Privacy Policy

1. Introduction and Scope

SprintIQ for Jira ("SprintIQ" or the "Service") is an analytics and AI-assisted reporting application developed and operated by EduQuencher, Inc. ("EduQuencher," "we," or "us"). This Privacy Policy describes how we access, use, disclose, secure, retain, and delete information in connection with SprintIQ and related support and billing activities.

SprintIQ runs as an application built on the Atlassian Forge platform and interacts with authorized Jira Cloud environments. Atlassian operates Jira and its underlying services under Atlassian’s own privacy terms. This Policy applies only to information processed by or on behalf of EduQuencher in connection with SprintIQ.

EduQuencher is responsible for its own processing of Jira information accessed by SprintIQ; Atlassian is not responsible for that processing.

2. Roles and Categories of Information

3. Purposes of Processing

We process information as reasonably necessary to provide dashboards, sprint and throughput metrics, trend and defect reporting, project insights, technical support, application maintenance, security monitoring, incident response, and compliance with applicable legal obligations.

We do not sell customer Jira information, use it for targeted advertising, or use customer information to train AI models. We do not use customer content for unrelated cross-customer marketing or external benchmarking without appropriate customer authorization.

4. AI-Assisted Insights

SprintIQ offers AI insights using Amazon Bedrock with the Anthropic Claude Sonnet 4.5 or later model. Authorized ticket-related fields may be sent to AWS Bedrock to generate insights and summaries. Because Jira fields can contain personal or confidential information, customers should limit sensitive information entered into Jira to what is appropriate for their organization.

EduQuencher does not intentionally store AI prompts or raw model responses as independent records in its own systems.

EduQuencher does not use Jira data to train AI models. Amazon Bedrock’s published service information states that model providers do not have access to customer prompts and completions for training through Bedrock. AI-generated recommendations may be incomplete or inaccurate and should be reviewed by a person before use in operational or personnel decisions.

5. Legal Bases and Customer Instructions

For Jira information processed through SprintIQ, EduQuencher generally acts as a processor or service provider and processes such information in accordance with the customer's instructions, the applicable service terms, and any applicable Data Processing Agreement. Customers determine how they use Jira and SprintIQ and remain responsible for their compliance with applicable privacy, employment, and data protection laws.

For information processed for EduQuencher's own operational purposes, such as application security, fraud prevention, service administration, technical support, legal compliance, and platform improvement, EduQuencher may act as an independent controller or business as permitted by applicable law.

6. Storage and Data Locations

EduQuencher-controlled persistent reporting and analytics information is stored in the United States, using Amazon S3 in AWS US East (Northern Virginia, us-east-1). Operational logs and backups under EduQuencher’s control are configured for U.S. storage. Atlassian Forge and Atlassian-operated Jira may process information under Atlassian’s separate infrastructure and policies.

AWS Bedrock may route inference requests between supported AWS Regions depending on the inference profile used.

7. Information Sharing and Service Providers

We disclose information only as required to operate the Service, at customer direction, to authorized service providers, or when required by law. Amazon Web Services provides cloud storage and Bedrock inference processing; Anthropic supplies the underlying Claude model through AWS Bedrock and is not independently integrated by SprintIQ in the configuration described. Atlassian processes Jira information in its separate platform role, and billing will be through Atlassian only.

We do not rent, broker, sell, or share Jira-derived personal information for cross-context behavioral advertising. Any other processor or additional external AI provider must be assessed and reflected in this Policy before it is introduced.

8. Security

The Service uses TLS 1.2 or higher for relevant transmissions, encryption at rest for stored information, restricted access, tenant-level isolation, encrypted credentials or secrets, and multifactor authentication for EduQuencher AWS administrators. Forge also supplies platform-managed authentication and controls for applicable functions. Security controls are intended to reduce risk but cannot provide absolute protection.

We maintain technical and organizational controls to prevent unauthorized access, inappropriate disclosure, and cross-customer access. We evaluate suspected security incidents and notify parties as required by applicable law and contractual commitments.

9. Data Retention and Deletion

EduQuencher retains the customer’s SprintIQ reporting and analytics information while the Service remains installed and authorized. Following verified uninstallation, EduQuencher’s retention process deletes customer information and associated backups within 3 days, subject to legally required preservation. Normal system and security logs are retained for 3 days, except where specific records must be preserved for an active incident, legal hold, or applicable legal obligation.

Customers may submit access or deletion requests to privacy@sprintiq.eduquencher.com. EduQuencher handles requests concerning information it controls, including its stored analytics. Customers remain responsible for deleting or correcting original records in their own Jira instances. We may need to verify the identity or authority of a requester before taking action.

10. International Transfers

If use of SprintIQ entails a transfer of personal information from a jurisdiction that restricts such transfers, we will apply the applicable safeguards and contractual mechanisms in the DPA or other appropriate documentation. The customer is responsible for determining whether use of a U.S.-hosted service is appropriate for its own regulatory and contractual obligations.

11. Privacy Rights

Depending on applicable law and the nature of the information, individuals may have rights to access, correct, delete, restrict, object to certain processing, or receive portable copies of personal information. Requests involving customer-controlled Jira information may need to be handled by the customer organization as controller; EduQuencher will reasonably assist where required by law or the DPA. Requests about EduQuencher’s own support may be addressed directly to EduQuencher.

For California residents, rights and exceptions under applicable California privacy law will be honored when those laws apply. EduQuencher does not sell personal information or share it for cross-context behavioral advertising.

12. Children

SprintIQ is intended for professional organizational use and is not directed to children under 13. We do not intentionally solicit children’s personal information.

13. Material Changes

We may update this Privacy Policy to reflect changes to SprintIQ, its service providers, our handling practices, or legal requirements. Material changes will be communicated as required by applicable agreements and law, including applicable Atlassian Marketplace obligations. The publication date will be updated whenever the published policy changes.

14. Contact

EduQuencher, Inc. | Privacy: privacy@sprintiq.eduquencher.com | Support: support@sprintiq.eduquencher.com