Effective date: Aug 19, 2026
Applies to: Contributors enrolled on Outlier projects where screen monitoring, the Outlier Task Verify browser extension or voice verification is enabled
Last updated: Aug 19, 2026
This notice explains how and why we use screen monitoring on Outlier projects, and it supplements the Outlier Privacy Policy, the Outlier Terms of Use, and the Community Guidelines, all of which continue to apply to Contributors on the Outlier Platform. Where this notice differs from any of those documents on screen monitoring, this notice controls.
Read this notice before you begin work on a monitored project. We are not asking you to agree to monitoring, and your agreement is not the basis on which we process this data. Section 5 explains the basis we rely on and the rights that come with it, including your right to object. Voice and typing-rhythm verification are the exception: they use biometric data and require your separate written consent (Section 4.2).
Scale AI, Inc., is the data controller for the processing described here.
Privacy contact: privacy@scale.com
Data Protection Officer: William Gamble william.gamble@scale.com
EU representative under Article 27 GDPR: Lionheart Squared Ltd
Lionheart Squared (Europe) Limited
Address:
2 Pembroke House
Upper Pembroke Street 28-32
Dublin
D02 EK84
Ireland
Email: outlier@lionheartsquared.eu
UK Office
Address:
17 Glasshouse Studios
Fryern Court Road
Fordingbridge
Hampshire
SP6 1QX
England
Screen monitoring runs only when all of the following are true:
You are enrolled on a project, interview or course where monitoring is enabled;
You have given access to our screen monitoring application;
You have either:
an eligible paid task session open and your paid work timer is running;
an interview session open; or
a course session open.
Monitoring stops when you end the applicable task, interview, or course session, or stop screen sharing. If you stop sharing your screen, the timer pauses and paid time stops accruing rather than continuing to run.
While monitoring is active, a Screen Sharing Active indicator stays visible on your screen. Before capture begins, you receive an on-screen notice at timer start and your browser asks you to select what to share.
Browser extension and voice verification. On projects that use the Outlier Task Verify browser extension, the extension collects data while you are on multimango.com/tasks in any browser tab in the same Chrome profile. It also sends a status heartbeat about once a minute while it is installed and enabled, including whether its permissions and Multi Mango site access are still granted. It collects input signals only on the project's task website and on outlier.ai, and checks whether the browser tab you have open is on a list of known AI sites, and records when you switch between multimango.com and other sites (Section 4). On the listed AI and translation sites it also runs a small script that detects text copied from them. Audio is used only when a task asks you to record, or when we ask you to complete a voice check at timer start. If the extension is turned off or removed, your timer stops and paid time stops accruing.
Screen captures. We capture still images of your window, taken approximately once per minute.
Screen video. On designated projects, or where a specific integrity concern has been identified about your account, we may record screen video in place of or in addition to still images. Video capture is limited to no more than thirty (30) minutes per day where it is triggered by an integrity signal, and to your active tasking time subject to a daily project ceiling where it applies to a whole project. Any project where video is enabled will tell you so before you begin work.
Session and work metadata. Contributor or worker ID, project, task and timer identifiers, capture timestamps, active and idle status, and screen-share start and stop events.
Information derived from captures. Image fingerprints, text, applications, and pattern detections produced by our automated review tools. Where video is enabled, the reason your account was selected.
Because capture is of a whole screen or window, anything visible at the moment of capture is captured. That can include other applications, browser tabs, file names, notifications and personal content. It can also include information about other people if it is visible on your screen.
