This is our privacy policy for all our apps and websites, as of October 2nd, 2019. By using our products:
- You agree that your information may be used according to the following policy,
- You agree that your information may be used according to the Security Policy,
- You agree to the Terms of Use (for cloud products) or to the End-User License Agreement (for downloadable products),
- You agree that Atlassian is not responsible for the privacy, security or integrity of Vendor-Collected End User Data.
Contents:
What information we collect
We mostly gather information through support cases. We also receive information from Atlassian through licenses ("Atlassian-collected end-user data"), Jira support issues, and from Google Analytics which we use our websites.
We host data created by users in our Cloud apps.
We don't gather any data when apps are installed by the customers on their own server, with the exception of the "feedback job" in Play SQL Base, explained in the table below.
How we use information we collect
We use the information to:
- Provide the service,
- Provide support for the software,
- Explain features and develop engagement about the software,
- Balance the time we spend improving features which are used the most,
- We may use information in aggregated form (statistics, etc) for advertising,
- For accounting purpose, concerning billing information,
- For legal reasons, to protect the owner, the company, the software or when required by law.
This includes:
- Customers with a license are added to a mailing list to notify them about features of the product. They can unsubscribe from this mailing list.
What data is collected?
Data collected in the products
Atlassian defines:
- Atlassian-collected end-user data (basically, the license details)
- Vendor-collected end-user data, which we've split in 3 categories:
- Data containing PII,
- Other collected data, in normal usage (The free data that users create in the application - We only "collect" this data when you use Cloud products),
- Data collected by the application when sending a support request (only for Requirement Yogi).
Atlassian is not responsible for the privacy, security or integrity of Vendor-Collected End User Data.
| Mode | Product | Status | Atlassian-collected end-user data (1) | Vendor-collected end-user data (1) | ||
|---|---|---|---|---|---|---|
| Data containing PII(3) | Other collected data, in normal usage | Data when submitting a support request through the app | ||||
| Server | Requirement Yogi | Paid | The license information | None | None | None since 2.2.5(5). |
| Server | Requirement Yogi for Jira | Free | None | None | None | None |
| Server | RY Testing & Compliance | Paid | The license information | None | None | None |
| Server | PSEA - Play SQL Export Add-on | Free | None | None | None | None |
| Server | SEO Manager | Free | None | None | None | None |
| Server | Play SQL Base | Free | None | None since 3.1.2(4) | None | None since 3.1.4(5). |
| Server | Play SQL Spreadsheets | Paid | The license information | Same as Play SQL Base | None | Same as Play SQL Base |
| Server | Play SQL Forms | Free | None | None | None | None |
| Server | ReqIF extension for Requirement Yogi | Free | None | None | None | None |
| Cloud apps | ||||||
| Cloud | Play SQL Spreadsheets | Paid | The license information | None | Application data(2) (spreadsheets). | None |
| Cloud | SQL Connector | Paid | The license information | None | Application data(2) (SQL queries, connection tokens to the database). | None |
| Cloud | CYO Create Your Own | Retired | None | None | Application data(2) (HTML and Javascript). | None |
(1) As defined in Atlassian Marketplace Publisher Agreement, section §8.4.
(2) Free data may contain PII if users have entered some.
(3) PII: Personally identifiable information (user names, email, phone number, etc).
(4) There used to be a feedback job in Play SQL Base and Play SQL Spreadsheets. This feedback job was removed in version 3.1.2 (see the history of this page).
(5) It used to be possible to submit support requests through the app. This feature was removed in October 2019 (see the history of this page).
What other data is collected?
- We have Google Analytics on our websites.
- Google collects data about page views which is returned in a form that is not personally identifiable to us, notably aggregated by location, age, gender or demographic factors.
- We do not engage in remarketing.
- We have NOT enabled Advertising features in Google Analytics.
- We have mailing-lists, managed by MailChimp. Users can opt-in, out-out and manage their subscription by clicking on the link in emails.
- Users can get support through a Jira Cloud website, which is under Atlassian's privacy policy.
- Users can get support by email, in which case we manage our emails through FastMail.
How we share information we collect
Play SQL is currently a sole-trader company (company type "SASU" in France) with:
- The founder, Adrien Ragot,
- If any employee or intern is hired, they sign a contract stating that they are strongly forbidden from leaking any information,
- Temporary contractors, hired for a specific time or project.
