Privacy, security and responsible use

This page explains how PIY Action behaves. It is not a legal document: the binding terms are in the Terms of use.

Access

• Access follows your role and is checked by the server on every request, not only hidden in the screens.
• Sign-in supports two-step verification. Sessions end immediately when an account is deactivated.
• Sensitive actions by administrators are recorded in an audit log.

Your organisation's data

Messages, tasks, attendance, leave, payroll and documents belong to the organisation that uses PIY Action. They are available only to the people their role allows. Uploaded files are checked and kept private. Secrets such as email credentials are stored encrypted and are not shown again after saving.

File sharing and meeting capture

Drive files remain private until explicitly shared. Viewer grants let eligible recipients read content without editing it. Sharing a folder also covers active descendants and future uploads. Revocation removes that access path on subsequent requests, but another grant can still provide access and downloaded files cannot be recalled.

Call recording and transcription require separate consent from every joined participant. Capture is visibly indicated and stops if consent is withdrawn or participation changes. Meeting artifacts require both consent and continued conversation access. Retention is configurable, with a 30-day default. Review AI notes and proposed tasks before acting on them; no tasks are created automatically.

Credentials

Passwords in the Credential Manager are stored encrypted and are decrypted only for the one password you ask to show or copy, after you confirm your identity. Lists and searches never contain passwords. Shared access can be revoked at once, but revoking cannot erase what someone has already seen or copied. Copied text can remain in clipboard history that PIY Action cannot control.

Employee monitoring

Where an organisation turns on the employee task tracker, it is installed with the employee's knowledge, its screenshots are visible only to authorised administrators, and retention is configurable. Organisations must tell their employees what is monitored and why, and obtain any consent the law requires. PIY Action is not designed for covert surveillance.

AI

PIY Bot and the AI features in pGmail and recruitment suggest; people decide. Changes made through PIY Bot need your explicit confirmation, and mail is never sent by the AI on its own. AI output can be wrong or incomplete, so check it before relying on it. Do not paste secrets, passwords or personal data into free-text AI prompts unless you are sure your organisation allows it.

Your responsibilities

• Keep your password and codes private, and sign out on shared computers.
• Only use access you were given for its intended purpose.
• Share credentials sparingly and revoke when no longer needed.
• Report anything unexpected to your administrator.

Documents

Read the Terms of use for ownership, authorised use, monitoring and the assistant.