Privacy Policy — PerfectLaw Time Capture

Effective date: 2026-09-21

This policy describes what the PerfectLaw Time Capture Chrome extension ("the Extension") collects, how it's used, and how it's protected. The Extension is developed by Executive Data Systems, Inc. ("we", "us") and licensed to law firms that use PerfectLaw ("your firm") for use by their timekeepers and staff. It is not distributed to the general public.

Each firm's PerfectLaw deployment — including where the Time Capture server the Extension talks to is hosted — is separate from every other firm's. Depending on your firm, that server may run on infrastructure your firm operates itself, an Azure environment your firm controls, or infrastructure we host on your firm's behalf.

What the Extension does

The Extension records when a timekeeper opens or brings focus to a tracked work-related website (e.g. matter-management systems, research tools), so that captured time can be logged for billing purposes. It only captures activity on domains your firm has marked as tracked — it does not monitor browsing outside that list.

Information we collect

From your use of the Extension:

Operator code and password — provided by our internal login flow to identify you as a timekeeper. The password is never stored or transmitted in plain text (see "Security" below).
Capture events — which tracked domain you open or bring into focus, recorded as an event with a timestamp (e.g. "opened example.com at 2026-09-17T14:02:00Z"). We don't record how long you stay on a page.
Client code and matter code (optional) — if your firm's system supplies these when you log in, they're attached to focus events so time can be billed to the right client/matter.
Connection settings — the API address and key your firm's system provides, so the Extension knows where to send the above.

What we do not collect: page content, form data, keystrokes, or browsing activity on any site outside your firm's tracked sites. The Extension has no access to tabs that aren't on the tracked list beyond checking their domain name against that list.

How this information is used

Solely to record and bill timekeeper hours to your firm's time-capture system. It is not used for advertising, analytics, resale, or any purpose unrelated to internal time and billing records.

Where information is stored

On your device: your tracked sites, daily usage totals, and current login/connection settings are stored locally in the browser (chrome.storage.local) and are not visible to websites you visit.
On your firm's server: usage events, focus events, and login attempts are sent to your firm's Time Capture server (see above for how that server may be hosted) and retained per your firm's configured retention setting, capped at a maximum of 30 days.

Sharing

We do not sell this information, and we do not share it with any third party. It is accessible only to your firm's own personnel and systems responsible for time and billing administration, and — for firms whose Time Capture server we host on their behalf — Executive Data Systems, Inc. personnel responsible for operating that infrastructure.

Security

Every request the Extension sends to your firm's server is encrypted end-to-end (hybrid RSA/AES: a fresh AES key encrypts the request, an HMAC authenticates it, and the AES key itself is wrapped with that server's RSA public key), so your operator code, password, and usage data are never sent in plaintext. Data is decrypted only on your firm's Time Capture server, using a private key that server controls.

Permissions the Extension requests, and why

Permission	Why we need it
`storage`	Save your tracked sites, capture events, and connection settings locally.
`tabs`	Read the active tab's domain to know whether it's a tracked site, so a captured-time event can be recorded when it's opened or focused.
`idle`	Detect when you step away from and return to an already-open tracked tab, so returning counts as reclaiming focus and records a fresh captured-time event (the same as opening the tab again).
`alarms`	Periodically sync the list of tracked sites from your firm's server, and run a periodic check so captured-time events are recorded reliably even if the browser suspends the extension in the background.
External messaging (`externally_connectable`)	Lets our own firm portal (`perfectlaw.net`) sign you into the Extension automatically when you're already signed into that portal — no separate login step.

Your choices

You can review and remove sites from your tracked list, and see your local usage data, from the Extension's options page at any time. Uninstalling the Extension removes all locally stored data; it does not delete records already sent to your firm's server, which are retained per your firm's configured retention setting (capped at 30 days).

Children's privacy

The Extension is a workplace tool for use by law firm personnel and is not directed at, or knowingly used by, children.

Changes to this policy

If this policy changes, we'll update the effective date above. Existing installs of the Extension will show a notice — a badge on the toolbar icon and a banner on the options page linking to the current policy — until dismissed; this is handled by the Extension itself and requires no action from us beyond publishing the updated policy and a new Extension version.

Contact

Questions about this policy or your data: info@perfectlaw.com.