Browser extension signals. On projects that use the Outlier Task Verify extension: how long you hold keys, your average typing speed and your average timing for a fixed set of letter pairs; copy, cut and paste events and their length and, where the clipboard-text feature is turned on, the text that was copied, cut or pasted, which is uploaded in chunks, signs of automated or scripted input (text appearing in a field without matching physical typing; we record only its length, source and reason, not the text); mouse movement (screen coordinates and timestamps of your pointer sampled about every 50 milliseconds during drag and hover movements on task pages, tied to the task ID), focus and idle time; whether your active browser tab is on a list of known AI sites and, when you move between multimango.com and another site, the hostname you left and the hostname you went to, the full address of the Multi Mango page (for example multimango.com/tasks/..., including any query string or fragment, up to 2,048 characters; never with a username or password; other sites are recorded by hostname only), and a category label if the other site is on our list; for each button you click on multimango.com/tasks: the type of control, whether you used a mouse, keyboard, touch or pen, which modifier keys were held, which mouse button was used, the time, and an internal action name if the page provides one (never the button label, text or page element); for keystrokes in text fields on task pages: the category of key (for example printable, editing, navigation, action or modifier), which modifier keys were held, whether the key was being held down, the type of field and the time, but never which key you pressed or what you typed, and never in password, card-number or one-time-code fields; and the periods when you are away from multimango.com/tasks, meaning your focused Chrome window is on another tab, you are in another application, or Chrome is minimized: the start, end and length of each period and the task session; installed browser extensions that match known fraud or automation tools (the extension collects the IDs of all your enabled browser extensions other than itself and compares them with that list); your IP address and network information, including VPN or proxy use; and extension status and heartbeat events; and a browser and device fingerprint (browser user agent, number of processor cores, device memory, screen resolution, time zone, language and platform) together with a random installation ID for the extension.
Voice verification. A voiceprint created from your onboarding recording, and scores comparing it with your voice in task recordings and voice checks. Task and voice-check recordings are stored for 7 days, and up to 90 days if selected for further review.
Information derived from extension and verification data. Risk scores, rule matches and reason codes that may flag your account for review.
We do not collect, and the monitoring tool cannot collect:
Camera or webcam images
Microphone or other audio, except when a task or voice check asks you to record
The content of tasks or your responses to tasks;
Your browsing history
Any data when you are not on multimango.com/tasks on any browser tab in the same Chrome profile.
Other than the biometric data described in Section 4.2, we do not seek, target or use special category data (such as information about your health, religion, political opinions, trade union membership, sex life or sexual orientation), financial account details or government identifiers. If such content is visible on your screen while capture is active, it may be recorded incidentally. Section 8 describes the steps we take to reduce and remove it.
Please close personal applications, personal email, banking, health portals and private messaging before you start a monitored task session.
What we collect. A voiceprint created from your onboarding recording; scores comparing your voice in task recordings and voice checks with that voiceprint; and typing-rhythm measurements (how long you hold keys, your average typing speed and your average timing for a fixed set of letter pairs). Task and voice-check recordings are stored for 7 days, and up to 90 days if selected for further review.
Why we use it. Only to confirm that the person doing the work is the person who verified the account. We do not use biometric data to assess accent, task quality or performance, or for any other purpose.
Your consent. We collect biometric data only after you sign a separate written release. If you do not consent, you will be removed from the project and free to accept other projects that do not require voice verification.
Retention and destruction. We keep your voiceprint and typing-rhythm data while you are active on Outlier and destroy it once the purpose is met, or within three years of your last interaction with us, whichever comes first, as described in our Biometric Data Retention Policy.
Sharing. We do not sell, lease or trade biometric data or otherwise profit from it. We disclose it only to service providers acting on our behalf, or where the law requires it.
Your rights. You may withdraw your consent and ask us to delete your biometric data at any time (Section 10). Depending on where you live, including California, Texas and Washington, you may have additional rights over sensitive personal information, including the right to limit how it is used.
We use the data described in this notice for the following purposes only:
Verifying paid time. Confirming that time recorded on the timer corresponds to actual work on the assigned task.
Detecting prohibited tools and practices. Identifying remote-access and desktop-sharing tools, mouse jigglers, auto-clickers and macros, timer manipulation, anti-detect browsers and multi-account tooling, and prohibited use of external AI models where a project restricts it.
Investigating suspected fraud and policy violations, and taking payment, access or enforcement decisions that follow from an investigation.
Verifying identity. Confirming that the person doing the work is the account holder we verified, and detecting accounts that have been sold, rented or shared.
