Privacy Policy

This Privacy Policy explains how JustVision ("we," "us," or "our") collects, uses, and protects information when you use our application for Atlassian Confluence and Jira.

1. Information We Collect

1.1 Information You Provide Directly

When you use JustVision, you provide:

• API Keys: Your Anthropic API key (or future AI provider keys) for diagram generation
• Atlassian Account Information: Basic profile information from your Confluence/Jira account (name, email, user ID)
• Configuration Settings: Your preferences and settings within the app

1.2 Information Automatically Collected

We automatically collect minimal usage data:

• Usage Analytics: Number of diagrams created, features used, error logs
• Technical Information: Browser type, device type, Confluence/Jira version
• Performance Data: Response times, error rates for service improvement

1.3 Information We Do NOT Collect

2. How We Use Your Information

We use collected information only for:

• Service Provision: To enable diagram creation and app functionality
• Authentication: To verify your identity within Confluence/Jira
• Customer Support: To respond to your inquiries and provide assistance
• Service Improvement: To analyze usage patterns and improve features
• Security: To detect and prevent fraud, abuse, and security incidents
• Legal Compliance: To comply with applicable laws and regulations

3. How Your Data Flows

3.1 Diagram Creation Process

When you create a diagram:

1. You enter a description in JustVision within Confluence/Jira
2. Your browser encrypts and sends the description directly to Anthropic (or chosen AI provider) using your API key
3. The AI provider processes your request and returns the diagram
4. The diagram is displayed in your browser and saved to your Confluence/Jira instance
5. We never see or store this data—it bypasses our servers entirely

3.2 API Key Storage

Your API keys are:

• Stored encrypted in your Atlassian instance database
• Never transmitted to our servers
• Only accessible by authorized users in your organization
• Can be deleted at any time by you

4. Data Sharing and Third Parties

4.1 AI Service Providers

Anthropic (Claude): Your diagram descriptions are sent directly to Anthropic. Their processing of this data is governed by Anthropic's Privacy Policy and Terms of Service. We recommend reviewing their policies at console.anthropic.com.

4.2 Atlassian

JustVision operates within the Atlassian ecosystem. Atlassian may collect information about app usage as part of their platform analytics. This is governed by Atlassian's Privacy Policy.

4.3 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.4 Service Providers

We may share limited data with service providers who assist in:

• Hosting and infrastructure (minimal metadata only)
• Analytics and monitoring (anonymized data)
• Customer support platforms

All service providers are contractually obligated to protect your information and use it only for specified purposes.

5. Data Security

5.1 Security Measures

We implement industry-standard security measures:

• Encryption: All data transmission uses TLS/SSL encryption
• API Key Protection: Keys stored with AES-256 encryption
• Access Controls: Role-based access with principle of least privilege
• Security Monitoring: Continuous monitoring for suspicious activity
• Regular Audits: Periodic security assessments and updates

5.2 Your Responsibilities

You are responsible for:

• Maintaining the confidentiality of your API keys
• Using strong passwords for your Atlassian account
• Monitoring access to your Confluence/Jira instance
• Reporting any security concerns immediately

6. Data Retention

6.1 What We Retain

• Account Information: Retained while your subscription is active and for up to 90 days after cancellation
• Usage Analytics: Aggregated and anonymized data retained for up to 24 months
• Support Records: Retained for up to 3 years for quality assurance

6.2 What We Don't Retain

Your diagram content and descriptions are never stored on our servers, so there's nothing for us to retain or delete.

6.3 Data Deletion

Upon account deletion:

• Your API keys are immediately purged from the system
• Personal account information is deleted within 90 days
• Anonymized usage statistics may be retained for analytical purposes

7. Your Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

• Request a copy of personal information we hold about you
• Export your data in a structured, machine-readable format

7.2 Correction and Deletion

• Correct inaccurate personal information
• Request deletion of your personal information (right to be forgotten)

7.3 Opt-Out and Restriction

• Opt out of non-essential data collection
• Restrict processing of your personal information
• Object to processing based on legitimate interests

7.4 Exercising Your Rights

To exercise these rights, contact us through the support channels in the app. We will respond within 30 days.

8. International Data Transfers

Your information may be processed in countries other than your own. When transferring data internationally, we ensure adequate protections through:

• Standard contractual clauses approved by relevant authorities
• Adherence to Privacy Shield principles (where applicable)
• Data processing agreements with all service providers

9. Children's Privacy

JustVision is not intended for use by children under 16. We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it immediately.

10. Cookies and Tracking

10.1 Cookies We Use

• Essential Cookies: Required for authentication and basic functionality
• Analytics Cookies: To understand how you use the app (you can opt out)
• Preference Cookies: To remember your settings

10.2 Third-Party Cookies

Atlassian and AI providers may set their own cookies as part of their services. These are governed by their respective privacy policies.

11. California Privacy Rights (CCPA)

If you're a California resident, you have additional rights:

• Know what personal information we collect and how it's used
• Request deletion of personal information
• Opt out of sale of personal information (we don't sell data)
• Non-discrimination for exercising your rights

12. European Privacy Rights (GDPR)

If you're in the EU/EEA, you have rights under GDPR:

• Data portability
• Right to object to processing
• Right to restrict processing
• Right to lodge a complaint with supervisory authority

Legal Basis for Processing: We process your data based on:

• Contract performance (to provide the service)
• Legitimate interests (service improvement, security)
• Consent (for optional features)
• Legal obligations (compliance requirements)

13. Changes to This Policy

We may update this Privacy Policy to reflect:

• Changes in our practices
• Legal or regulatory requirements
• New features or services

We will notify you of material changes by:

• Posting a notice in the app
• Sending an email to registered users
• Updating the "Last Updated" date

Continued use after changes constitutes acceptance of the updated policy.

14. Contact Us

For privacy-related questions or concerns:

• Use the support channels provided in JustVision
• Contact us through the Atlassian Marketplace listing

For formal privacy requests or data protection officer inquiries, please use our designated privacy contact channels.

15. Compliance and Certifications

JustVision and our infrastructure partners maintain:

• SOC 2 Type II compliance
• GDPR compliance
• CCPA compliance
• Regular security audits

---

Summary: We take your privacy seriously. We don't store your diagrams or descriptions—they go directly to the AI provider using your own API key. We collect only minimal information needed to provide and improve the service, and we never sell your data.