Privacy Policy

The SprintKraken platform is an AI-powered coding agent that integrates with project management and source control tools. This Privacy Policy explains how we collect, use, and protect your personal information when you use our services.

This policy applies to users of the SprintKraken web application and related services. By using SprintKraken, you agree to the collection and use of information as described in this policy.

We collect the following categories of personal data:

• Account information: Your name and email address, provided when you register or sign in.
• Authentication credentials: Password hashes (we never store plain-text passwords) and OAuth access and refresh tokens when you sign in via a third-party provider.
• Integration identifiers: Atlassian account IDs and related identifiers needed to connect your Jira workspace and Forge sessions.
• Personal access tokens: Hashed tokens you create for API access to SprintKraken.
• Usage data: Task execution metadata, job history, and workspace configuration required to operate the service.

We do not permanently store your source code. Code is processed in temporary, sandboxed environments that are discarded after task execution.

We use the information we collect to:

• Create and manage your SprintKraken account
• Authenticate you and maintain your session
• Provision and manage workspaces linked to Jira and Git providers
• Execute AI coding tasks on your behalf
• Communicate with you about your account or the service
• Improve and secure the platform

If you are located in the European Economic Area, we process your personal data on the following legal bases:

• Contractual necessity: Processing required to provide the SprintKraken service, including account data, OAuth tokens, and integration identifiers.
• Legitimate interests: Security monitoring, fraud prevention, and service improvement, balanced against your rights.
• Consent: Personal access tokens you explicitly create for API access.

SprintKraken integrates with third-party platforms to deliver its functionality. When you connect these services, data may be shared with or received from:

• Atlassian (Jira): For ticket management, workspace linking, and Forge app sessions.
• GitHub / Bitbucket: For repository access and pull request creation.
• OAuth providers: For authentication when you choose to sign in with a third-party account.

Each third-party service has its own privacy policy. We encourage you to review the policies of any services you connect to SprintKraken.

We retain personal data for as long as your account is active or as needed to provide the service. Task and job metadata is subject to defined retention periods and may be archived or deleted automatically.

When you delete your account or request erasure, we will delete your personal data from our systems, including OAuth tokens, access records, and account information, within a reasonable timeframe.

We implement industry-standard security measures to protect your data, including encryption of credentials, secure authentication flows, and sandboxed execution environments for code processing.

We do not log personal data such as email addresses, names, or authentication tokens in structured application logs.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Erasure: Request deletion of your personal data.
• Rectification: Request correction of inaccurate data.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law.

SprintKraken may process and store data in cloud infrastructure located outside your country of residence. Where required, we implement appropriate safeguards for cross-border data transfers in compliance with applicable data protection laws.

If you have questions about this Privacy Policy or our data practices, contact us at:

[email protected]

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of SprintKraken after changes take effect constitutes acceptance of the revised policy.