Scrum Companion data security and privacy statement

Your privacy is important to us, and so is being transparent about how we collect, use, and share information about you. This policy is intended to help you understand:

• What information we collect about you

• How we use information we collect

• How we share information we collect

• How we store and secure information we collect

• How to access and control your information

• How we transfer information we collect internationally

• Miscellaneous

What information we collect about you

We collect information about you when you provide it to us, when you use our Services, and when other sources provide it to us, as further described below.  

Account and Profile Information

Alluvium doesn’t collect any account or profile information from users, all information regarding the user can and may be retrieved via REST API calls if and when it becomes necessary. Retrieval of profile information would be solely facilitated by Jira in the event of its need.

On Alluvium’s web app, the approach might differ should we be interested in organizing user interactions based on their profile. In this case, we would collect account/profile information directly from users.

How we use information we collect

The Alluvium Scrum Companion app integrates with your Atlassian product. This remote service can:

·         Read data from the host application

·         Act as User

·         Full Administration

·         Space Administration

·         Project Administration

How we share information we collect

No customer information is shared with a third party or external applications. Information such as user profile might be required on the Alluvium’s web app if there is a requirement for organizing user interaction based on their profile. Users are also responsible for the data they download.      

How we store and secure information we collect

Our process and operations ensure that customer information is not stored. Rather they serve as forms of identification to better serve our customers and their individual needs.

How to access and control your information

Information is available from host application while a session is active. Only downloaded data is accessible after the end of a session.

Miscellaneous

Except as has not been and would not reasonably be expected to be, individually or in the aggregate, material to the Company and its Subsidiaries, taken as a whole, the Company and the Company Subsidiaries

(i)            are and have been in compliance with all Privacy Statements;

(ii)           are and have been in compliance with all applicable Privacy Laws; and

(iii)          do not collect, use, process, disclose, transfer, and dispose of Personal Data. To the knowledge of the Company, except has not been and would not reasonably be expected to be, individually or in the aggregate, material to the Company and its Subsidiaries, taken as a whole, neither the Company nor any Company Subsidiary has in its period of operation so far, suffered any unauthorized access to, or acquisition of, Personal Data in the custody or control of the Company or any Company Subsidiary. To the knowledge of the Company, there are no pending or threatened claims, audits, or investigations (formal or informal) against the Company or the Company Subsidiaries by any Person alleging that the conduct of the Company, the Company Subsidiaries, or any third party with whom the Company or the Company Subsidiaries have entered into a contract or agreement in connection with the collection, use, processing, disclosure, transfer, or disposal of Personal Data infringe or otherwise violate any Privacy Laws and that would reasonably be expected to be material, individually or in the aggregate, to the Company and its Subsidiaries, taken as a whole. Except as has not been and would not reasonably be expected to be, individually or in the aggregate, material to the Company and its Subsidiaries, taken as a whole, the execution, delivery, and performance of this Agreement will not cause, constitute, or result in a breach or violation of any Privacy Laws or any contractual obligation of the Company and/or the Company Subsidiaries.