ACCOUNT LOGIN

Back to Legal

On-Premise Product Data & Privacy

COPYRIGHT © 1996 - 2024 Faronics Corporation.

When you use Faronics products, you entrust us with data regarding your system and your system’s users. We recognize that your privacy and security are valuable, and that in collecting and holding your data we have the responsibility to use it responsibly and keep it secure. To ensure your privacy, we use your data only to provide you with services and to improve those services. To ensure your data security, we ensure the data is stored on secure servers, and erase it when you no longer require our services.

Why the software collects data

  • Faronics’ products enables our customers to monitor and control user workstations and mobile devices, and as part of this process, our software collects and analyzes data regarding hardware and software configuration, and user activities. The data collected by the software is essential to its operation and its continued improvement. Simply put, Faronics software requires a fair degree of knowledge of the current and intended states of target systems to safely execute commands on them, and requires knowledge of user actions to effectively monitor what target systems are doing. This data is also used to help inform decisions regarding future improvements to the software, including how to improve user experience, what new features to develop, and what issues require correction. Faronics does not use system configuration or user data to create targeted advertisements.

    Faronics software also collects data regarding our customers, which is used to maintain our relationships with those customers. Customer data is not used to create targeted advertisements.

Who analyzes and stores the data

  • Faronics Standard and Enterprise software is deployed on-premise, such that the software resides on the customer’s’ servers and is maintained by the customer. The majority of this data remains with the customer; it is analyzed and stored on their servers, and subject to their data security and privacy policies. A small portion of the data is forwarded to Faronics for our use and analysis; in these cases, we use the data to maintain and improve the product, and to maintain our relationship with the customer.

Who is responsible for getting consent

  • Although Faronics software is used to collect data, Faronics itself does not interact directly with the end users, who are the customers of Faronics’ customers. The software is either deployed by the customers on their own servers, or managed by Faronics at the customer’s’ behest. It is therefore the customer’s responsibility to ensure that they have consent to collect data from the end users.

Faronics data retention policies


  • In addition to our regulated responsibilities, Faronics is committed to following best practices in privacy and data protection. In an on-premise installation, Faronics only obtains a tiny portion of the data collected by the software, with the vast majority being managed and stored by the customer running the software. Data held by the customer is the responsibility of the customer, and is subject to their data retention policies. The data received by Faronics includes account and license information, which is held indefinitely, and product feedback, which is deleted after you stop using Faronic’s services.Note that you may request that Faronics remove your data if you choose. For more details, please see our Terms of Service.

Faronics privacy policies



  • Faronics respects your privacy; we will not use your data to target you with advertisements. For more details, please see our Privacy Policy.

What data is collected


  • Faronics on-premise products do not have the same data for all systems and users—what data is collected depends on which applications and services the customer has elected to use. In addition to identity, version, and configuration information of the Faronics products in use, the software has access to the following information according to each installed product:
    • Core Agent

      Core Agent enables communication between the Core Console and other on-premise Faronics products. This means that if a workstation runs any on-premise Faronics products, it must also run the Core Agent.
      To perform its duties, the software requires the following data:
      • Information that helps to unambiguously identify the workstation, including its name, type, OS information, system locale, MAC addresses, internal IP addresses, and generated identifiers such as its Machine ID.
      • The workstation’s network identity and information regarding how it connects to network, including its server certificate, fully qualified domain name, NetBIOS name, domain/workgroup name, and the active directory /OU name, if applicable.
      • Basic user information, including who is currently logged in, who has been using the computer in the past, and when they used it.
      • Additional information, including what version of .NET is installed.
    • Anti-Executable Core

      Anti-Executable Core prevents unknown or undesirable programs from running on workstations. To perform its duties, the software requires the following data:
      • Information regarding the workstation’s software license.
      • Who is attempting to run executables on the workstation, and what they are attempting to run.
      • What executables the user is allowed to run, including their name, publisher, and hash value.
    • Anti-Virus Core/ Enterprise

      Anti-Virus Core and Anti-Virus Enterprise detect, identify, and quarantine malicious code. To perform their duties, these applications require the following data:
      • Information regarding the workstation’s software license.
      • The version of the software, and how up to date to date its virus definitions are.
      • What anti-virus protection measures are currently enabled, including firewall status and active protection status.
      • When was the last time the workstation was scanned and when the last virus was found.
    • Data Igloo

      Data Igloo is companion software to Deep Freeze which allows select files to be updated and saved even when Deep Freeze is active. To perform its duties, the software requires the following data:
      • An inventory of all redirected files, profiles, folders, and registry keys.
    • Deep Freeze

