Privacy policy

Last updated: 7 November 2026

Premitive ("we") provides Aavan, including the Aavan for Jira app. This policy explains what personal data we process and why.

What we collect

Through the Jira app: the Jira site identifier and URL, the app installation identifier, and the Atlassian account ID of the administrator who links the site to an Aavan workspace. When someone views the Aavan panel, Atlassian sends us a signed token containing their account ID; we use it to verify the request and do not store it.

Through integrations the customer configures (for example GitHub): records of engineering activity such as pull requests, reviews and settings changes, which may include usernames of the people involved. Usernames are replaced by a pseudonym in the permanent evidence record and kept separately so they can be erased on request. Email addresses and commit message bodies are not collected. The customer decides which integrations to connect.

Operational data: server logs containing IP addresses, request paths and status codes.

Why

To provide the service: identify the Jira site, show the linked workspace's compliance results, and keep a tamper-evident record of evidence for the customer's audits. We do not sell personal data or use it for advertising.

Legal basis

Performance of our contract with the customer, and our and the customer's legitimate interest in reliable audit records. Where we process personal data on the customer's behalf, we act as their processor and follow their instructions.

Retention

Evidence records are kept for the life of the customer's workspace, because audit records must not be silently altered. Personal identifiers we are asked to erase (for example a closed Atlassian account) are removed from the places we store them. [what happens to a customer's data after they leave]

Where data is stored

[server location and hosting provider]

Security

Encryption in transit, encrypted connector credentials, least-privilege database access, and a hash-chained evidence store that makes tampering detectable. See Security.

Your rights

You may request access, correction or erasure of your personal data by contacting hello@aavan.app. If your data was provided by your employer's workspace, we may refer your request to them.

Contact

Premitive, [registered address]. hello@aavan.app