BirdsEye privacy policy
Effective November 11, 2026.
Who we are
BirdsEye is a product of BoomersHub LLC, Morrisville, North Carolina 27560, United States ("BoomersHub", "we", "us"). This policy explains what personal data we handle when you visit this website or use the BirdsEye service, why we handle it and what choices you have. You can reach us about privacy at privacy@trybirdseye.com.
Two kinds of data
Website and account data is information we collect directly from visitors and account holders. We decide how it is used, so we are the controller of that data.
Workplace data is collected by the BirdsEye desktop agent on behalf of a customer organization, usually an employer. The customer decides what is collected, sets the rules and is responsible for informing its people and for having a lawful basis. For workplace data the customer is the controller and we act as its processor. If your employer uses BirdsEye and you have a question about your data, please contact your employer first.
What we collect
- From website visitors: the details you send through our contact form (name, work email, company, team size and message), and technical data such as IP address, browser type, pages viewed and the time of each request.
- From account holders: name, email address, role, organization, a hashed password, sign-in records and billing details. Card payments are handled by our payment processor, and we do not store full card numbers.
- Workplace data, depending on the customer's settings: the active application and window title, the website domain in the active browser tab, idle time, time entries and project or task tags, screenshots, webcam clips, attendance and leave records, and device information such as operating system and agent version.
How we use personal data
- To provide, maintain and support the service.
- To keep the service secure and to prevent abuse.
- To bill customers and manage subscriptions.
- To reply to enquiries and send service messages.
- To understand how our website is used so we can improve it.
- To meet our legal obligations.
We do not sell personal data, and we do not use workplace data for advertising.
Legal bases
Where the GDPR or UK GDPR applies, we rely on performance of a contract to provide the service, on our legitimate interests to secure and improve the service and to answer enquiries, on consent where the law requires it (for example for non-essential cookies), and on legal obligation where we must keep records.
Cookies and analytics
Our website uses cookies and similar technologies that are needed to run the site and to keep you signed in. Where you allow it, we also use analytics that tell us how the site is used. You can block or delete cookies in your browser settings. The site still works without analytics cookies.
Who we share data with
- Service providers that host the service, deliver email, process payments and provide support tools for us. They may only use personal data to provide their services to us. A current list is available on request.
- Atlassian, when a customer connects Jira, so that worklogs can be written to the issues the customer's people choose.
- Authorities and advisers, when the law requires it or when it is needed to protect our rights or the safety of others.
- A successor, if BirdsEye or BoomersHub is involved in a merger, acquisition or sale of assets. We will tell affected customers before their data is subject to a different policy.
How long we keep data
Workplace data is kept for the period each customer sets in its retention settings. Screenshots and webcam recordings have their own retention settings, and a customer can purge stored media on demand.
Account data is kept while the account is open. After an account is closed, we delete or anonymize the customer's data within 90 days, unless the law requires us to keep it longer. Contact-form enquiries are kept for up to 24 months. Billing records are kept for as long as tax and accounting law requires.
How we protect data
Traffic between the desktop agent, the mobile app, the dashboard and the service is encrypted. Access is limited by role, each customer's data is confined to its own organization, passwords are stored hashed, repeated sign-in attempts are rate-limited and sensitive actions are recorded in an audit log. No system is perfectly secure, so we cannot guarantee absolute security, but we will notify affected customers of a personal data breach as the law requires.
Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict its use, and to withdraw consent. To use these rights, write to privacy@trybirdseye.com. We reply within the time the law allows. If your data was collected through your employer's use of BirdsEye, we will pass your request to your employer, who decides how to respond.
If you are in the European Economic Area or the United Kingdom, you can also complain to your local data protection authority.
California residents: we do not sell or share personal information as those terms are defined in California law, and we do not discriminate against anyone for using their privacy rights.
International transfers
BoomersHub is based in the United States. Personal data may be processed in the United States and in other countries where we or our service providers operate. Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses. Customers that need a data processing agreement can request one at privacy@trybirdseye.com.
Children
BirdsEye is a workplace product. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.
Changes to this policy
We may update this policy as the product or the law changes. We will post the new version on this page and update the effective date. If a change is significant, we will also tell account administrators by email.
Contact
BoomersHub LLC, Morrisville, North Carolina 27560, United States. Email: privacy@trybirdseye.com.