This monitoring and activity tracking software is developed by the developer as a bespoke deliverable and is installed and deployed exclusively on servers and infrastructure owned and controlled by the client. Upon successful handover and deployment, the developer's operational involvement ends, and the software is designed and configured so that the developer retains no remote access, control, or visibility into the deployed instance. The client assumes sole and exclusive ownership and administration of the deployed environment. The client acknowledges that changing the default administrative credentials upon initial login is the mechanism by which the developer's access is removed, and that the developer does not retain a documented recovery method for a client-controlled instance once those credentials have been changed. This describes the software's design and access model as built; it is not a warranty against every conceivable technical circumstance.

The software includes administrative settings that allow the client's authorized administrator to enable, disable, and configure monitoring capabilities, including but not limited to screen and webcam capture, microphone audio, keystroke logging, clipboard monitoring, and USB tracking. The activation, configuration, and use of any such feature is at the sole discretion and responsibility of the administrator. The applicability of laws governing monitoring technologies, interception of communications, employee privacy, and data protection depends heavily on the manner, jurisdiction, and disclosure practices surrounding the software's use, and the client is solely responsible for determining which laws apply to its intended use, for obtaining any legally required consent or providing any legally required notice to employees, contractors, or device users before deploying monitoring features, and for complying with such laws on an ongoing basis. The developer makes no representation as to the legality of any specific deployment and provides no legal advice. It is a mandatory requirement that the administrator update the default credentials upon initial login, and the client is solely responsible for safeguarding those credentials thereafter.

The software is provided as is and as available, without warranty of any kind, express or implied, including without limitation warranties of merchantability, fitness for a particular purpose, non-infringement, or that the software will be uninterrupted, error-free, or secure, and the developer does not warrant that the software will meet the client's requirements or that any data it processes will be accurate or complete. Use of the software is at the client's own risk. To the maximum extent permitted by law, the developer's total liability arising from or related to this agreement or the software shall not exceed the total fees paid by the client for the software, and in no event shall the developer be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business, even if advised of the possibility of such damages.

The developer is purely a software builder and technical installer, and is not responsible under any circumstances for how the client chooses to utilize, deploy, or manage the software after handover. The client represents, warrants, and agrees that it will only deploy the monitoring tools on devices for which it has obtained all legally required consent from and provided all legally required notice to the employees, contractors, or device users involved, in compliance with all applicable local, national, and international law. The client agrees to indemnify, defend, and hold the developer completely harmless from any and all liabilities, damages, claims, regulatory penalties, lawsuits, or legal disputes arising from unauthorized surveillance, privacy violations, or any other misuse of the software.

Except as otherwise agreed in writing, the developer retains ownership of the underlying source code, architecture, and pre-existing tools used to build the software, and the client is granted a license to use the deployed software for its own internal business purposes only, without the right to resell, sublicense, or redistribute the software to third parties absent the developer's prior written consent. Nothing in this agreement creates a partnership, joint venture, agency, or employment relationship between the developer and the client, and neither party may bind the other. This agreement is governed by the laws of Pakistan, and any dispute arising from or relating to this agreement shall be resolved in the courts of Lahore, Pakistan, unless the parties separately agree in writing to resolve the dispute through arbitration. This agreement, together with any signed statement of work between the parties, constitutes the entire agreement between them regarding the software and supersedes all prior discussions, and if any provision of this agreement is found unenforceable, the remaining provisions shall remain in full effect.

This software operates strictly as a self-hosted activity monitoring application deployed and run entirely on infrastructure owned and controlled by the client, and the developer has no ownership, access, or visibility regarding any data captured, processed, or stored by the software following handover. All collected telemetry, including keystrokes, active window titles, clipboard entries, mouse tracking data, automated screenshots, webcam captures, and microphone audio, is stored and transmitted directly to the client's own database infrastructure. The developer does not host any central databases, collect telemetry from deployed instances, or maintain any connection to the software after handover.

The client is the sole data controller for all data collected through the software, and is solely responsible for determining the legal basis for collecting each category of data, for providing any notice or obtaining any consent required by applicable law before enabling a given monitoring feature, for setting appropriate data retention periods, for implementing adequate security, encryption, and access controls, and for responding to any data subject requests or regulatory inquiries that may arise. The developer provides the technical capability to collect and configure this data; it does not determine or vouch for the legality of any specific configuration the client chooses to use. The administrator dashboard features a settings panel where the client can selectively enable or disable monitoring features such as webcam, microphone, keystroke logging, clipboard access, and USB tracking, to align with its own compliance obligations and consent arrangements.

Following handover and the client's mandatory change of the default administrator credentials, the developer has no documented mechanism to access the deployed instance, its administrative dashboard, or any data stored within it, and cannot view dashboard data or perform remote logic changes or updates. This describes the software's access model as designed; it is not a warranty against every conceivable technical circumstance. The developer does not process, transmit, or receive client or employee data as part of the ordinary operation of the deployed software, and any data used for testing purposes during development is not client production data and is deleted upon completion of the project.

The client is entirely responsible for securing the server environment, database, and administrator credentials, including applying updates, patches, and access restrictions appropriate to the sensitivity of the data collected, and for managing the privacy of all captured logs on an ongoing basis. This policy may be revised as part of future work agreed between the developer and client, and the version presented to the client at the time of deployment shall govern unless separately amended in writing. Questions about this policy as it relates to the design of the software should be directed to the developer, while questions about data collected from a specific individual should be directed to the client, as the data controller responsible for that data.