• This Privacy Policy will be referred as (“Policy”)
• Scope 360 AB is the company providing the Chrome extension and related services, which will be referred to as (“Service Provider”, “we” or “us”).
• Scope360° Chrome extension and any related services provided by the Company, which will be referred to as (“Service”).
• Any individual or entity using the Service is referred to as (“Customer” or “you”).

Scope 360 AB, Swedish Company Registration Number SE559362049401 is responsible for the personal data you provide to us through purchases and other contacts with us and is responsible for processing these.

• User Data: To configure the Service, we collect a hash of your Jira instance URL and a hash of your email address. This information helps us provide a relevant configuration for your use. This information is sent to the Service’s application server.
• Login Data: If you need to log in to Jira, your Jira Username and password will be stored encrypted in your browser’s local storage. This information is not sent anywhere except to the Jira instance.
• Usage Data: To understand how our application is used, we collect the following data and send it to Google Analytics as page events:
  - Title of the page
  - URL of the page
  - The name of the perspective showing the page
  - The name of the view shown
  
• Subscription Data: When you subscribe to the Service, we collect certain information necessary for managing your subscription. This includes your name, email address, payment information, and subscription details (e.g., plan type, billing cycle). This information is sent to our payment processor for transaction processing.

Data Retention: We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. The retention period varies depending on the type of data and the purpose for its collection. For instance, subscription data is retained for the duration of your subscription and any subsequent period required for legal or operational purposes.

We use cookies to improve your experience on our website and to understand how our Service is used. Cookies are small data files stored on your device. You can set your browser to refuse cookies, but some features of the Service may not function properly without them.

We use the information we collect to:

• Configure and personalize your use of the Service.
• Provide and manage login credentials for Jira.
• Manage and process your subscription to the Service.- Title of the page
  
• Analyze usage patterns to improve the Service.

We do not share your data with any third parties, except as necessary to operate the Service (e.g., sending usage data to Google Analytics, processing payments through our payment processor).

We use encryption and other security measures to protect your data stored in the browser’s local storage and on our servers.

You have the following rights regarding your personal data:

• Right to be informed about the collection and use of your data.
• Right to access your personal data.
• Right to rectify inaccurate or incomplete data.
  
• Right to erasure under certain circumstances.
• Right to restrict processing under certain circumstances.
• Right to data portability.
• Right to object to processing under certain circumstances.

We process your personal data based on the following legal grounds:

• Consent: Where you have given us explicit consent to process your data.
• Contract: Where the processing is necessary for the performance of a contract with you.
• Legal Obligation: Where we need to comply with a legal obligation.
  
• Legitimate Interests: Where processing is necessary for our legitimate interests, and your interests and fundamental rights do not override those interests.

You can withdraw your consent for data processing at any time.

We strive to ensure that your personal data is processed within the European Economic Area (EEA) to the greatest extent possible and in all our IT systems. However, your data may also be transferred to and processed in a country outside the EEA (a so-called “third country”). Such transfer will only occur to recipient countries with an adequate level of protection and in accordance with applicable legislation. If a transfer is made to partners for a service in the USA, this will only be to companies that are covered by the so-called “Privacy Shield,” which is an agreement on the protection of personal data between the EU and the USA.

We may update this Policy from time to time. We will notify you of any significant changes by posting the new Policy on our website or through the Service.

If you have any questions about this Policy, please contact us. info@scope360.se