Privacy Policy

Zedmon DEX is monitoring software that an employer installs on computers it owns or manages. This policy explains what the software collects, why, and who decides what happens to it. It is written to be read by the people the data describes, not only by the people who buy the product.

Who controls the data

The organisation that installs Zedmon DEX is the data controller: it decides what is monitored, for how long, and who inside the organisation may see it. We are the processor— we operate the service on that organisation's behalf and act on its instructions.

If you are an employee and want to know what is held about you, ask your employer's IT or HR team first. They can see everything we hold about your device, and they can export or delete it without involving us. If they need our help to answer you, we will provide it.

What the agent collects

• Device identity: hostname, operating system version, model, serial number, and the site or department the employer assigned to it.
• Health metrics: CPU, memory, disk and battery levels; process names and their resource usage; boot and logon durations.
• Stability events: application and service crashes, unexpected restarts, and the Windows event-log entries that describe them.
• Network measurements: latency, packet loss, Wi-Fi signal strength, and reachability of the endpoints the employer configured.
• Software inventory: installed applications and their versions, and when they were installed or removed.
• Application usage: which applications were in the foreground and for how long — used to tell a machine that is idle from one that is struggling.
• Page performance, only if the employer enables the browser extension: load timings for the specific internal sites they list.

What the agent does not collect

These are design limits of the software, not policy promises:

• No keystrokes. There is no keylogger.
• No screen contents. No screenshots, no screen recording, no remote viewing of a session.
• No file or document contents. File names are not collected, and file contents are never read or transmitted.
• No general browsing history. The optional extension measures timings for the internal addresses the employer lists; it does not record the pages a person visits elsewhere.
• No microphone, camera or location tracking.
• No email, chat or message contents.

Remote commands

An administrator can run a fixed set of repair actions on a device — restarting a service, clearing a print queue, freeing disk space. Every such action is recorded in an audit log with who ran it, when, from which channel, and what the result was. That log is visible to the customer and is never deleted by our data-retention process.

How long it is kept

Telemetry is kept for five years by default. Each customer can shorten that in their own settings, to a minimum of thirty days. When a window passes, the data is deleted. Audit logs, software-inventory history and resolution knowledge are kept for the life of the account, because they are the record of what was done and why.

Artificial intelligence

Diagnoses are produced by a language model. What is sent to it is the device's measurements and event descriptions — the same facts shown on screen. Prompts are not used to train third-party models. A customer can turn AI analysis off entirely and keep every other part of the product.

Where it is stored, and who can reach it

Data is stored on servers we operate, encrypted in transit. Each customer's data is isolated at the database level, so one customer's queries cannot return another's rows. Our own staff access is limited to what is needed to operate and support the service, and administrative actions are audited.

Customers who prefer it can run Zedmon DEX entirely on their own infrastructure, in which case none of their telemetry reaches us at all.

Your rights

Depending on where you live, you may have the right to access, correct, export or erase personal data about you. Because your employer controls this data, address those requests to them; we support them in answering within the timeframes the law requires.

Changes and contact

We will tell account administrators before this policy changes in a way that affects what is collected. Questions can be sent to the contact address published with your account.

The English text of this policy is authoritative; the Arabic version is a translation provided for convenience.