Document toolboxDocument toolbox

Data Security and Data Privacy Statement

Owned by Attila Bordás
Last updated: Sept 07, 2021
7 min read

Updated: 2020.04.06.

Introduction

This Privacy Policy explains what information EverIT Ltd. collects about you and why if you contact us in any form, use this website, our cloud services or our apps for Atlassian products (together, “Services”), what we do with that information, how we share it, and how we handle the content you place in our products and services.

By using Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, do not access or use our Services or interact with any other aspect of our business.

Legal environment

As a company registered in Hungary we operate under the regulations of Hungarian law. We have informed NAIH (Hungarian National Authority for Data Protection and Freedom of Information), our local authority about our activity, and we have been registered under number NAIH-101623. We are in compliance with the standards of the Atlassian platform with special regards to the Privacy Policy and to the Atlassian Marketplace Terms of Use.

We also operate an ISO 27001:2013 compliant information security management system (ISMS) which is audited regularly (but not certified at the moment).

Collected information

We collect anonymous information about you when you visit our Website.

We have access to and collect information about you that may include Personal Information (name, email address, telephone number, mailing address) and other information you provided to us when you contacted us in any form (email, provided resume/CV, etc).

We have access to and collect information about you, like email address, location, company name, SEN number, etc:

  • when you evaluate or purchase our server products,
  • when you evaluate or purchase our cloud products,
  • when you provide it directly to us (e.g. via email or raising a ticket in service desk).

Collection and use of data

Communication

You may provide information to us when contacting us in any form and contact details will be transferred between both parties. These informations are necessary in order to properly communicate with each other but it will not be used for any purpose.

When you send us an email, it will contain your email address and a list of all servers which the email has passed through to get to our email server. We may keep email messages for two years or more.

Websites

We collect anonymous website usage statistics on our Website (www.everit.biz) and on our products Atlassian Marketplace website: your browser session and geo-location data, device and network information, statistics on page views and sessions, information about your access and use of our Site, etc. We use such information to improve our Websites usability and create reports.

You can safely disable cookies in your web browser.

Google cookies

Everit Ltd. uses Google Analytics to analyse the use of the websites. Google Analytics generates statistical and other information about website use by means of cookies, which are stored on users’ computers. Google will store and use this information.

Google’s privacy policy is available at: http://www.google.com/privacypolicy.html

Data storage terms and data storage location (Cloud services)

  • Everit uses Amazon AWS for hosting Cloud apps to comply with all local laws. AWS has numerous security certifications and Everit implements many further security controls to safeguard data. 
  • Our hosting region is EU-Frankfurt.
  • Unless explicitely and differently specified in the app documentation, we do not store personal information (e.g. name, e-mail, address).
  • We store the unique ID of your Atlassian Cloud products and the necessary secret keys to act behalf on the currently logged in user.
  • Please read the documentation of the product for further details.

Account Data

Our Cloud Apps store data provided and generated by Atlassian, that are required for license validation, contract administration and communication with the customer instance.

Session Data

Our Cloud Apps store data resulting from each customer's use of the service and is distinguished from Customer Uploaded Data.

Error Logs data

Our Cloud Apps track errors of our Cloud Apps' resources. This includes for example AppKey, ClientId, BaseUrl, error messages. It is exclusively used in order to improve our service.

Backups

  • Our backup data is securely stored, unauthorized access of backup data is not possible.
  • We backup at least once a day, and we keep the backups at least for a month.

Account removal and data retention

  • Customer accounts may be removed any time by uninstalling the app from Cloud product.
  • Customer account information is retained by Everit for 30 days, after this period account information is unrecoverable deleted.

People and Access

Our support team have access to Cloud apps and may access customer data only for purposes of Cloud app health monitoring and performing system or Cloud app maintenance, and upon customer request via our support system. Only authorized Everit employees have access to Cloud app data.

This does not apply to Server apps, which are installed in the Customer’s premise. The Customer is responsible for securing access to the data they store in the Server apps,

Service related communication

As a Third Party Applications Vendor listed at Atlassian Marketplace we may be given access to your information provided by you when installing our application from Atlassian Marketplace like your name and email address, and any content you choose to use in connection with our applications. If you are a technical or billing contact listed on an Atlassian account, we may be given access to your details upon installation of our products. Please note that you are agreeing to the transfer of your Personal Information to Hungary to us. By providing your Personal Information, you consent to any transfer and processing in accordance with this Policy.

