Privacy Policy

Last updated: April 23, 2026

Introduction

Axon-Jira ("Axon-Jira", "we", "us", or "our") provides a project management platform at axonjira.com. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, and the rights you have over it.

By creating an account or using Axon-Jira, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the service.

Information We Collect

We collect personal data in the following categories:

• Account data — the email address, username, display name, and password hash stored by Firebase Authentication when you sign up. If you sign in with Google, GitHub, or Slack, we receive the basic profile information those providers expose (name, email, avatar, and provider identifiers such as your GitHub username or Slack team and user IDs).

• Profile data — optional details you add to your profile, such as a profile picture, timezone, theme preference, and linked external accounts.

• Workspace content — projects, tasks, comments, attachments, file uploads, labels, sprint plans, time-tracking entries, and any other content you or your teammates create inside the platform.

• Communication data — messages you send to support or feedback you submit through the app, including the contents of those messages.

• Technical data — your IP address, browser type and version, operating system, device identifiers, approximate location derived from your IP, referring URL, request timestamps, and error logs generated while you use the service.

• Cookies and local storage — see the "Cookies & Local Storage" section below.

We do not knowingly collect payment card details. Any future billing will be handled by a PCI-compliant processor that we will identify at that time.

How We Use Your Information

We process your personal data for the following purposes, and on the following legal bases under the EU GDPR and the Turkish Personal Data Protection Law (KVKK, Law No. 6698):

• To provide the service — create and secure your account, render your workspaces, sync data between devices, and deliver in-product notifications. Legal basis: performance of a contract.

• To communicate with you — respond to support requests, send service-related notices (security alerts, policy changes, account actions), and — only if you opt in — send email notifications about events in your workspace. Legal basis: legitimate interests and, for opt-in notifications, your consent.

• To improve and secure the service — monitor for abuse, debug errors, analyze aggregate usage to identify and fix problems, and enforce our Terms. Legal basis: legitimate interests.

• To comply with the law — respond to valid legal requests, retain records required by tax or accounting obligations, and defend our rights. Legal basis: legal obligation and legitimate interests.

We do not sell your personal data and we do not use it for behavioral advertising.

Data Sharing & Third Parties

We do not share your personal data with third parties except as described here. The providers below act as processors on our behalf and are contractually required to handle data only on our instructions:

• Google Firebase (Google LLC, United States) — Authentication, Firestore database, Cloud Storage, Cloud Functions, and App Hosting. Firebase hosts the majority of your account and workspace data.

• Resend (Resend, Inc.; EU processing region: Ireland) — transactional email delivery for account, security, and opt-in notification messages.

• Cloudflare (Cloudflare, Inc., United States) — DNS, CDN, and email routing for the axonjira.com domain.

• Google LLC — OAuth sign-in, if you choose to sign in with a Google account.

• GitHub, Inc. — OAuth sign-in and the optional GitHub integration, if you connect GitHub.

• Slack Technologies, LLC — the optional Slack workspace integration, if you link Slack.

When you invite a teammate or share a project, the content you choose becomes visible to those users inside Axon-Jira. That disclosure is controlled by you, not by us.

We may also disclose data (a) to comply with a lawful request from a competent authority, (b) to protect our rights, users, or the public from harm or fraud, or (c) in connection with a merger, acquisition, or sale of assets — in which case we will give you notice before your data becomes subject to a different privacy policy.

Data Storage & Retention

Your data is stored on Google Firebase infrastructure in the United States (primary region: us-central1). Email delivery data is processed by Resend in the European Union (Ireland, eu-west-1). By using the service, you understand that your data will be transferred to and stored in these jurisdictions. Where personal data leaves your country, we rely on the processors' Standard Contractual Clauses or equivalent safeguards for international transfers.

We keep your data while your account is active. If you delete your account, we remove your personal profile and workspace content from our live systems within 30 days, except where we are required to retain certain data for legal, tax, accounting, fraud-prevention, or dispute-resolution purposes. Backup copies may persist in encrypted, access-controlled form for up to 90 days before they are overwritten. Aggregated or anonymized data that can no longer identify you may be retained indefinitely for analytics and product-improvement purposes.

We apply industry-standard measures to protect your data in transit (TLS) and at rest (Google-managed encryption). No system is perfectly secure, and we cannot guarantee absolute security.

Cookies & Local Storage

We use cookies and browser local storage for the following purposes:

• Strictly necessary — authentication session cookies set by Firebase Authentication, cookies that remember your locale and theme, and a cookie-consent preference cookie that records your choice on the consent banner. These cannot be disabled without breaking core functionality.

• Functional — local-storage entries that remember UI state such as your dashboard layout, collapsed panels, and recently opened projects.

We do not use third-party advertising, retargeting, or cross-site tracking cookies.

You can clear cookies and local storage at any time from your browser settings. Doing so will sign you out and reset non-synced UI preferences.

Your Rights

Depending on where you live, you have the following rights over your personal data under the GDPR, the Turkish KVKK, and similar laws:

• Access — request a copy of the personal data we hold about you. • Rectification — correct inaccurate or incomplete data. • Erasure — ask us to delete your data ("right to be forgotten"), subject to legal retention obligations. • Restriction — ask us to limit how we process your data while a dispute is resolved. • Portability — receive your data in a structured, machine-readable format. • Objection — object to processing we carry out on the basis of legitimate interests. • Withdraw consent — where processing is based on your consent, you can withdraw it at any time without affecting earlier processing. • Complaint — lodge a complaint with your local supervisory authority. In Turkey that is the Kişisel Verileri Koruma Kurumu (KVKK); in the EU, your national data protection authority.

You can exercise most of these rights directly from your Profile settings (edit your details, manage email preferences, delete your account). For anything else, email info@axonjira.com with the subject "Privacy request" and we will respond within 30 days.

Children's Privacy

Axon-Jira is not directed at children under 16. We do not knowingly collect personal data from anyone under that age. If you are a parent or guardian and believe your child has provided us with personal data, email info@axonjira.com and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time — for example when we add new features, change processors, or adapt to new legal requirements. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you by email or an in-app notice before the change takes effect. Your continued use of the service after that date means you accept the updated Policy.

Contact Us

Axon-Jira Email (general & privacy requests): info@axonjira.com Email (security & vulnerability reports): security@axonjira.com Email (product support): support@axonjira.com Website: https://axonjira.com

For privacy requests, please include enough information for us to verify your identity and locate the data you are asking about.