Detecting automated or AI-generated input. Identifying scripted input and text pasted from AI tools from input patterns
Our legal basis is our legitimate interests under Article 6(1)(f) GDPR and the equivalent provisions of other applicable data protection laws. Those interests are protecting the integrity of the work delivered to our customers, ensuring payments are made for work actually performed, protecting contributors who do the work properly from being disadvantaged by those who do not, and detecting and preventing fraud against Scale. For biometric data (Section 4.2), we rely on your explicit consent under Article 9(2)(a) GDPR and the written release required by applicable US state laws.
We do not rely on your consent, and we are not asking for it, except for biometric data (Section 4.2). The screen selection prompt you see comes from your web browser, which requires you to choose a screen before any browser-based tool can capture it. That prompt is a technical requirement of your browser. It is not a consent mechanism for this processing, and choosing to share your screen is not treated by us as permission to process your data. This matters to you in two ways: you do not need to worry that agreeing to work has waived your privacy rights, and you retain the right to object to this processing described in Section 10.
We have carried out a written assessment weighing our interests against your rights and freedoms, taking into account the intrusiveness of screen capture, our position relative to yours as a platform, and the steps described in Sections 4.1, 7 and 8. A summary of that assessment is available on request from the contact in Section 2.
We do not use the data described in this notice for performance evaluation, task quality scoring, work allocation decisions unrelated to integrity, training AI models, marketing, or any purpose disclosed to our customers. We do not sell, license or provide screen captures to Outlier customers. We may tell the customer whose project you worked on that work was affected by fraud or a policy violation, without sharing captures or biometric data.
Monitoring is a requirement of working on projects where it is enabled. It is a contractual requirement of those specific projects, not of your relationship with Outlier as a whole.
If you decline at the on-screen notice, or you stop sharing your screen, the monitored task session will not start or will end, and you will not accrue paid time for it. Declining does not remove you from the Outlier platform, does not affect work you have already completed and been paid for, and does not by itself affect your access to projects that do not use monitoring.
On projects that use the Outlier Task Verify extension, the extension must be installed and running for your timer to start. Biometric verification requires your separate written consent (Section 4.2). If you do not consent, you will be removed from the project and allowed to accept other projects that do not require voice verification.
Access. Screen captures are viewed only by authorized Scale personnel in Trust & Safety, Security, Engineering and Legal, on a least-privilege basis, through internal tools that require single sign-on. Every access to a capture is logged. Captures are not routinely reviewed; only files selected for a specific investigation are opened and examined.
Service providers. Amazon Web Services provides storage and computing, and Snowflake provides the data warehouse where metadata and detection outputs are held. Both act as our processors under written contracts. No third-party artificial intelligence, OCR or analytics provider receives your screen captures. The automated detection tools are operated by Scale.
Other disclosures. We may disclose captures to our external legal advisers, and to regulators, courts or law enforcement where we are legally required to do so or where it is necessary to establish, exercise or defend legal claims. Where a capture is the basis of a payment or enforcement decision affecting you, we may show it or describe it to you.
Retention.
Data | Retention period |
|---|---|
Screen captures not selected for investigation | Deleted automatically 7 days after capture |
Captures retained as investigation evidence | No longer than 90 days |
Screen video | Deleted automatically after 90 days after capture |
Browser extension signals | Deleted automatically 7 days after collection; no longer than 90 days if retained as investigation evidence |
Task and voice-check recordings | Stored for 7 days; up to 90 days if selected for further review |
Extension mouse-movement traces | Stored for 7 days |
Extension clipboard text (if enabled), installed-extension IDs, tab-transition records, fingerprint and installation ID | 7 days |
Full Multi Mango page addresses in tab-transition records; button-click, keystroke-category and away-time records (when sent) | 7 days |
Voiceprint and typing-rhythm data | Destroyed once the purpose is met, or within 3 years of your last interaction with us, whichever comes first |
Voice-match and typing-rhythm scores | No longer than 90 days |
Extension status and heartbeat events | No longer than 90 days |
Detection outputs and session metadata | No longer than 90 days |
Access logs | No longer than 90 days |
Deletion is enforced automatically by our storage configuration rather than by manual action. Data is kept beyond these periods only where a documented legal hold applies, for example an active investigation, dispute or regulatory request.
Capture runs only during an eligible active interview, course, or task session with the timer running.
Still images are sampled at approximately one per minute rather than recorded continuously.
