Privacy Policy

Account Information. When you create an account, we collect your name, email address, organization name, and password (stored in hashed form).

Integration Data. When you connect Jira and/or GitHub, we access project data through read-only API connections. This includes issue metadata (titles, statuses, assignees, timestamps), pull request metadata (titles, authors, reviewers, timestamps, merge data), and repository and board configurations. We do not access source code contents, private messages, or credentials stored in those platforms.

Usage Data. We automatically collect information about how you interact with the Service, including pages viewed, features used, browser type, and IP address.

Payment Information. Payment processing is handled by Stripe. We do not store credit card numbers or bank account details on our servers.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Compute engineering metrics (throughput, cycle time, WIP, etc.) from your integration data
• Send transactional emails (account verification, password resets, scheduled reports)
• Process payments and manage your subscription
• Respond to support requests
• Monitor Service performance and security

Each organization’s data is logically isolated. Contributors, metrics, and integration data belonging to one organization are never accessible to users of another organization. All database queries are scoped to the authenticated user’s organization.

We retain your integration data according to your subscription plan’s data retention limits (30 days for Free plans, up to 2 years for paid plans). When data exceeds the retention window, it is automatically and permanently deleted. Account information is retained for as long as your account is active.

If you delete your account, we will delete your personal information and integration data within 30 days, except where retention is required by law.

We do not sell, rent, or trade your personal information. We may share information with:

• Service Providers: Third parties that help us operate the Service (e.g., hosting providers, payment processors, email delivery services)
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We implement industry-standard security measures to protect your data, including encryption in transit (TLS), encryption at rest, secure password hashing (bcrypt), and session-based authentication with configurable multi-factor authentication. For more details, see our Security page.

We use essential cookies to maintain your authentication session. We do not use third-party tracking cookies or advertising cookies. Your session cookie is HTTP-only and secure, and expires after 30 days of inactivity.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Export your data in a portable format

To exercise any of these rights, contact us at privacy@getsystemi.com.

The Service is not intended for use by individuals under 16 years of age. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.