Privacy Policy

This policy explains what data Claused (“we”, “us”) processes, why, and where it goes. Claused is an independent software vendor established in Georgia. The policy covers two things: this website (claused.io) and our apps distributed through platform marketplaces. We wrote it to be read, not skimmed past.

The short version

We collect as little as we can. The website sets no advertising or tracking cookies. Our apps are built around data minimization, and where the platform makes it possible your data never leaves that platform at all. The only personal data we retain is what you choose to send us through the contact forms.

Our apps

Data minimization is the default: an app reads only what its documented functionality requires, stores only what it must, and requests read-only access unless a feature explicitly needs more — and then the documentation says so. Where the platform makes it possible, we go further and keep data from leaving the platform entirely: our current Atlassian apps run on Atlassian’s Forge infrastructure, store their working data (such as issue snapshots and aggregate history) inside your own installation, and send nothing to servers operated by us or by third parties on our behalf.

Each app’s security documentation states specifically what it accesses and where its data lives. Uninstalling an app removes its stored data under the platform’s data lifecycle. Billing and licensing for marketplace purchases are handled by the marketplace operator (for Atlassian apps, Atlassian); we receive licensing and aggregate usage information from the marketplace, never your payment details.

Our role. For the data an app processes inside your own platform instance, you are the controller and we are a processor: we act on your configuration and the app’s documented functionality, never for purposes of our own. The Data Processing Agreement sets out the categories of data, how long each is kept, the security measures, and the one channel through which we are able to see any of it at all.

This website

• Hosting. The site is served by Vercel Inc. (USA). Like any web host, Vercel processes standard request data (IP address, user agent) in short-lived operational logs.
• Analytics. We use Vercel Web Analytics, a cookieless, aggregate measurement service that does not build visitor profiles or track you across sites. We use no advertising trackers.

Contact forms

When you submit feedback, a feature request, or a project proposal, here is exactly what happens:

1. Cloudflare, Inc. (USA) performs an automated bot check (Turnstile). As part of that check Cloudflare processes technical signals from your browser, including your IP address. This is transient verification, not profiling by us.
2. Our form endpoint (running on Vercel) validates the submission in memory. We do not persist your IP address or user agent.
3. The submission — your message, the form category, the related app, the submission time, and your email address only if you chose to provide one — is stored as an entry in a private issue tracker hosted by GitHub, Inc. (USA), accessible only to us.

We use this information solely to act on your request and, if you provided an email address, to reply. We do not sell it, share it beyond the processors above, or use it for marketing.

Processors

Processor	Role	Data involved
Vercel Inc.	Website hosting, form endpoint compute, cookieless analytics	Request metadata (transient), aggregate page statistics
Cloudflare, Inc.	Bot protection for forms; DNS	IP address and browser signals during verification (transient)
GitHub, Inc.	Storage of form submissions in a private tracker	Your message and optional email
Platform operators (e.g. Atlassian)	App distribution, billing, app runtime	Per their own terms and privacy policies

Where these processors are located outside the EEA/UK, transfers rely on recognized safeguards such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses, as documented by each processor.

Retention

Form submissions are kept for as long as needed to act on them and to maintain a record of product decisions, and are deleted on request. Operational logs at our processors expire on their standard short schedules.

Your rights

Depending on your jurisdiction (including under the GDPR), you may have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and to lodge a complaint with a supervisory authority. For any request, use the contact form — asking us to delete your submission is honored as a deletion request, including your email address if you provided one.

Changes

We update this page when our practices change and adjust the date above. Material changes to how an app handles data are also recorded in that app’s changelog.