Camera, microphone and keystroke collection are excluded from screen monitoring at the product level. The extension collects key timing but not individual characters.
Microphone audio and typing data are collected only as described in Sections 4 and 4.2.
The browser extension collects input signals only on the project's task website and on outlier.ai, and only while your timer is running.
The extension never collects the text you type or the content of tasks.
Active-tab checks record only whether a site is on a fixed list of AI sites, not full web addresses. Tab-switch records contain hostnames only for the other site, plus the full Multi Mango page address, limited to https multimango.com pages of at most 2,048 characters and without any username or password.
Button-click and keystroke checks do not record labels, button text, page elements, which key you pressed or what you typed, and keystroke checks skip password, card-number and one-time-code fields.
Installed-extension checks record only extensions that match known fraud and automation tools.
Typing-rhythm data is reduced in your browser to key-hold durations and averaged letter-pair timings. We do not record which keys you press in order, so your typing cannot be reconstructed from it.
Captures of windows other than the Outlier task window that contain sensitive, health, financial or credential content are deleted once identified.
Only files selected for a specific investigation are decoded and examined.
Video, where enabled, is subject to a daily cap.
Automated tools scan captures and extension and verification signals and produce detections that may flag your account for review. This is profiling for fraud-prevention purposes.
Our detection models are continuously governed by human specialists who define the rules, conduct audits, and regularly refine our systems. Because of this ongoing human oversight, our tools may automatically apply enforcement actions—such as account suspension or withholding payment—based on a single capture in cases of severe violations. For less severe flags, our investigators typically evaluate patterns across multiple captures and other evidence before reaching a decision. If you have questions about the decision or want to submit an appeal, please reach out to the support team at support@outlier.ai.
Some actions are automatic. If the browser extension stops running, or a check indicates that someone other than the account holder may be working, your timer stops after a short grace period, and you can dispute any lost time. If we take action on your account, we will show you the evidence and respond to an appeal within 14 days.
Depending on where you live, you have some or all of the following rights. To exercise them, use the request channel in the Outlier Privacy Policy or contact us at privacy@scale.com. Captures are indexed to your contributor ID, so we can locate them. Extension, verification and score data are indexed the same way.
Right to object. Because we rely on legitimate interests, you may object to this processing at any time. If you object, we will stop processing your screen monitoring data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the data is needed for legal claims. We will assess each objection individually, tell you the outcome and explain our reasoning.
Right of access. You may ask for a copy of the screen monitoring data we hold about you. We may need to redact content relating to other people, or content that would reveal the operation of our fraud-detection methods.
Right to erasure. You may ask us to delete your screen monitoring data. In most cases it will already have been deleted automatically. We may decline where the data is needed for an open investigation or to establish or defend a legal claim.
Right to withdraw consent. You may withdraw your consent to biometric verification at any time and ask us to delete your voiceprint and typing-rhythm data. Withdrawal does not affect processing that took place before it.
Right to restriction. You may ask us to stop further processing while a dispute about accuracy or our legitimate grounds is being assessed.
Right to rectification. You may ask us to correct inaccurate data, including our interpretation of what a capture shows.
Right to portability. Where applicable, you may ask for a copy of your data in a machine-readable format.
Right to complain. You may complain to your local data protection authority based on your country of residence. You may also contact us first and we will try to resolve the matter.
Exercising any of these rights will not lead to retaliation, reduced work allocation or any other adverse consequence.
Screen monitoring data is stored and processed in the United States, in Amazon Web Services and Snowflake environments in the US West (Oregon) region. Extension audio uploads go to AWS S3 in us-west-2 (Oregon). Authorized Scale personnel may access it from the United States.
Where data is transferred from the EEA, the United Kingdom or Switzerland, we rely on the EU-US Data Privacy Framework and its UK Extension and Swiss-US Framework and the European Commission's Standard Contractual Clauses, with the UK International Data Transfer Addendum where applicable. You may request a copy of the relevant transfer mechanism, with commercial terms redacted, from the contact in Section 2.
If we change what we collect, why we collect it, how long we keep it or the tools we use, we will update this notice and tell you before the change takes effect on projects you work on.