

Contract with OpenAI Ireland Ltd.; processed mainly in the United States, and by OpenAI’s sub-processors in other countries

Pinecone

Stores classification examples, shared across customers

App names, classification labels, and window titles in coded form (not the titles themselves)

United States

Stripe

Payments, invoices, billing portal

Name, email, workspace ID, payment details

EU and United States

Resend

Sends our emails

Name, email address, email content, whether an email was opened or a link clicked, and whether you unsubscribed

United States

Google

Google sign-in; fonts and app icons in the web app

Google profile and email (sign-in only); IP address and the web addresses of the app icons shown (fonts and icons)

United States

Cloudflare

Bot check (Cloudflare Turnstile) on the web app’s Log in, Sign up and Forgot password pages, including the sign-in page the desktop app opens

IP address and browser signals, used only to tell people from bots. No account data

United States

Google (Google Ireland Ltd.)

Website analytics (Google Analytics with Google Signals), only if you accept cookies

Pages viewed, referrer, device and browser, approximate location, on-site interactions, cookie ID; linked to your Google account if you’re signed in and have ad personalization on

EU and United States

Framer

Hosts our marketing website

Website technical data

Worldwide (content delivery network)

We may also disclose data where the law requires it (for example, a valid court order), or to a buyer if Disrupt EOOD or DoTally is sold or merged. In that case this policy keeps applying, or we tell you first.

We never sell personal data. Account and activity data from DoTally is never shared for advertising. The only advertising-related use is Google Analytics on our website, described above, and only with your consent.

You can control how Google uses your data for ads at adssettings.google.com, and see how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites. You can also opt out of Google Analytics with Google’s browser add-on at tools.google.com/dlpage/gaoptout.

8. Emails we send

We send emails needed to run your account, such as security and payment emails. You can’t unsubscribe from these.

We also send other emails about DoTally, such as help with your trial, the weekly digest, offers and product news. You can unsubscribe from these with one click.

Our email provider, Resend, records whether an email was opened (approximate, through a tracking image) and, on some marketing emails, which links were clicked.

9. International transfers

Our API, our web app and our main database are in the EU (Frankfurt, Germany). Some of our providers are US companies or process data outside the European Economic Area (EEA):

OpenAI: our contract is with OpenAI Ireland Ltd., in the EU. OpenAI processes the data mainly in the United States, through its US affiliates and its own sub-processors. Those transfers are covered by the European Commission’s Standard Contractual Clauses (2021), or by an adequacy decision where one applies, as set out in OpenAI’s data processing agreement.
Other providers (Vercel, Supabase, Sentry, Resend, Stripe, Google, Cloudflare, Pinecone) are US companies or process data in the United States, and Supabase’s live-update service runs on a global network. For those transfers we rely on the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the Standard Contractual Clauses.
Framer: our website host is Framer B.V., in the Netherlands (EU). It serves the site through a worldwide content delivery network, so website technical data (section 3) may also be processed outside the EEA, including in the United States. Framer covers those transfers with the EU–US Data Privacy Framework where the recipient is certified under it, and otherwise with the Standard Contractual Clauses, as set out in Framer’s data processing agreement.

Where needed, we add further safeguards. You can ask us for a copy of the relevant safeguards.

10. How long we keep data

Data

How long

Unlogged activity on your computer

90 days, then deleted automatically

Logged activity (times, app names, scores)

As long as your account exists

Window titles and manual time descriptions on our servers

Removed after 24 months by default. The workspace Administrator can choose 1, 3, 6, 12, 24 or 36 months

AI Chat conversations

90 days after the last message, or sooner if the person deletes the conversation, their role changes to Member, or their account is deleted

Classification examples

Until the account they came from is deleted

Custom Report PDFs

Until deleted by an Administrator or Manager, or until the account they’re about is deleted. Reports a person created stay with the workspace after their account is deleted

Billing records

As long as Bulgarian tax and accounting law requires (up to 10 years). Invoices are held by Stripe

Server logs

1 day, kept by our hosting provider, then deleted

Error reports

30 days, then deleted by Sentry

Database backups

Daily backups, kept 7 days by our database provider, then overwritten

Deleted accounts

Nothing is kept, except what the law requires. An account and its data are permanently deleted straight away (see section 11)

Workspace data after its subscription ends

12 months, so the workspace can export or reactivate, then permanently deleted. The Administrator is told by email at least 30 days before

Deleted workspaces

30 days, during which the workspace can be restored by emailing awesome@dotally.app, then permanently deleted

Website analytics data (Google Analytics)

14 months, then deleted by Google

11. Your rights, and how to use them

Depending on where you live, you have the right to:

Access the data we hold about you, and get a copy;
Correct data that’s wrong;
Delete your data;
Export your data in a machine-readable format (portability);
Object to processing based on legitimate interest;
Restrict processing while a request is being checked;
Withdraw consent at any time, for example by turning off App Sharing (the workspace’s Administrator and Managers are told by email), without affecting what was processed before;
Not be subject to decisions made solely by automated means that significantly affect you.

