Legal

Privacy Policy

Last updated: May 16, 2026

A2A Gateway ("we", "us", or "our") operates the AI Triage Agent for Jira Service Management (the "App"), available on the Atlassian Marketplace, and the website at a2agateway.com. This policy describes what data we collect, how we use it, and your rights.

1. Data We Collect

From the Atlassian Marketplace installation

  • Your Atlassian Cloud site URL and installation identifier, provided automatically by Atlassian Forge when you install the App.
  • No personal account details (name, email, password) are transmitted during installation.

From the App settings page (entered by you)

  • Your Atlassian site URL (e.g., yourteam.atlassian.net).
  • Your Atlassian account email address.
  • Your Atlassian API token, which is stored encrypted at rest and used solely to read Jira issues and Confluence pages on your behalf.

From your Jira and Confluence instance

When you trigger a sync, the App reads:

  • Jira issue summaries, descriptions, comments, labels, priority, and assignee fields.
  • Confluence page titles and body content from spaces you have access to.

This content is chunked, embedded as numerical vectors, and stored in our database to power semantic search. The raw text is also retained to generate draft replies.

Usage data

  • Structured application logs including triage run counts, sync statistics, and error events. Logs contain your tenant identifier but not end-user personal data.
  • We do not use cookies, tracking pixels, or analytics on the App itself. The marketing website uses Google Analytics (see Section 6).

2. How We Use Your Data

  • To provide the service: Jira and Confluence content is indexed to generate AI draft replies on new issues.
  • To maintain the service: Logs are used for debugging, monitoring uptime, and diagnosing errors.
  • To improve the service: Aggregated, anonymised usage statistics (e.g., total triage runs, acceptance rates) may inform product decisions. No individual issue content is used.

We do not sell, rent, or share your data with third parties for marketing purposes.

3. Data Storage and Security

  • All data is stored on servers located in the United States.
  • Data is transmitted over HTTPS/TLS at all times.
  • API tokens are stored encrypted at rest using AES-256.
  • Access to production systems is restricted to authorised personnel only.
  • Each customer's data is logically isolated by tenant identifier — one customer cannot access another's data.

4. Third-Party Services

  • Anthropic Claude API: Issue content and retrieved context are sent to Anthropic's API to generate draft replies. Anthropic's Privacy Policy applies. Anthropic does not use API inputs to train models by default.
  • Atlassian Forge: The App runs on Atlassian's Forge platform. Atlassian's Privacy Policy governs data handled by Forge infrastructure.
  • Axiom: Application logs are shipped to Axiom for observability. Logs contain tenant IDs and operational metrics — no end-user personal data.

5. Data Retention

  • Indexed Jira and Confluence content is retained while your subscription is active.
  • When you uninstall the App, all data associated with your Atlassian instance — including indexed Jira and Confluence content, your API token, and configuration — is permanently deleted from our servers.
  • Application logs are retained for 90 days.

6. Website Analytics

The marketing website (a2agateway.com) uses Google Analytics (GA4) to understand traffic. This collects anonymised page view data. You can opt out using the Google Analytics Opt-out Browser Add-on.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Object to or restrict processing of your data.
  • Data portability.

To exercise any of these rights, email hello@a2agateway.com. We will respond within 30 days.

8. Children's Privacy

The App is not directed at children under 16. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the Atlassian Marketplace listing or by email. Continued use of the App after changes constitutes acceptance of the revised policy.

10. Contact

Questions about this policy? Email us at hello@a2agateway.com.