Data Security and Privacy Statement

Introduction

At FastGantt, protecting your privacy is our highest priority. We are committed to maintaining the confidentiality and security of your information while providing you with the best possible service. We follow a principle of data minimization, storing only the essential data required to deliver our Gantt chart functionality for Jira.

This Privacy Policy explains how Nirama Solutions AB ("we," "our," or "us") collects, uses, discloses, and safeguards your information when you use our FastGantt application (the "Service"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates. You will be deemed to have been made aware of, will be subject to, and will be deemed to have accepted the changes in any revised Privacy Policy by your continued use of the Service after the date such revised Privacy Policy is posted.

Information We Collect

Personal Information

We collect minimal personal information to provide our services:

• Account ID: Your Jira account identifier to associate data with your account
• Avatar URL: Your profile picture URL for display purposes within the application

We do not store any other personal information such as names, email addresses, or contact details beyond what is necessary for the application to function.

Project Data

To meet performance requirements and provide real-time Gantt chart functionality, we store the following project-related data:

• Issue ID/Key: Unique identifiers for Jira issues
• Issue Names: Titles of issues for display in the Gantt chart
• Issue Links: References to original Jira issues
• Project Configuration: Settings and preferences for Gantt chart display
• Task Dependencies: Relationships between tasks for Gantt chart visualization
• Timeline Data: Start dates, end dates, and duration information
• Resource Assignments: User assignments to tasks and projects
• Status Information: Current status of issues and tasks
• Priority Levels: Task and issue priority classifications
• Custom Fields: Project-specific custom field values relevant to Gantt functionality

Usage Data

We may collect information about how you access and use the Service ("Usage Data"). This Usage Data may include:

• Log Data: Information that your browser sends whenever you visit our Service, including your computer's Internet Protocol (IP) address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, and other statistics
• Device Information: Information about your device, including device type, operating system, and browser information
• Performance Data: Information about the performance of the Service, including response times and error rates
• Feature Usage: Information about which features of the Service you use and how frequently you use them

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

We use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our Service.

How We Use Your Information

We use the collected information for the following purposes:

Service Provision

• Providing Gantt chart visualization of your Jira projects
• Maintaining application performance and functionality
• Personalizing your experience within the application
• Ensuring data integrity and synchronization with Jira
• Processing and displaying project timelines and dependencies
• Managing user preferences and settings
• Providing customer support and technical assistance

Analytics and Improvement

• Analyzing usage patterns to improve our Service
• Monitoring and analyzing trends, usage, and activities in connection with our Service
• Conducting research and development to enhance our products
• Measuring the effectiveness of our Service and user experience
• Identifying and fixing bugs and technical issues

Communication

• Sending you technical notices, updates, security alerts, and support messages
• Responding to your comments, questions, and requests
• Providing customer service and support
• Notifying you about changes to our Service or this Privacy Policy

Legal Compliance

• Complying with applicable laws and regulations
• Responding to legal requests and preventing harm
• Protecting our rights, privacy, safety, or property, and that of our users
• Enforcing our terms of service and other agreements

Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Our comprehensive security measures include:

Technical Safeguards

• Encryption: All data is encrypted in transit using TLS 1.2 or higher and encrypted at rest using industry-standard encryption algorithms
• Access Controls: Multi-factor authentication and role-based access controls to ensure only authorized personnel can access your data
• Network Security: Firewalls, intrusion detection systems, and regular security monitoring
• Secure Development: Secure coding practices and regular security code reviews
• Infrastructure Security: Secure hosting infrastructure with regular security updates and patches

Organizational Safeguards

• Employee Training: Regular security awareness training for all employees
• Data Access Policies: Strict policies governing who can access user data and under what circumstances
• Incident Response: Comprehensive incident response procedures in case of a security breach
• Regular Audits: Regular security assessments and penetration testing
• Vendor Management: Careful vetting and monitoring of third-party service providers

Data Breach Response

In the unlikely event of a data breach, we will:

• Immediately investigate and contain the breach
• Notify affected users within 72 hours of discovering the breach
• Report the breach to relevant authorities as required by law
• Take immediate steps to prevent further unauthorized access
• Provide regular updates on our response and remediation efforts

Data Retention

We retain your data only for as long as necessary to provide our services and comply with legal obligations. Our data retention policies are as follows:

Automatic Data Deletion

Data is automatically purged when:

• You uninstall the FastGantt application from your Jira instance
• Your Jira account is deactivated or deleted
• Your organization's Jira instance is deactivated
• You request data deletion through our support channels
• We no longer need the data for the purposes outlined in this Privacy Policy

Retention Periods

• Project Data: Retained for the duration of your use of the Service plus 30 days for technical purposes
• Usage Data: Retained for up to 2 years for analytics and service improvement purposes
• Log Data: Retained for up to 1 year for security and debugging purposes
• Support Communications: Retained for up to 3 years for customer service purposes

Data Anonymization

After the retention period expires, we may anonymize your data by removing all personally identifiable information. Anonymized data may be retained indefinitely for research and development purposes.

Your Rights

Under applicable data protection laws, including the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

Right of Access

You have the right to request access to the personal data we hold about you, including:

• What personal data we have collected about you
• How we use your personal data
• Who we share your personal data with
• How long we retain your personal data

Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you. We will make the necessary corrections within 30 days of receiving your request.

Right to Erasure (Right to be Forgotten)

You have the right to request that we delete your personal data in certain circumstances, including when:

• The personal data is no longer necessary for the purposes for which it was collected
• You withdraw your consent and there is no other legal basis for processing
• The personal data has been unlawfully processed
• The personal data must be erased to comply with a legal obligation

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when the processing is unlawful.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.

Right to Withdraw Consent

If we process your personal data based on your consent, you have the right to withdraw that consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates applicable data protection laws.

Exercising Your Rights

To exercise any of these rights, please contact us at support@fastgantt.com. We will respond to your request within 30 days of receipt. We may need to verify your identity before processing your request.

Third-Party Services

FastGantt integrates with several third-party services to provide our functionality:

Atlassian Jira

Our primary integration is with Atlassian Jira. When you use FastGantt, we access your Jira data through the Atlassian Connect framework. This integration is governed by:

• Atlassian's Terms of Service and Privacy Policy
• Atlassian Connect security requirements
• Your organization's Jira instance security settings

Atlassian Marketplace

FastGantt is distributed through the Atlassian Marketplace. Atlassian may collect certain information about your use of our app, including:

• Installation and uninstallation events
• Usage statistics and analytics
• Billing and licensing information

Cloud Hosting Services

We use secure cloud hosting services to store and process your data. These services are selected based on their security certifications and compliance with international data protection standards.

Data Processing Agreements

We have data processing agreements in place with all third-party service providers to ensure they handle your data in accordance with applicable data protection laws and our privacy standards.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other appropriate safeguards as required by applicable law

Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this Privacy Policy, we will:

• Post the updated Privacy Policy on our website
• Update the "Last updated" date at the top of this Privacy Policy
• Notify you through the Service or via email if the changes are significant
• Obtain your consent if required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

Nirama Solutions AB