Atlassian is not responsible for the privacy, security or integrity of collected data.

Downloadable server products

The apps available on the Atlassian Marketplace, produced by Everit (Products), store data only on the server of the customer; Everit Ltd. does not access and does not store any of the data handled by these plugins.

By starting an evaluation period, purchasing a commercial or academic license of our Products, our customers accept the following:

  • As described in the Atlassian Marketplace Terms of Use and aware that in this case, Everit is the publisher, “You hereby explicitly acknowledge and authorize Atlassian to, in connection with your purchase of one or more of our Product(s), provide Publisher with the information provided by you in completing the purchase (including without limitation, your name, company name (if any), addresses (including e-mail address) and phone number).” “Publisher will receive personal information of the persons who are requesting a license and/or taking part in the transaction process from Atlassian.”
  • Everit will retain all personal information that is shared by Atlassian with Everit.
  • Everit will send automated emails to these contacts during the evaluation period.
  • Everit will retain personal information during the evaluation period. After this period, personal information is removed.
  • Everit will retain personal information during the active maintenance period and for as long as you are a business contact to us.

Cloud service products

The cloud apps available on the Atlassian Marketplace, produced by Everit (Products), store some data on our servers, but Everit Ltd. does not access and does not store any personal data handled by these apps.

By starting an evaluation period, purchasing a commercial or academic license of our Products, our customers accept the following:

  • As described in the Atlassian Marketplace Terms of Use and aware that in this case, Everit is the publisher, “You hereby explicitly acknowledge and authorize Atlassian to, in connection with your purchase of one or more of our Product(s), provide Publisher with the information provided by you in completing the purchase (including without limitation, your name, company name (if any), addresses (including e-mail address) and phone number).” “Publisher will receive personal information of the persons who are requesting a license and/or taking part in the transaction process from Atlassian.”
  • Everit will retain all personal information that is shared by Atlassian with Everit.
  • Everit will send automated emails to these contacts during the evaluation period.
  • Everit will retain personal information during the evaluation period. After this period, personal information is removed.
  • Everit will retain personal information during the active maintenance period and for as long as you are a business contact to us.

Product Support Channels

For support purposes, you may be able to contact us via email or through our support system. We use Jira Service Desk Server to manage our customer tickets. When you create an account and add a support request to our online support site, your request will be stored against your User profile details (username, Full Name, email address) that is required to use the Service Desk. You may also upload other personal data eg. further email addresses, documents uploaded, log files, etc. You will also receive email notifications about changes to your ticket. You can view information stored in our Service Desk by opening your “Profile” and “My Requests” page.

The customer data is stored on Everit's servers, in the Service Desk's database, and third party has no access to the data.

Marketing

Everit may use the collected data for further purposes, like marketing, sales proposals for other Everit Products, or surveys and research about Product development. Everit may send emails for our customers with active maintenance period containing Product news, tips, best practices.

Mailchimp

We use MailChimp to manage our email lists. MailChimp will store personal information that is shared by Atlassian with Everit (including your e-mail address, your name, company name (if any), addresses and phone number). There’s no third-party tracking in messages we send through MailChimp besides MailChimp’s own analytics, which may aggregate how many subscribers open a message or click the links inside.

MailChimp’s privacy policy is available at: http://mailchimp.com/legal/privacy

Accessing and updating personal stored data

Under the rights of GPDR, you can ask to be told what information we hold about you in our databases. You can request us to provide, modify, or delete stored information at the support@everit.atlassian.net

Customer Reference

Everit may use user review and/or company logo in sales presentations, marketing materials and press releases, and for promotional purposes. We will always try to contact the user or the company and request permission before we are using the user review and/or company logo.

Security disclosure

This section explains how and under what circumstances we notify our customers about security breaches or vulnerabilities and indicate how a user or security researcher should disclose a vulnerability found in our Add-on to us.

  • Security breaches or vulnerabilities with the proposed solution of the problem are published on our website.
  • Customers can report security breaches or vulnerabilities to: support@everit.atlassian.net

Changes To This Privacy Policy

This Privacy Policy is effective as of 2019.09.24 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.

Contact Us

If you have any questions, please contact us at: info@everit.biz