Privacy Policy

Effective Date: 12.12.2024

1. Introduction

Welcome to Almarise’s Privacy Policy. This document describes how we collect, use, store, and protect personal data when you interact with our applications, services, and website. We are committed to safeguarding your privacy and ensuring compliance with relevant data protection laws, including the General Data Protection Regulation (GDPR) and other applicable national regulations.

The Almarise Entity identified below ("Almarise," "we," "our," or "us") is the data controller for personal data processed in connection with our applications and services listed on the Atlassian Marketplace. This policy complements our End User License Agreement (EULA) which governs the terms of use for our software.

By using our applications, you acknowledge that you have read and understood this Privacy Policy. Should you have questions or need further information, please contact us using the details at the end of this policy.

We sell our Products through two affiliated entities (each an “Almarise Entity”): 

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• Personal Data: Information that relates to an identified or identifiable individual, including name, email address, IP address, billing information, and any other details that can directly or indirectly identify a person.
• Controller: The entity that determines the purposes and means of processing Personal Data. 
• Processor: Any third party that processes Personal Data on behalf of the Controller. Almarise may engage certain Processors to assist in the provision of services described in this Privacy Policy.
• Processing: Any operation performed on Personal Data, such as collection, storage, use, transfer, or deletion.
• User: An individual or entity who uses our applications or services and is subject to this Privacy Policy.
• Service: Any application, website, or service provided by Almarise, including those available on the Atlassian Marketplace.
• Cookies: Small text files placed on a User’s device that help us analyze usage, provide a personalized experience, and support essential service functions.
• Data Subject: The individual to whom Personal Data relates, typically the User of our services.

3. Data Collected

Almarise collects various types of Personal Data to provide and improve our services. This includes data provided directly by users, data collected automatically, and data obtained through integrations with Atlassian products or other third-party applications.

3.1 Data Provided by Users

We collect the following types of Personal Data directly from users when they interact with our services:

• Contact Information: This may include your name, email address, phone number, and company name, provided when you create an account, request support, or communicate with us.
• Billing Information: Payment details, such as billing address and payment method, collected when you purchase our applications or services.
• Support and Communication Data: Information provided when you contact customer support, including messages, attachments, and responses to surveys.
• Preferences and Feedback: Responses to optional surveys, feedback forms, and any additional information you choose to share about your experience.

3.2 Data Collected Automatically

When you use our services, certain data is collected automatically to ensure optimal performance and enhance the user experience:

• Usage Data: Information on how you interact with our applications, including accessed features, time spent, pages visited, and in-app actions.
• Device and Technical Information: Details about the device you use to access our services, such as IP address, browser type, operating system, and language preferences.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to collect data about your browsing behavior. More information on managing cookies can be found in Section 12.

3.3 Data Collected through Integrations

Our applications may integrate with Atlassian products and other third-party platforms, where additional data may be collected:

• Account and Profile Data: Information from your Atlassian account, such as your profile details and permissions, necessary to authenticate and provide services within the Atlassian environment.
• Application Usage Data: Data on your usage of Atlassian-connected services and apps, including logs and configuration data.
• Third-Party Data: Data made available by third-party integrations based on permissions and settings within those applications.

3.4 Children’s Privacy

Our services are not directed at individuals under the age of 16, and we do not knowingly collect Personal Data from children. If we become aware that we have collected data from a child, we will delete it in accordance with applicable laws.

4. Purpose of Data Processing

Almarise processes Personal Data to deliver, improve, and support our services. Specific purposes include:

• Service Delivery and Account Management: To verify accounts, provide access, and manage user settings.
• Customer Support: To assist with support inquiries and ensure a quality user experience.
• Product Improvement and Development: To analyze usage trends and enhance our services.
• Security and Fraud Prevention: To detect and prevent unauthorized access or misuse.
• Marketing and Communications: To notify users of updates and relevant product information.

5. Legal Basis for Processing (GDPR)

Our processing of Personal Data is based on the following legal grounds:

• Performance of a Contract: To provide the services as agreed upon with users.
• Legitimate Interests: To enhance our services, ensure security, and conduct marketing activities.
• Consent: Where required, such as for optional communications. Users can withdraw consent at any time.
• Legal Obligations: For compliance with legal and regulatory requirements.

6. Data Sharing and Disclosure

We share data only as necessary for our service delivery, as follows:

• Third-Party Service Providers: Such as hosting, payment processing, and analytics, who are required to comply with GDPR or equivalent data protection standards.
• Legal Compliance and Protection: If legally required or to protect rights and safety.
• Business Transfers: In case of a merger or acquisition, with continued data protection by the acquiring entity.
• Aggregated and Anonymized Data: Shared for analysis without identifying individual users.

7. Data Processing Agreements (DPA)

Almarise offers a Data Processing Agreement (DPA) for users processing personal data through our services, ensuring GDPR compliance. To request a copy, please contact us using the information at the end of this policy.

8. International Data Transfers

If your data is transferred outside the EEA, we use Standard Contractual Clauses or equivalent measures to ensure adequate data protection.

9. Data Retention

We retain Personal Data only as long as necessary for service provision or legal requirements:

• Service Provision: For the duration of your use.
• Legal Obligations: In compliance with applicable regulations.
• Data Deletion: Upon account termination, data is deleted or anonymized, except where retention is legally required.

10. Security Measures

Almarise applies strong security measures to protect your data:

• Encryption: SSL/TLS encryption for data transmission.
• Access Controls: Restricted access to Personal Data.
• Regular Security Assessments: Including vulnerability scans and penetration tests.
• Data Breach Notification: We notify affected users and authorities in the event of a breach.

11. User Rights

You may have the following rights under GDPR and similar laws:

• Right to Access: Request access to the data we hold about you.
• Right to Rectification: Request corrections to your data.
• Right to Deletion: Request data deletion, subject to legal retention requirements.
• Right to Restrict Processing: Request limited processing under certain conditions.
• Right to Data Portability: Receive data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent for optional data processing.
• Right to Lodge a Complaint: Contact a data protection authority if needed.

12. Cookies and Tracking Technologies

Almarise uses cookies to improve user experience. Types of cookies include:

• Essential Cookies: Required for service functionality.
• Performance and Analytics Cookies: To understand usage patterns.
• Functional Cookies: To remember user preferences.
• Marketing Cookies: To provide targeted ads.

Managing Cookie Preferences

You can manage cookie preferences through browser settings or by adjusting settings on our website’s cookie banner.

13. Policy Updates

We may update this Privacy Policy periodically. Material changes will be communicated through our website or directly within our applications. The Effective Date indicates the latest version of this policy.

14. Jurisdiction-Specific Privacy Rights

If you are a resident of a jurisdiction with specific privacy rights beyond those provided by the GDPR, such as the California Consumer Privacy Act (CCPA), you may have additional rights. These may include the right to request details about the data we collect, the right to request data deletion, and the right to opt out of data sales, where applicable.

For more information or to exercise these rights, please contact us at privacy@almarise.com

15. Contact Information

For any privacy-related questions or requests, please contact us at:

Almarise Robert Dzido S.K.A Email: privacy@almarise.com
Address: Owalna 43,  05-420 Józefów, Poland

Phone: +48 (22) 354 63 13

We are committed to addressing any inquiries promptly and ensuring that your data privacy rights are respected.