Privacy and Security

What Rize tracks by default, how Screen Vision (OCR) works when enabled, and how to redact data, exclude apps, and control privacy settings.

Open the related screen in Rize.

Privacy by Design

Rize is built around metadata, not surveillance. The app captures what kind of work happened and when -- not what was typed, read, or discussed.

Screen Vision (OCR) is an optional, employee-controlled beta feature and is described in its own section below.

What Rize Tracks

  • App name (which application is in focus)
  • Window title (the title bar text)
  • URL (browser address bar, if enabled)
  • Timestamps (when each activity started and ended)

What Rize Never Tracks

By default, Rize does not capture any of the following:

  • Screenshots or screen recordings
  • Keystrokes or mouse movements
  • Document contents or text inside apps
  • File contents or clipboard data

These defaults apply unless you explicitly enable Screen Vision (OCR), which is described below.

Privacy Controls

Fine-tune what Rize captures in Settings > Privacy:

  • URL Tracking -- disable entirely or track only the domain (not the full path)
  • Title Tracking -- disable window title capture completely
  • Meeting Attendee Emails -- disable tracking of calendar event attendees

Redacting Your Data

Two options for removing tracked data:

  • Manual redaction -- Settings > Privacy > "Redact Tracked Data" deletes all app and website data while preserving categories, projects, and productivity metrics
  • Scheduled redaction -- Settings > Privacy > Scheduled Data Redaction automatically redacts on a recurring basis

Excluding Apps and Websites

Go to Settings > Tracking Rules > New Rule and select "Exclude from tracking" to prevent Rize from recording activity in specific apps or websites.

Screen Vision (OCR) Beta

Screen Vision is an optional beta feature that uses OCR to read text from the active window and generate richer time-entry summaries. It is off by default and only works when both the organization admin and the individual team member explicitly opt in.

What Screen Vision Captures

  • Text visible in the active window or browser tab
  • A temporary image of the active window when OCR is running (local or cloud, depending on the processing mode)

What Screen Vision Does Not Capture

  • Keystrokes or mouse movements
  • Clipboard contents
  • Audio or video recordings
  • Full screen recordings or continuous screenshots

Privacy Controls

  • Org admin grant -- the workspace owner must enable screen vision for the organization
  • Member grant -- each team member must explicitly allow capture for themselves
  • Member pause -- anyone with screen vision enabled can pause or turn it off at any time
  • Tracking rules -- excluded apps and websites are not captured
  • Redaction and deletion -- existing OCR data can be deleted from Settings > Privacy
  • Sensitive app blocklist -- Rize refuses screen-capture requests for sensitive apps and websites such as banks, password managers, and authentication pages
  • Automatic sanitization -- detected emails, URLs, phone numbers, credit card-like numbers, and long digit runs are redacted before storage

Data Retention

OCR captures are retained for 30 days to support time-entry generation and then automatically purged. They are not used to train models and are not shared with third parties beyond the cloud OCR provider that processes the image.

For Team Admins

When rolling out Rize to a team, lead with the privacy story:

  • Rize captures metadata only -- no screenshots, no keystrokes
  • Screen Vision (OCR) is off by default and opt-in for both admins and members
  • Each team member controls their own privacy settings
  • Members review and approve their own time entries
  • Admins see time data, not activity data

Teams that understand the privacy model adopt faster and review more consistently.

More in Time Tracking