Export: email awesome@dotally.app and we’ll send you all your data as a JSON file.

Delete your account: ask your workspace’s Administrator, who deletes it from Team → Members. Deletion is final and happens straight away:

We permanently delete your account and all its data: activity, scores, classifications, PDF reports about you and stored AI data. It can’t be cancelled or undone.
You disappear at once from the Leaderboard, the Timeboard and every team list.
Custom Reports you created stay with the workspace. Reports about you are deleted, and reports comparing you with others are updated without you.
Your email address can be used again straight away, to sign up or to be invited.
Backups are overwritten within 7 days after that.

If you’re the workspace Administrator, your account can’t be deleted while anyone else is in the workspace. If you’re the only member, email awesome@dotally.app from your account’s email address and we’ll delete it for you.

Deleting your account deletes your data even if your organization would prefer to keep it. We keep only what the law requires, such as billing records.

If your workspace’s Administrator deletes your account: it’s the same final deletion described above. Your account and its data are deleted straight away, and your email address can be used again. There’s no way to be removed from a workspace and keep your account.

For anything else, email awesome@dotally.app. We’ll answer within one month. We may need to confirm your identity first.

Complaints. If you’re not happy with how we handle your data, please tell us first. You can also complain to a data protection authority. Our lead authority is the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg. You can also contact the authority where you live or work. In the UK, that’s the Information Commissioner’s Office (ico.org.uk).

12. If you’re in the United States

Under US state privacy laws (including the California Consumer Privacy Act), you have the right to know what personal information we collect, to access it, to correct it, to delete it, and not to be treated differently for using these rights. The categories we collect are listed in section 3, the purposes in section 4, and the recipients in section 7.

We don’t sell personal information. If you accept analytics cookies on our website, Google may use website browsing data for its advertising features, which some US state laws treat as “sharing” for cross-context behavioral advertising. You can opt out at any time by rejecting or withdrawing cookie consent in Cookie settings. We don’t use sensitive personal information to infer characteristics about you. To make a request, email awesome@dotally.app. An authorized agent can also make a request for you.

13. For organizations using DoTally at work

If you set up a workspace for employees or contractors, you’re responsible for your own use of DoTally. That includes:

telling your people that you use DoTally, what you can see, and why;
having a valid legal basis for that use;
following local employment and data protection law. In Bulgaria, for example, employers who use systems to track working time must adopt internal rules for them under the Personal Data Protection Act.

App Sharing can’t be turned on for someone else, and nothing in DoTally runs out of view: the desktop app always shows when it’s recording.

14. Security

Data is encrypted in transit (TLS) and at rest.
Access is limited by role (Administrator, Manager, Member), and App Sharing is enforced on every view: dashboards, AI Chat and Custom Reports.
Passwords are hashed. Sign-in sessions expire and renew automatically, and the desktop app is signed out after a password change or when the account is deleted.

No system is perfectly secure. If a breach puts your data at risk, we’ll notify you and the authorities as the law requires.

15. Cookies

Web app (my.dotally.app): we use only three cookies, all strictly necessary to keep you signed in:

Purpose

Lasts

accessToken

Keeps you signed in

15 minutes

refreshToken

Renews your session without signing in again

30 days

dt_oauth

Secures Google sign-in

10 minutes

We also store one temporary value in your browser tab to make the Back button work, and it’s cleared when you close the tab. There are no analytics or advertising cookies in the web app, so you won’t see a consent banner there. We measure visits and page speed in the web app with Vercel Web Analytics and Speed Insights, which use no cookies and no account ID: a visit is counted from a hash of the request that’s discarded after 24 hours (see section 7).

Website (dotally.app): cookies needed to run the site, plus Google Analytics cookies, which we set only if you accept them in the cookie banner:

If you’re signed in to Google, Google may also use its own cookies to link this data to your Google account (Google Signals). You can change your choice at any time via Cookie settings in the footer.

16. Age limit

DoTally is for people aged 18 and over. We don’t knowingly collect data from anyone younger. If you believe a minor has an account, email us and we’ll delete it.

17. Changes to this policy

If we change this policy, we’ll update the date at the top. If a change is significant, for example a new type of data or a new provider, we’ll tell you by email before it takes effect.