Privacy Policy

This Privacy Policy explains how Sprint Guage (“we”, “us”) collects, uses, discloses and safeguards information when you visit https://funavry-jira-landing.vercel.app or use Sprint Guage (the “Service”). By using the Service you agree to the practices described here.

1. Information we collect

Information you provide

• Account data — name, email address, password hash, profile picture and organisation name, collected when you register.
• Content data — the projects, issues, comments, attachments, documents and time entries you and your team create in the Service.
• Billing data — company name, billing address and tax identifiers. Card details are collected and stored by our payment processor; we never receive or store full card numbers.
• Communications — messages you send us by email or through the contact form on this site.

Information collected automatically

• Usage data — pages viewed, features used, and the timing of those actions, used to understand which parts of the product need work.
• Device and log data — IP address, browser type and version, operating system, referring URL and timestamps.
• Cookies — see the Cookies section below.

2. How we use information

We process personal data to:

• Provide, operate and maintain the Service;
• Authenticate you and keep your account secure;
• Process payments and send billing notices;
• Respond to support requests and other enquiries;
• Detect, investigate and prevent fraud, abuse and security incidents;
• Improve the product through aggregate usage analysis;
• Send service announcements, and — only with your consent — marketing;
• Comply with legal obligations.

3. Legal bases for processing (GDPR)

Where the GDPR applies, we rely on the following legal bases:

4. How we share information

We do not sell personal data. We share it only in these circumstances:

• Within your organisation — content you create in a workspace is visible to other members of that organisation according to the permissions its administrators set.
• Sub-processors — vendors who process data on our behalf under contract, including cloud hosting, database hosting, email delivery, error monitoring and payment processing. A current list is available on request.
• Legal requirements — where required by law, subpoena or other valid legal process, or to protect the rights, property or safety of Sprint Guage, our users or the public.
• Business transfers — in connection with a merger, acquisition or sale of assets, with notice to you before your data becomes subject to a different policy.

5. Data retention

We keep account and content data for as long as your organisation has an active account. After an account is closed, content is retained for 30 days to allow recovery, then deleted from production systems. Encrypted backups age out within a further 90 days. Records we must keep for tax or accounting reasons are retained for the statutory period.

6. Security

We use encryption in transit and at rest, per-organisation tenant isolation enforced on every request, optional two-factor authentication, rate limiting on authentication endpoints, and a full audit log. Details are on our Security page. No system is perfectly secure, and we cannot guarantee absolute security.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to receive a portable copy, and to withdraw consent at any time. Under the CCPA, California residents additionally have the right to know what is collected and to opt out of any sale of personal information — we do not sell personal information.

To exercise any of these rights, email hello@sprintguage.com. We respond within 30 days. You also have the right to complain to your local data protection authority.

8. Cookies

We use two categories of cookie:

• Strictly necessary — session and authentication cookies and CSRF tokens. The Service cannot function without them, and they are set without consent as permitted by law.
• Analytics — privacy-preserving, aggregate usage measurement. These are set only where consent is required and given.

We do not use advertising or cross-site tracking cookies. You can clear or block cookies through your browser settings, though blocking necessary cookies will prevent you from signing in.

9. International transfers

We may process data in countries other than your own. Where data is transferred out of the European Economic Area or the United Kingdom, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

10. Children

The Service is not directed to anyone under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. Material changes will be announced by email or in-product notice at least 30 days before they take effect. The date at the top of this page always reflects the most recent revision.

12. Contact us

Questions about this policy or our handling of personal data can be sent to hello@sprintguage.com, or through our contact page.