      Deep Freeze “freezes” the workstation configuration, returning it to the same state upon reboot regardless of what occurred in the meantime. To perform its duties, the software requires the following data:
      • Information that helps to unambiguously identify the workstation, including its computer name, MAC address, baseboard serial number, BIOS details, CPU details, workstation ID, video controller information, and UUID
      • Network connectivity information, including the computer’s IP address, domain, subnet, and network adaptor details.
      • An inventory of drives and additional drive information, including drive serial numbers, volume information, partition information, disk drive and system drive details.
      • Select workstation configuration information, including standard and daylight saving time settings, and Windows Update server URL.
    • Deep Freeze Console

      Deep Freeze Console is the interface used by administrators to manage the deployment. To perform its duties, the software requires the following data:
      • Information that helps to unambiguously identify the console computer, including its computer name, MAC addresses, OS build number and version.
      • Network connectivity information, including the computer’s IP address, port, domain, and subnet.
      • User identity information, including the names of any logged in users, and the name and password of any remote consoles.
    • Deep Freeze Mac

      Deep Freeze Mac performs the same function as Deep Freeze, “freezing” the workstation configuration and returning it to the same state upon reboot, but specifically for Mac workstations. To perform its duties, the software requires the following data:
      • Preferred language for the workstation.
    • Insight

      Faronics Insight is a classroom management application used by Teachers and Students to collaborate with each other within the local network. Personally identifiable information or student records are not shared with Faronics. To perform its duties, the software requires the following data:
      • Information that helps to unambiguously identify the workstation, including its computer name, MAC address, and video controller information.
      • Network connectivity information, including the computer’s IP address, domain, subnet, and network adaptor details.
      • Logged-in user name, any name entered by the user in the Student interface.
      • Student screen snapshot of the active screen when requested by a Teacher, this snapshot will be transmitted and displayed on the Teacher’s console. The image will not be stored.
      • Screenshots of the Student’s screens may be taken by the Teacher’s console for evidence purposes.
      • Web browsing history allows Teachers to gauge that students are paying attention and staying on-task in a classroom environment and following the school’s acceptable use policy.
      • Application usage history to allow Teachers to gauge if the students are paying attention and staying on-task in a classroom environment and following the school’s acceptable use policy.
      • Keystroke history is collected when enabled to trigger alerts if Students are using banned language.
      • Chat history during the class session to allow Teachers and Students to collaborate more effectively using individual or group chat.
      • Testing and Polling results collected from Students during an assessment by the Teacher.
      • Collected files from Student’s computer if any work is submitted by the Student to the Teacher.
      • Class lists with Student names may be stored on the Teacher’s Console for attendance or to create a classroom roaster.
    • Power Save / Power Save Mac

      Power Save is energy management software that reduces power consumption by fine-tuning when and how workstations power down. To perform its duties, the software requires the following data:
      • Information regarding the workstation’s software license.
      • Hardware profiles, including computer and monitor make and model.
      • Information regarding events, including event IDs (sleep, wake, etc.) and their timestamps.
      • Preferred interface language.
      • Power Save Mac requires additional workstation identity information, including IP and MAC addresses, machine name, machine ID, NetBIOS name, IP adaptors, OS information, and domain DNS.
    • System Profiler

      System Profiler inventories the workstation’s hardware and app data, creating a detailed profile that can be searched and compared to other profiles across your deployment. To perform its duties, the software requires the following data:
      • Information regarding the workstation’s software license.
      • Information regarding the workstation’s identity, including its name, domain / workgroup membership.
      • Hardware information, including the make, name, and model of computer and monitor; information on the motherboard, BIOS, memory, CPU, and cache; and an inventory of physical drives.
      • Information regarding the network interface card and network properties, including type, IP address, and MAC address.
      • Information regarding the workstation’s configuration, such as a profile of its OS, including registration information; an inventory of logical drives, including capacity; and an inventory of installed products, including their name, version, and other attributes.
      • OS Information ; Information about registered to (System Profiler only)
      • Information regarding the workstation’s current state, including what processes are running, free space available on all drives, and which user(s) are currently logged in.
    • UserVoice

      UserVoice is a user feedback utility incorporated into the Deep Freeze Cloud console. To perform its duties, the software requires the following information:
      • User identity, including first name, last initial, and email address.
      • Details of the user feedback.
    • WINSelect Core

      WINSelect Core applies restrictions to what operations can be performed within the Windows operating system. To perform its duties, the software requires the following data:
      • Information regarding the workstation’s software license.
      • An inventory of the files and features that the software could deny users access to, including available printers, control panel applets, drives, file extensions, desktop icons, and executables within the Program Files folders.
      • Information to assist the software to deny access to selected browser features, including the version of Internet Explorer or Firefox installed on the workstation.

Contact Us