There are special situations where external people may have access to the data:
- In the situation where the company or one product is sold to a new owner: We sign a mutual NDA before the negotiation. Upon ownership transfer, the new owner takes responsibility for respecting or updating the current licenses and privacy policy.
- In the situation where someone illegally accesses our systems, we cannot provide control about your data,
- In the situation where we are compelled by law to provide this information, we cannot provide control about your data.
Here is what we allow:
| Information | Founder | Employees under confidentiality agreement | Contractors | Accountant |
|---|---|---|---|---|
| Billing | Yes | No | No | Yes |
| Application Data | Yes | Yes | Yes | No |
| Web Analytics | Yes | Yes | No | No |
| Support | Yes | Yes | No | No |
How we host and transfer data internationally
Security
Please see our Security Policy.
How long we keep information
We try to delete data as early as possible, except for backups which we keep a little longer.
| License information | License information is provided to us by Atlassian every time we need it. If Atlassian starts limiting the history, then we will store it for up to 2 years, mainly for accounting purposes. |
|---|---|
| User-created data in our Cloud apps | We delete data from the active databases as soon as the addon is uninstalled. We keep a backup of customer data for 2 months. |
Our providers, where we keep information and how it is transferred internationally
Our products are generally hosted by Digital Ocean, except our website which is managed by OVH, France. The computers we use to create software and access your information are located in France.
| Type | Product | Where it is hosted | Link | Data Processing Addenum |
|---|---|---|---|---|
| Cloud | Play SQL Spreadsheets | Digital Ocean, Amsterdam, Netherlands | https://www.digitalocean.com/legal/ |  Part of their ToS |
| Cloud | SQL Connector | Digital Ocean, Amsterdam, Netherlands | ||
| Cloud | CYO Create Your Own | Digital Ocean, Amsterdam, Netherlands | ||
| Cloud | Backups for cloud products | Digital Ocean, Amsterdam, Netherlands | ||
| Web | Our website | OVH, France | https://www.ovh.com/fr/protection-donnees-personnelles/ | Part 2 of their ToS |
| Mailing lists | All | MailChimp, USA | ||
| Fastmail | Fastmail, Australia / USA. | https://www.fastmail.com/help/ourservice/security.html | ||
| Documents | Encrypted backups of our administrative documents, invoices, work documents. | SpiderOak, USA | https://spideroak.support/hc/en-us/articles/360002173891-GDPR-and-SpiderOak | |
| Desktop | Our computers, our company, etc. | Encrypted laptops, desktops and hard drives, France. | - |
We plan to use Amazon Web Services in the future for several of those services.
How to access and control your information
You have a right to access the personal information we collect and correct it. Most of the processes are automated:
- Concerning the "feedback job" of Play SQL Spreadsheets, you can disable it in the "Privacy Policy" tab of your add-on,
- Concerning the data that is sent for support cases, you are notified and you can send an email manually to us,
- Concerning the free data that you create in the Cloud apps, you can edit it in the application.
- Concerning backups, our Cloud products contain a "Backup" page which can be used to export your data.
If any process is not automated or you do not know how to exercise your rights, you may exercise them by contacting Adrien Ragot at:
| gdpr@play-sql.com | |
Play SQL - Responsable GDPR 77 rue Maurice Flandin 69003 Lyon France |
How we update this policy
We may update this policy without notice, for the purposes of being more specific, reflecting a new practice or complying to legal requirements.
Change log:
- October 2nd, 2019: Added SpiderOak for our backups; Reflected the removal of support-requests-through-the-app features.
- January 29th, 2019: Rewrite, to comply with Atlassian's request for updated policies, to have one policy for all products, to be specific on the location of your data, and to reflect up-to-date information.
- September 11th, 2015: Add sections "What data we have", "Who accesses the data", "How we keep our servers secure", "How you can opt out" - see page history.
- November 11th, 2013: Rewrite, to go from generic statements to specific ones.
- October 2nd, 2013: Original version.
Application
Our Privacy Policy applies to all of the websites and software offered by us. It excludes services offered by Atlassian or any other provider.
When we receive formal written complaints, we contact the person who made the complaint to follow up. In case of dispute, we seek the best amicable resolution. We may work with appropriate regulatory authorities to resolve complaints. The privacy policy is governed by the laws of France, and, subject to the following sentence, in case of dispute, the parties irrevocably and unconditionally submit to the exclusive jurisdiction of the courts of Lyon, France.