Privacy
Last updated: September 19, 2026
Information we store
The service stores your account name, email, password hash, memberships, tasks, comments, attachments and worklogs. Passwords are not stored in plain text. An HttpOnly cookie maintains your session. Your language preference is stored in your browser.
How information is used
Information is used for authentication, access control, task management and integrations you enable. Google Analytics loads on public marketing and guide pages only after you choose Accept. It measures page views, signup button clicks and illustrative product interactions. Private /app workspaces are not tracked; issue content, account identifiers, email addresses, search text and URL query parameters are not sent. Advertising personalization is disabled. Analytics preferences and cookies are retained for up to 180 days. You can withdraw permission using Analytics preferences in the footer. Declining does not prevent use of the service. Google processes technical device and connection information during measurement. Server access logs may contain IP addresses for technical operations.
AI and email connections
When an AI provider is configured, the selected issue title and description are sent to that provider to produce a draft. MCP clients can read issue data within your permissions. Gmail and SMTP require separate configuration. Follow your company’s data-sharing rules before using integrations.
Google Gmail data
When a company administrator connects Gmail to a project, we request read-only access. Google tokens are encrypted on the server. For messages arriving in the inbox after connection, sender, subject, text, message/thread identifiers and attachments within size limits are stored as issues and comments in that project. Gmail messages are not modified, deleted or sent through this connection. Company and project permissions restrict access. Disconnecting stops imports and removes stored Google tokens; existing issues and backups remain subject to the retention policy. You can also revoke access from your Google account. Gmail data is not automatically sent to AI providers; when a user starts an AI or MCP operation for an issue, its authorized context may be shared for that operation. Google data is not used for advertising or general-purpose model training.
Retention and requests
Records remain stored while the workspace service is in use. Authorized administrators can use the supported JSON import preview. Contact your company administrator for account deletion and comprehensive data requests. Raise requests through your company administrator. A separate support email is not yet configured for this release. Do not upload sensitive personal information.